Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: 3qmew+/h1QJdf+EB3KIfCagsIVJ2pEuvbW93Go5OXVo=
Subject key identifier: 26:81:F3:8A:64:D2:DA:21:BE:57:07:3B:59:B6:EA:CE:13:AA:7F:06
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 019D2703BFE79423F0E970DEBF67A18A73BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 10CA
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: oav5s/0PvtLPLVjzae8WECUVS7Q7X+87dtzPNKZCSC8=)
2: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (hash: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:bf:e7:94:23:f0:e9:70:de:bf:67:a1:8a:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=2681f38a64d2da21be57073b59b6eace13aa7f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:7e:06:64:32:00:a6:48:7c:ee:f7:39:bc:
b1:26:66:56:2f:56:9a:83:1a:ef:d3:47:96:01:ba:
27:32:0b:71:b2:70:4a:da:9c:64:7d:ea:11:4a:b5:
d0:c9:17:88:af:7f:26:ed:7d:44:03:ef:f4:0f:b8:
72:f4:75:8d:4f:e9:5d:79:a6:7b:6e:64:07:53:06:
fd:9d:19:86:30:13:26:5b:8b:d2:57:cc:63:8e:07:
38:7b:4b:6c:86:8f:a7:9a:97:6c:3d:ed:90:af:71:
34:04:c3:11:74:4a:3a:f4:75:c4:ea:c9:28:11:1c:
69:7a:1c:18:b3:86:02:eb:7b:ee:7f:83:cb:6d:40:
35:ca:3a:c2:35:33:c4:25:62:bd:ec:05:72:89:01:
d1:b7:7a:e8:c1:89:46:1b:9c:39:32:fd:e7:e6:7e:
a2:21:e2:47:8d:53:dc:9e:56:8d:7a:6f:41:de:85:
d3:ea:e0:01:91:e9:8a:8e:7a:24:6a:e1:db:b4:49:
c8:43:33:ff:62:64:2f:48:19:91:7c:d6:24:ef:fc:
6f:09:d8:a4:83:c1:98:b2:fb:17:e9:f3:8a:1d:73:
e1:e9:d6:3d:06:39:9e:f3:07:ec:d4:84:3c:55:10:
d7:6e:c7:28:2a:7e:de:c2:d2:5d:83:7e:3c:dd:c3:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:F3:8A:64:D2:DA:21:BE:57:07:3B:59:B6:EA:CE:13:AA:7F:06
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:3b:04:7b:cf:66:4c:f6:ef:e4:3d:79:05:1b:b2:88:7a:
a0:4d:17:bb:d6:97:c3:8e:d7:9a:8b:b6:b1:9e:4c:cc:e7:96:
e9:1b:b6:d7:f6:57:60:0e:3f:92:27:c5:b3:0c:b2:80:79:0c:
7a:d9:e6:79:46:9d:9e:f5:a9:db:c9:52:72:0e:d8:6d:14:4b:
57:e8:c1:69:ee:2d:5a:4d:02:8d:8b:2a:4b:20:b8:5f:bb:2b:
00:89:48:e7:4e:d6:4f:b5:bb:a6:ec:9d:27:fb:f7:d4:8d:3d:
2f:2d:e9:37:c2:41:80:78:7b:b9:d7:19:35:84:3d:94:b4:d4:
48:42:d0:47:29:5e:ba:b5:ba:de:20:00:81:0c:6e:2f:8d:d6:
99:4c:b6:d8:54:aa:22:23:80:4d:08:6b:69:a4:85:81:23:b6:
8b:5d:25:4b:83:b0:66:00:3f:52:9b:83:0b:03:d2:e4:8a:c9:
dd:02:a6:ec:2c:a6:5f:d4:a1:8b:3c:58:51:a4:fa:7c:ab:83:
a8:4a:78:06:67:26:1a:5e:19:57:96:99:75:04:29:95:96:3b:
fb:f2:ee:7e:6e:14:39:ff:37:98:e2:7a:31:79:75:03:fd:33:
c0:2a:03:48:38:9b:f7:59:7e:2a:58:c9:a5:3b:b4:80:b1:fc:
9d:c3:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:23 2026 by rpki-client