Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: qfp+PCzcEsCjwt5w2RHx4etvT3sj4pcDJmnjRIPTy0M=
Subject key identifier: A8:E3:F5:28:F9:A5:97:20:8F:1C:B6:B7:72:79:3B:DD:76:4F:96:3C
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 01A0E174F020A9E20C742DA3A4A048C1F0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 06:02:12 +0000
Manifest this update: Sun 27 Sep 2026 06:02:12 +0000
Manifest next update: Mon 28 Sep 2026 06:02:12 +0000
Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: YTOrW6wqoIgqj8ttwY0TG4j4bla6NqyM5pE6CrUwabg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:f0:20:a9:e2:0c:74:2d:a3:a4:a0:48:c1:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Sep 27 06:02:12 2026 GMT
Not After : Sep 28 06:02:12 2026 GMT
Subject: CN=a8e3f528f9a597208f1cb6b772793bdd764f963c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:ee:b9:d2:ab:5f:2d:46:cc:39:c7:41:fa:
f2:1c:ab:b7:88:7e:f3:bb:ef:f1:b3:cb:c9:ec:b1:
6c:e7:90:c4:08:f8:f3:53:93:20:a7:40:1f:4a:36:
90:61:10:2c:3f:70:3d:5b:9d:05:7e:41:90:34:3c:
ae:60:c7:09:ca:f2:95:bb:7e:0b:1e:50:0e:65:c3:
a1:4f:f9:76:f4:48:64:71:38:42:13:c7:dd:dd:94:
da:d3:e9:5e:ca:42:60:30:b4:ff:63:62:65:01:0a:
09:dc:1f:a7:1e:db:15:66:7d:32:a4:09:fe:3c:75:
c7:d0:fc:90:a0:d5:41:3d:20:a0:80:3f:f5:ee:a7:
2d:b1:3c:98:12:f9:1a:4a:4e:10:9a:93:9e:1c:ab:
f4:2d:f0:d6:b5:45:dd:66:05:95:90:b4:ec:47:46:
7a:eb:08:70:f7:a7:42:5e:23:43:61:bf:5e:bd:e0:
dd:6e:06:d4:26:0a:30:90:9b:9a:e3:5b:ea:59:fa:
d4:68:b6:5e:8f:0b:80:3f:3f:96:37:c7:0e:63:3c:
3e:b7:06:e9:15:dd:3e:39:4a:cc:0d:d7:94:ac:51:
5b:7d:3a:91:e3:09:de:4d:41:a8:0a:ef:66:da:a7:
09:9b:89:80:aa:d6:f9:8e:2d:cf:91:04:9f:0b:59:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:F5:28:F9:A5:97:20:8F:1C:B6:B7:72:79:3B:DD:76:4F:96:3C
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1d:47:dd:6c:84:ef:25:9a:d7:47:a1:bf:fc:d4:4d:5e:21:
35:33:68:18:d5:66:74:e9:41:4d:f5:d9:39:23:f6:67:ce:5b:
d6:d6:79:e9:b2:98:9f:d9:f6:cf:fc:58:44:c0:48:cc:0e:26:
a8:5f:5d:04:c0:c7:af:af:58:1e:7f:b2:5d:8c:bd:53:0c:85:
97:8a:ec:90:c1:39:b2:1e:97:84:95:fd:39:4f:25:81:c3:ec:
4b:19:ac:8b:28:cb:4e:15:a6:0d:d8:16:13:6e:f9:db:d7:f2:
ea:0f:95:23:45:c0:29:77:8b:93:02:b6:f5:d1:1e:0e:78:74:
02:3e:6a:de:0a:f2:39:a9:30:49:f0:71:cf:16:4b:a3:ee:75:
42:c3:87:ce:9c:e6:94:04:dc:e6:b2:71:45:1d:e0:15:23:e1:
a7:fd:10:a5:c8:79:d4:67:94:ab:d8:96:85:42:fd:cb:fb:de:
39:62:85:16:8e:d0:69:1a:55:2d:42:e4:0a:ae:24:ea:c2:1b:
31:86:93:29:6a:b2:37:d2:1d:07:9e:72:a1:63:8a:20:f1:90:
92:85:f0:59:04:65:1e:30:26:70:78:25:42:b7:0b:17:57:66:
92:10:74:dc:46:6a:67:87:a1:35:d2:45:5a:ba:14:6d:ae:05:
64:bc:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:53 2026 by rpki-client