Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: 81BQfL6O8JM6089IkEPOdwVFXv0+mnHAmir3m9YK8D4=
Subject key identifier: 19:F2:E7:7D:BC:A5:16:0F:0D:2D:71:95:F0:56:C1:22:45:15:80:26
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019D265F37282D081FAAA9AC3925A7480B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 078A
Signing time: Wed 25 Mar 2026 19:01:07 +0000
Manifest this update: Wed 25 Mar 2026 19:01:07 +0000
Manifest next update: Thu 26 Mar 2026 19:01:07 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: 28MQG/U7d9ICVcJfm3L0/UaSTMJSF0LX5SQjqeIEDgM=)
2: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
3: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:37:28:2d:08:1f:aa:a9:ac:39:25:a7:48:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Mar 25 19:01:07 2026 GMT
Not After : Mar 26 19:01:07 2026 GMT
Subject: CN=19f2e77dbca5160f0d2d7195f056c12245158026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:0c:97:77:f2:1a:2c:10:ef:8a:9a:d6:ee:
fa:bb:72:f4:36:88:8a:58:be:b4:f4:35:48:d6:2e:
e4:82:0e:97:37:d2:a2:99:30:21:61:da:1b:2f:8c:
0d:8d:fc:05:6a:88:e4:bf:02:b8:b5:28:32:99:ff:
9c:cc:db:85:d8:5d:a8:5e:73:1d:a7:51:7d:56:ad:
ac:da:c4:73:86:8c:27:71:30:0c:8c:3a:ce:27:cf:
11:a5:72:ee:d6:2f:ef:18:d6:5f:3f:7d:bb:ec:75:
22:9e:82:85:67:f6:f8:f1:6d:ca:5e:99:25:d1:03:
63:f7:67:58:de:60:51:b9:b4:89:fc:19:a9:d2:ed:
38:20:a5:ac:f1:64:52:af:d7:25:bc:3f:01:6c:5a:
c2:81:1d:b1:2e:db:1c:98:73:02:0a:eb:a9:55:48:
b0:33:67:db:9a:a6:bd:99:07:d6:cc:6f:4f:39:d1:
52:27:e6:68:fa:ce:d3:2e:b5:23:f1:05:38:86:3e:
d7:f9:35:30:89:1d:00:20:22:fc:74:0e:f6:ea:52:
d5:36:1a:27:77:31:a3:aa:89:bd:d7:80:e6:e4:70:
1e:4f:c1:fe:93:32:2b:c1:dd:c8:f7:41:74:07:a9:
28:ad:8d:72:56:f9:9f:73:5c:8d:81:4e:f6:e2:13:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:E7:7D:BC:A5:16:0F:0D:2D:71:95:F0:56:C1:22:45:15:80:26
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:da:f6:bc:6d:26:bc:ee:a5:fc:16:2d:78:b7:d6:3d:21:
75:80:60:1b:74:31:63:da:d2:8a:30:a5:c5:54:8c:d6:18:04:
35:b3:64:05:08:8e:45:1d:ff:5d:dd:ed:52:3a:ee:76:5e:f8:
0d:83:01:b0:1f:d0:5e:b5:3b:7a:76:4e:20:cd:08:d6:a8:0a:
24:2c:59:ee:04:58:96:e2:c5:4f:b9:cb:66:0d:7f:1f:57:3a:
be:c2:44:d8:4d:ff:4d:64:1c:7d:01:a1:61:6f:ab:f5:6d:c8:
01:20:e2:d1:d3:21:ee:6f:53:59:c7:f9:35:8b:36:d3:08:9d:
3b:38:43:d0:ec:7b:1f:80:e8:f9:36:3e:09:b3:a2:53:87:16:
22:0d:32:28:10:01:8c:01:56:1c:20:29:df:66:a6:e9:2a:d2:
74:2b:63:9a:4b:36:fb:f3:ee:97:34:65:f2:f0:bd:68:16:9e:
31:c9:73:6d:f6:76:3f:e2:78:a7:47:73:04:de:5e:a9:5e:f1:
b7:75:22:42:bb:d3:82:4e:fb:63:31:f9:d1:fd:83:9a:8b:09:
a6:14:68:a2:a3:4c:61:b3:ed:5b:e2:98:82:c5:69:b7:85:44:
4e:9c:a3:4d:66:dc:e7:f2:bb:90:26:e6:7e:31:91:06:97:43:
66:1a:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:15 2026 by rpki-client