Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: Y9g7Wmg0VVdVhHXeYnxajymCRr74Sud6DJaTxMN2XGo=
Subject key identifier: 3E:87:8F:46:18:1F:0F:FB:3E:8D:DC:82:D8:E1:1D:72:55:3E:2F:C2
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 019D25F190D1A445C68AF1EE08E34C3DBDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 158B
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: IEePDjWIaVXLuW3itE_AzBzTOC4.roa (hash: vnmA7r4TvlqCSHwR52jJ5zRprAPhiYq8N3EloxYQoI4=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: Lqf46JJbnEkjklnesATT7l9NT+k1qI8UbMA0ney3KZI=)
3: O5Y2NwPNUGHcqnEAv2khEfuYfww.roa (hash: wxeDJgWK/O5UPofjmWqVX0YN/5RLHzZTTnSEdLWmG9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:90:d1:a4:45:c6:8a:f1:ee:08:e3:4c:3d:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=3e878f46181f0ffb3e8ddc82d8e11d72553e2fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:63:11:bb:e6:c9:db:72:2c:19:4a:b9:f2:
5d:30:28:cb:34:b5:57:a1:75:38:fc:02:5d:78:e8:
b9:b0:65:55:d4:a8:ab:d7:7e:00:37:81:e8:e1:9f:
83:4b:e3:08:55:09:d1:17:85:d8:99:76:bc:16:f1:
ad:92:52:57:8c:ba:ca:4c:79:91:de:72:39:29:08:
2b:2d:d1:8b:c4:ef:f8:51:7c:4d:ec:25:33:e3:b9:
28:e9:c4:95:bf:0a:b5:87:5c:68:a8:8f:a0:8e:46:
e2:38:9f:ed:a3:76:f8:9c:b9:18:52:c2:84:55:b7:
2b:a7:fa:23:ca:c5:11:21:05:f1:6b:0e:fe:a5:ab:
4d:5e:72:2c:6b:57:bd:9a:ea:1d:c4:8c:d0:85:ed:
9d:29:5c:9d:a5:f7:1d:51:66:a5:41:40:be:3d:70:
ee:c8:6b:12:ba:ab:c7:5c:83:36:34:36:d7:70:e3:
80:ed:37:f3:0f:bf:b0:8f:be:35:c2:f4:ec:1d:36:
35:8c:0c:0e:78:c4:36:a0:74:b4:3b:d4:9d:82:65:
6b:8b:69:1d:35:12:71:f4:69:24:81:33:8b:0a:9a:
c7:2d:12:ec:0d:10:88:1a:ad:f4:02:12:8c:e8:cd:
b9:aa:ea:fc:e3:78:94:bc:6f:0f:82:ef:ef:3c:48:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:8F:46:18:1F:0F:FB:3E:8D:DC:82:D8:E1:1D:72:55:3E:2F:C2
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:93:1e:62:9a:4b:99:e6:cd:b9:56:ba:cc:45:fa:64:30:08:
7c:b6:be:1c:31:04:4b:d5:bc:cb:69:44:3d:09:ce:d9:39:38:
da:e7:1c:85:70:89:e1:92:fa:40:ae:7d:ac:21:90:4c:4d:d3:
49:6e:47:24:72:0e:99:01:ba:1c:41:f3:e1:7c:45:0a:65:53:
07:58:b2:2e:15:2b:65:ee:ae:99:1a:92:02:48:52:63:94:67:
d2:4b:e6:3a:58:b8:2c:4c:9c:2c:41:3a:66:a1:b3:d9:eb:8c:
1f:9f:81:48:c7:98:20:c6:c5:94:0c:fb:30:d7:d3:ed:ca:0b:
42:37:a6:77:a4:58:b7:87:2b:4f:23:37:e5:4d:85:b1:d6:94:
3d:fc:15:4a:4a:12:af:37:78:58:22:81:f3:62:f7:45:c2:3e:
6b:fc:d0:82:b2:5b:e8:05:d1:b9:03:ff:70:91:22:55:c8:e1:
bf:06:f6:93:ff:91:a8:53:3e:4c:de:63:e0:cc:9f:99:a5:94:
9f:06:d0:20:46:11:98:2b:24:c9:b6:15:39:de:c0:0b:ff:6d:
38:c2:2b:a3:b3:67:2f:f6:80:5b:cf:90:85:71:ac:90:75:16:
d9:7c:23:26:9e:96:c6:8d:cf:2f:2b:64:ad:0d:a3:40:fa:77:
53:23:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:24 2026 by rpki-client