Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: FafsFSaJlrjfKRtT0Cok/JfSGIuFlM+y/mLoxZNuLIw=
Subject key identifier: 52:97:D7:05:F2:9D:CE:97:7F:12:B8:DF:58:61:DA:D6:C0:0B:36:9B
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 019D2B4E39B24FB46B7CECBC8F9F4EC97E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 18:00:39 +0000
Manifest this update: Thu 26 Mar 2026 18:00:39 +0000
Manifest next update: Fri 27 Mar 2026 18:00:39 +0000
Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: QjlwU7DfA/HLdtd9vyLW9kPR0LavMWrV8nzaJ02QqGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:39:b2:4f:b4:6b:7c:ec:bc:8f:9f:4e:c9:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Mar 26 18:00:39 2026 GMT
Not After : Mar 27 18:00:39 2026 GMT
Subject: CN=5297d705f29dce977f12b8df5861dad6c00b369b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:16:0a:bd:ec:1e:b5:6f:01:0f:2a:31:c1:
db:0f:ca:94:e1:12:63:bb:9a:ea:48:9b:9f:f5:3e:
a3:54:5a:1f:a4:16:88:7c:f4:02:49:b9:5a:47:cb:
b7:ca:d3:06:f1:6e:0e:4c:b0:1f:6d:24:d1:8f:ef:
bc:d7:11:ac:ca:79:0f:9d:ae:9c:32:11:a7:34:5f:
08:58:69:cb:00:dd:53:6c:f7:64:a1:19:0e:59:2c:
7d:c3:b0:df:63:8c:60:f0:ae:31:ac:ca:10:11:ec:
40:6f:ce:4a:c1:16:78:3f:2d:20:c0:f9:f6:a4:51:
9b:88:96:67:9f:16:9f:6a:04:d2:a7:93:76:49:86:
cd:e1:49:24:8a:d3:f3:02:15:b9:02:9d:f6:75:8f:
7a:13:67:1d:f5:69:d5:50:3b:0c:f2:80:cc:8d:0b:
a3:f8:b0:d9:1e:11:7d:79:27:f4:2d:6f:1c:f8:14:
dd:aa:16:33:58:4b:77:38:ac:e0:2e:d3:b8:26:01:
f6:57:78:09:e7:6e:27:dc:82:93:93:c7:b0:d6:f6:
af:19:1f:eb:0b:29:91:54:c8:07:83:d8:df:eb:6f:
22:e9:c8:bd:62:ca:32:f7:f1:e0:5f:e5:29:39:18:
7b:ac:da:cf:a1:9d:98:65:28:d4:f3:c8:19:c0:30:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:97:D7:05:F2:9D:CE:97:7F:12:B8:DF:58:61:DA:D6:C0:0B:36:9B
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:91:2f:58:91:ef:7c:4b:0c:cd:0e:e2:82:50:02:2a:c1:
9e:6f:fb:66:df:c1:5c:fa:ff:87:c9:60:3c:4f:4f:21:1b:df:
a0:a9:b8:c7:26:10:22:81:15:17:9e:66:5a:ec:c5:0f:56:1e:
89:76:84:d7:6a:c4:39:93:02:0e:c9:b1:6a:25:a7:bc:8c:25:
f5:54:ad:5c:d6:40:0e:4e:e7:7e:d4:25:8c:e4:6b:85:54:eb:
2a:5e:6b:fa:cd:89:f4:c1:2a:63:b0:e3:9b:50:48:68:68:92:
a0:73:08:d6:13:62:4a:51:93:88:ea:5b:a1:b4:9f:89:b6:92:
e1:bc:a4:0b:2a:90:5e:e0:a9:af:92:4b:71:06:2f:a4:24:b9:
56:4b:1d:34:fa:17:80:e9:80:a2:27:61:6d:41:78:7a:f4:cc:
43:01:a3:0e:96:3c:83:01:8c:c8:78:cb:58:7a:6e:2f:ac:01:
07:a6:7d:e3:2e:dd:fb:5b:fe:87:0e:3f:30:8b:af:09:ed:d0:
b3:69:cf:48:04:ad:85:c1:81:51:96:a2:74:c3:ec:ab:02:3b:
71:b1:7b:62:48:d6:f7:77:a8:19:99:b0:06:13:1d:5c:75:e3:
14:b4:c5:24:d7:a8:ea:b0:b9:62:9b:0f:45:27:a4:01:98:6f:
82:4e:3f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTjmyT7RrfOy8j59OyX4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjYwMzI2MTgwMDM5WhcNMjYwMzI3MTgwMDM5WjAzMTEwLwYDVQQD
Eyg1Mjk3ZDcwNWYyOWRjZTk3N2YxMmI4ZGY1ODYxZGFkNmMwMGIzNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoEWCr3sHrVvAQ8qMcHbD8qU4RJj
u5rqSJuf9T6jVFofpBaIfPQCSblaR8u3ytMG8W4OTLAfbSTRj++81xGsynkPna6c
MhGnNF8IWGnLAN1TbPdkoRkOWSx9w7DfY4xg8K4xrMoQEexAb85KwRZ4Py0gwPn2
pFGbiJZnnxafagTSp5N2SYbN4UkkitPzAhW5Ap32dY96E2cd9WnVUDsM8oDMjQuj
+LDZHhF9eSf0LW8c+BTdqhYzWEt3OKzgLtO4JgH2V3gJ524n3IKTk8ew1vavGR/r
CymRVMgHg9jf628i6ci9Ysoy9/HgX+UpORh7rNrPoZ2YZSjU88gZwDAC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKX1wXync6XfxK431hh2tbACzabMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjmRL1iR
73xLDM0O4oJQAirBnm/7Zt/BXPr/h8lgPE9PIRvfoKm4xyYQIoEVF55mWuzFD1Ye
iXaE12rEOZMCDsmxaiWnvIwl9VStXNZADk7nftQljORrhVTrKl5r+s2J9MEqY7Dj
m1BIaGiSoHMI1hNiSlGTiOpbobSfibaS4bykCyqQXuCpr5JLcQYvpCS5VksdNPoX
gOmAoidhbUF4evTMQwGjDpY8gwGMyHjLWHpuL6wBB6Z94y7d+1v+hw4/MIuvCe3Q
s2nPSASthcGBUZaidMPsqwI7cbF7YkjW93eoGZmwBhMdXHXjFLTFJNeo6rC5YpsP
RSekAZhvgk4/vg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:51 2026 by rpki-client