Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: oWzSUr/BsyrOwr10lbEZqAQn1R9imMToqrml693kSlA=
Subject key identifier: A4:FF:7D:EA:6E:CA:F2:E4:8E:9F:12:AB:17:89:5A:88:D7:D7:94:07
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019E1D902DB8AAB06764A47AD1CE88B91DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 080A
Signing time: Tue 12 May 2026 19:00:48 +0000
Manifest this update: Tue 12 May 2026 19:00:48 +0000
Manifest next update: Wed 13 May 2026 19:00:48 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: u7qer4gVgfCciG/8PoI74B9OZ8H31g0r6+VYfuGh1OI=)
2: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
3: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2d:b8:aa:b0:67:64:a4:7a:d1:ce:88:b9:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: May 12 19:00:48 2026 GMT
Not After : May 13 19:00:48 2026 GMT
Subject: CN=a4ff7dea6ecaf2e48e9f12ab17895a88d7d79407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:c1:17:12:3d:0f:3b:23:25:72:59:af:f1:
c3:50:fd:78:56:3d:53:5d:2a:d7:91:6a:79:2d:4b:
11:6d:7f:cf:a0:d5:27:05:b8:16:6a:2e:82:95:d8:
67:71:d6:34:b3:a7:61:5d:f8:eb:f8:26:1c:80:73:
53:18:70:e6:69:5f:f0:d9:1c:fc:98:fc:08:23:94:
86:d1:b5:07:5c:cf:b6:96:4f:5a:84:e0:e5:33:5c:
96:39:90:13:ab:6c:1e:d5:a4:d6:68:92:d0:5c:ee:
5f:8a:d9:06:25:0d:bb:44:6e:4c:5c:a8:1d:b0:64:
d4:c2:99:15:85:39:1b:34:fd:31:61:79:91:df:29:
92:cc:1b:b3:54:09:f8:35:52:aa:8a:80:94:3f:dc:
3d:10:ad:92:4b:1c:56:35:67:5c:75:f0:06:f8:7b:
65:a7:ce:68:dd:73:bf:bf:99:76:4d:e6:d7:55:50:
64:6d:07:4b:0f:3a:1f:57:53:8b:6d:36:99:3e:54:
f5:e1:2e:f4:3c:7a:d2:13:5b:8a:7b:e0:c5:1b:f5:
31:3a:a0:71:49:d0:dd:63:9f:bf:f8:52:3e:6d:52:
e6:4d:2b:81:e1:b9:c7:d6:01:21:90:13:35:c1:a1:
23:a2:e6:49:53:79:9c:56:9f:ab:e1:cd:02:bc:7f:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:7D:EA:6E:CA:F2:E4:8E:9F:12:AB:17:89:5A:88:D7:D7:94:07
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0e:b7:9e:08:76:c2:a5:04:3c:49:36:d8:79:97:77:c8:01:
12:58:8d:f4:13:cb:b8:e6:99:0c:9b:11:81:e6:af:4d:0d:00:
a5:88:3f:1a:de:e2:96:2e:b7:82:dc:d2:ab:dd:2d:a8:08:b6:
08:2c:92:08:6e:3f:02:71:df:36:81:30:c0:b8:61:7a:8d:3d:
7d:35:77:e6:5c:17:7d:22:fc:1c:81:9b:e5:ce:77:42:f9:5e:
e8:e3:b9:c6:f7:75:25:2f:a3:19:32:cb:00:83:6c:e2:b8:5b:
11:10:a1:6f:b1:0a:a0:e8:31:e5:fe:1e:ec:d8:9f:51:f1:5e:
14:00:03:04:75:b4:de:70:c6:41:57:b7:50:47:d9:0e:b9:ee:
f5:7e:84:40:67:f2:7d:71:fd:b1:14:0f:25:ef:06:07:72:1c:
e7:77:d6:f3:b0:9d:3d:eb:77:74:09:75:dc:15:4f:55:72:06:
eb:ab:a7:ab:b5:61:da:85:17:63:bb:fc:4d:a9:63:02:93:23:
c7:6b:19:49:fb:2a:9b:14:92:8c:7c:e8:d4:ef:7b:dc:64:56:
88:d1:13:fa:1d:e3:9c:4f:e0:07:10:2b:00:6c:51:00:a3:7a:
1b:d5:b8:4d:cb:bf:8f:97:b6:eb:af:c0:e2:d1:ce:3e:ca:29:
49:9c:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:50 2026 by rpki-client