Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: RDqlGuLQ+z4Dj0uAb7Ldx4Mr3sSv95rUXtgkXJNeeEQ=
Subject key identifier: 59:9F:52:E0:F3:FA:36:D8:A3:75:BE:1F:F2:58:1A:F4:6E:CD:DF:A9
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019D27A8B217E9DDA05FCB18F2D6253DDE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0C13
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: 3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa (hash: JXEf/2aFK3BkZHNCEWJcH/8ouUNCu/50cDZ97h1t3QI=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: Y7MKspSVRZXK22nSp5k10RgcRUdhuj/YmryRPlA2gSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b2:17:e9:dd:a0:5f:cb:18:f2:d6:25:3d:de:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=599f52e0f3fa36d8a375be1ff2581af46ecddfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:01:7e:ce:7e:4d:0c:6c:a6:34:e1:7d:57:
63:dc:b1:f6:ec:e1:bb:a2:df:24:1c:7d:5e:61:72:
81:9b:8e:a7:23:32:16:e8:1b:84:5f:f2:92:05:63:
a2:b6:96:17:05:5f:e9:55:dc:0c:6b:8b:a9:a6:a5:
7b:0d:e8:c1:b8:a7:15:3b:0e:36:11:b9:09:13:0e:
d8:1d:58:c6:f6:65:f9:a3:06:75:2d:f5:11:17:5b:
0b:79:0d:a6:02:69:c6:d5:de:6c:e5:86:1e:d6:68:
8f:42:2d:eb:84:96:ad:be:dc:b0:7c:f7:61:ce:33:
5c:29:e7:d1:29:ed:28:63:90:8d:9a:6e:1c:86:8c:
c4:49:5a:d3:96:90:bf:f4:36:79:a5:84:f5:f7:67:
12:87:05:c2:3d:96:c5:c1:09:30:aa:12:cc:03:1c:
d8:66:d5:76:aa:0b:06:f2:3b:6e:11:5c:b5:af:09:
1f:95:46:39:5e:50:46:b2:c0:08:6c:80:81:96:d8:
71:3d:d5:52:df:05:b0:de:9b:0c:d9:af:43:dc:e5:
0f:c3:61:d2:8c:f4:c8:88:62:8d:21:55:b9:b9:b0:
9a:9a:b8:f7:55:e5:ff:32:18:a8:92:78:11:72:b7:
e7:e6:b8:38:f2:e6:49:89:de:e7:25:d1:2d:96:43:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:52:E0:F3:FA:36:D8:A3:75:BE:1F:F2:58:1A:F4:6E:CD:DF:A9
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:83:d7:4e:ef:d2:b2:b9:e0:6d:e2:c5:17:6d:ad:9d:dc:
70:55:32:81:e9:92:ce:50:5c:de:db:91:ad:5a:aa:d4:8a:f4:
f4:24:fc:9b:99:45:9e:fd:b0:83:dc:88:68:cd:3d:be:05:00:
d7:20:a1:23:7c:f5:90:8d:45:82:e1:97:a2:0d:5a:d7:61:80:
d5:24:cd:c6:e5:69:f1:74:29:43:16:cb:01:68:c7:7f:1b:81:
25:04:33:50:66:5b:b6:15:66:52:33:b5:17:99:a3:08:07:e1:
62:1d:2e:bd:1e:79:88:9b:dd:0f:6e:d0:d1:41:93:fb:d5:89:
f6:8c:e4:b9:6b:85:51:14:0f:e9:20:5a:b1:e6:25:d3:03:87:
58:ef:f8:e0:ba:c5:ca:4c:69:32:a0:16:18:87:2e:df:7a:e7:
6a:60:b7:87:67:44:76:45:57:e8:78:b9:5b:68:b1:ac:a1:77:
4c:d5:5d:f3:2e:5d:85:2e:ec:f8:e3:32:72:a5:4e:80:34:5e:
0f:bf:87:fc:f0:3e:02:2b:27:23:ad:70:99:81:d0:4d:91:b9:
ed:51:4b:7a:cf:8c:72:df:fc:01:61:6d:de:07:d3:47:6c:b3:
c9:b6:9d:cc:22:7d:df:98:9e:c7:df:4b:8e:6a:9c:d9:cd:fa:
f7:fd:2d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqLIX6d2gX8sY8tYlPd4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1ZTM4M2U5Y2Q0NGE3MjQ5YWM1ZDQxYjZkZmFkZjQz
NTdiNGYwHhcNMjYwMzI2MDEwMTAwWhcNMjYwMzI3MDEwMTAwWjAzMTEwLwYDVQQD
Eyg1OTlmNTJlMGYzZmEzNmQ4YTM3NWJlMWZmMjU4MWFmNDZlY2RkZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl44Bfs5+TQxspjThfVdj3LH27OG7
ot8kHH1eYXKBm46nIzIW6BuEX/KSBWOitpYXBV/pVdwMa4uppqV7DejBuKcVOw42
EbkJEw7YHVjG9mX5owZ1LfURF1sLeQ2mAmnG1d5s5YYe1miPQi3rhJatvtywfPdh
zjNcKefRKe0oY5CNmm4chozESVrTlpC/9DZ5pYT192cShwXCPZbFwQkwqhLMAxzY
ZtV2qgsG8jtuEVy1rwkflUY5XlBGssAIbICBlthxPdVS3wWw3psM2a9D3OUPw2HS
jPTIiGKNIVW5ubCamrj3VeX/MhiokngRcrfn5rg48uZJid7nJdEtlkOgDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmfUuDz+jbYo3W+H/JYGvRuzd+pMB8GA1UdIwQY
MBaAFK/zXjg+nNRKckmsXUG23630NXtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTIt
NTcwYWVkNThjMTk0LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xNTAyODItYzllMC00NGUzLWFhMTItNTcwYWVkNThjMTk0
LzEvcl9OZU9ENmMxRXB5U2F4ZFFiYmZyZlExZTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQ2D107v
0rK54G3ixRdtrZ3ccFUygemSzlBc3tuRrVqq1Ir09CT8m5lFnv2wg9yIaM09vgUA
1yChI3z1kI1FguGXog1a12GA1STNxuVp8XQpQxbLAWjHfxuBJQQzUGZbthVmUjO1
F5mjCAfhYh0uvR55iJvdD27Q0UGT+9WJ9ozkuWuFURQP6SBaseYl0wOHWO/44LrF
ykxpMqAWGIcu33rnamC3h2dEdkVX6Hi5W2ixrKF3TNVd8y5dhS7s+OMycqVOgDRe
D7+H/PA+AisnI61wmYHQTZG57VFLes+Mct/8AWFt3gfTR2yzybadzCJ935iex99L
jmqc2c369/0tBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:33 2026 by rpki-client