Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: /a/Idmp/jsqtts9aubX794QQnEQRLn9zbQLrOjF08zI=
Subject key identifier: 4F:0E:C4:B7:6A:CF:A3:FD:D2:F6:F0:59:AD:A9:14:6B:DA:24:ED:96
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 01A0CFA4B5D6212A802959D2EEEAE216653F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 12AF
Signing time: Wed 23 Sep 2026 19:01:13 +0000
Manifest this update: Wed 23 Sep 2026 19:01:13 +0000
Manifest next update: Thu 24 Sep 2026 19:01:13 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: dM0Ar7ozpAyquDdB5sD9XBMTQG4DrKrKWgSkdgQOaIk=)
2: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (hash: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b5:d6:21:2a:80:29:59:d2:ee:ea:e2:16:65:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Sep 23 19:01:13 2026 GMT
Not After : Sep 24 19:01:13 2026 GMT
Subject: CN=4f0ec4b76acfa3fdd2f6f059ada9146bda24ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:a8:df:d9:e1:59:1c:ae:52:4b:70:e4:2b:
01:33:cf:7f:93:90:b7:ca:16:b6:f3:89:a0:c8:c6:
0a:b2:28:0a:36:fe:9c:53:68:20:b0:3b:85:3b:08:
bc:80:80:0c:2b:5a:27:fb:b4:c4:f8:a2:fb:0e:e0:
81:b6:83:e1:fc:ff:8f:6c:5a:0c:44:f0:d1:32:79:
2e:c9:ed:1e:9e:68:97:84:bb:34:6f:e4:ea:6f:95:
41:09:36:56:0a:f8:de:d7:2d:5c:b2:2e:77:34:ec:
30:de:24:c1:27:a0:3b:4d:2f:b7:9a:d8:93:65:c5:
aa:11:4f:94:11:cd:0b:b7:f5:90:2a:21:6c:7d:de:
b0:ef:58:cc:43:b7:d2:bb:46:84:19:79:1f:27:76:
ac:12:67:52:e4:4d:8e:bd:94:de:54:0c:65:4b:20:
a9:d4:9a:2d:d5:c0:85:f0:3b:a9:f6:d1:a4:25:75:
5f:6d:7d:cf:e0:df:0a:b7:64:f0:a5:9b:53:cd:15:
08:0b:fc:c1:8c:9b:9c:b8:99:72:e4:c2:c8:8b:a0:
40:8e:b9:65:0f:03:42:47:0d:1a:1d:58:56:80:d9:
c6:ae:40:d9:21:fb:3f:b3:6e:11:13:7b:f7:ad:73:
ac:db:72:41:2f:ba:67:80:a5:9b:9a:06:75:7d:59:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:C4:B7:6A:CF:A3:FD:D2:F6:F0:59:AD:A9:14:6B:DA:24:ED:96
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:30:c0:9a:de:ec:b9:f2:87:51:3d:7f:65:1c:37:a8:e9:
8f:3d:a3:ee:f3:c5:46:38:a0:41:f7:7c:3b:64:66:60:64:01:
b9:43:9e:a6:a6:a0:b8:c5:bb:4b:a3:fb:da:14:70:40:b8:34:
21:56:a5:84:22:39:3f:c6:fd:d4:f2:f3:74:18:61:c3:89:08:
6d:49:de:68:ff:1a:50:33:77:7c:f6:6b:40:6d:a3:48:4c:a6:
20:7d:5e:59:24:4c:6d:78:07:d7:50:e1:44:89:3e:42:a6:9d:
31:fb:df:22:48:66:0b:11:aa:f1:9b:fb:ba:ac:73:12:72:83:
b3:dc:fe:a7:20:c1:63:1f:d6:d6:f5:bd:3e:99:6b:3b:ec:f8:
dc:86:e6:e3:df:0b:a2:7f:e8:f1:40:bb:91:d6:69:d7:20:41:
bb:8c:49:cf:e8:1c:62:88:4d:41:a8:c8:ae:de:a8:70:64:df:
32:b0:2a:f4:71:78:ca:b6:10:0c:ee:65:37:18:6e:31:e6:e5:
21:c3:84:2b:31:70:26:31:04:e2:bc:dc:4e:e6:57:24:c0:22:
d5:f9:9c:75:98:62:5e:c9:3e:36:72:81:f6:4b:77:29:50:aa:
e7:58:44:3c:3b:07:5d:a9:08:01:8a:ec:58:65:6a:d1:94:27:
0c:db:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:02:35 2026 by rpki-client