Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: p/uM3U/UsfMM6+IilEQ6JzU2meDmA2TrtvyoO89d6mc=
Subject key identifier: 77:69:77:59:84:A7:A9:FF:AD:B6:2C:3D:95:E0:55:19:D7:52:E9:61
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019D2704A7CCC67F36987E504AEB72C1B4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 08B6
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: 0dKz27FXmEvTUAS97w6oezHQSJM.roa (hash: O/nMJnxeA2xWpfnp6SVdaMqFKXk+z2ftNLJ81ExuMdU=)
2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: sQzfLMFsulQvSLEq4YWXJHeu2Jn63nV7U97WsdCtnaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a7:cc:c6:7f:36:98:7e:50:4a:eb:72:c1:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=7769775984a7a9ffadb62c3d95e05519d752e961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:ce:10:82:04:56:8a:c4:4b:5f:0d:05:37:
62:bc:c6:41:55:5b:8a:67:bb:c9:f2:f5:90:b2:4b:
ba:f1:ee:f8:ca:8c:63:39:6e:22:69:53:6d:5c:e4:
91:c6:d0:c9:1e:6d:86:87:c9:0a:37:50:db:4f:6d:
f5:9f:e4:e7:2c:9b:dc:b9:79:84:99:5f:05:68:ba:
1b:fa:ed:f2:c7:d7:aa:f6:98:e3:96:89:92:65:46:
8c:56:70:a9:22:8e:dd:56:9a:cb:d8:65:db:1c:a1:
be:41:b4:75:85:3f:1e:c7:46:f2:af:ec:33:ea:f6:
e6:e5:5a:b7:55:88:a5:ef:51:45:5f:a5:a0:33:6f:
7b:64:2b:4c:bc:a1:b8:db:5f:3b:bc:9e:00:c2:1b:
d6:c4:96:37:90:0c:25:19:25:cb:ff:c0:57:1a:fb:
ff:27:e4:70:27:ab:4a:bc:95:ca:fa:0c:a1:8f:bc:
58:70:fb:7d:83:7c:cd:28:04:77:d7:e9:33:cc:a0:
d1:13:3b:b9:88:76:6c:1c:10:29:34:8e:84:60:89:
09:39:f3:79:a4:3c:51:8a:79:0d:57:23:e3:75:82:
90:1c:47:0c:d8:5b:47:ad:c7:e8:da:3e:84:1d:6d:
9b:f7:56:05:c5:fb:ed:49:7f:14:d0:39:d7:c6:07:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:69:77:59:84:A7:A9:FF:AD:B6:2C:3D:95:E0:55:19:D7:52:E9:61
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:84:33:22:90:47:1b:7f:ef:05:35:68:a0:92:24:22:b9:
50:4c:73:f8:81:6f:2a:d1:c7:9f:95:4c:60:3d:f7:df:74:d4:
e3:e7:44:7c:4f:81:40:d0:4a:d7:9a:83:b1:bb:09:d2:fe:55:
ca:5f:87:31:39:67:f2:9d:76:63:64:ba:59:70:a6:3d:da:90:
fa:52:82:2e:44:54:78:6c:08:09:70:82:7a:c3:f4:b5:94:76:
89:8b:e0:70:83:76:f8:73:59:3c:f5:f3:62:6f:31:61:14:93:
c5:23:3e:12:f4:84:1d:88:13:5a:89:d2:a5:3c:df:eb:a4:09:
80:a2:23:33:ab:6b:a8:db:5e:d1:93:3b:ae:eb:56:da:e5:d2:
c0:d1:70:1d:d1:47:66:34:89:0e:88:d4:2d:66:ca:f6:d5:6b:
64:12:73:77:b2:33:be:99:f5:af:08:5f:84:f3:ef:3d:83:4f:
42:db:10:b8:a3:9f:cd:db:0e:50:b2:d4:e2:ef:81:dd:0b:8c:
95:95:f2:44:65:da:0e:b2:1a:2e:b7:a7:bf:4d:b7:a9:1e:b5:
d5:ee:8f:67:e8:5d:e8:76:70:0c:77:2f:df:7a:0f:c2:39:45:
93:5a:11:51:49:03:75:ce:9f:b1:9a:4c:86:ca:09:c1:e3:4e:
d3:44:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:03 2026 by rpki-client