Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: oWdqRSdjUV0kop/dRz3vh82ZIrAno5gAdRcWGeCn/O8=
Subject key identifier: E7:67:B4:7A:6F:D4:AF:54:18:92:2E:57:75:A5:F4:74:4C:34:5B:0B
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 019F935B250F5D87309E12577FEFBDB0ED3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 09:00:51 +0000
Manifest this update: Fri 24 Jul 2026 09:00:51 +0000
Manifest next update: Sat 25 Jul 2026 09:00:51 +0000
Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: seLJw0N6/TtNLFCo9Tj4z0FFLhYxz5gKRGafAjRVE/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:25:0f:5d:87:30:9e:12:57:7f:ef:bd:b0:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Jul 24 09:00:51 2026 GMT
Not After : Jul 25 09:00:51 2026 GMT
Subject: CN=e767b47a6fd4af5418922e5775a5f4744c345b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:52:8a:40:6f:13:33:6a:ba:cd:b2:81:b8:
79:43:5b:bf:c7:de:d6:58:35:fe:0f:3b:55:cc:ea:
cf:92:3d:e4:35:9a:3e:d8:4b:d8:41:97:51:6e:73:
ee:ce:0f:33:ab:46:d2:0d:99:34:d0:24:03:ac:28:
c8:73:b1:67:e0:c6:72:06:ad:5b:8d:cb:22:8c:5a:
e6:30:ca:4a:75:86:86:17:8b:1b:78:7f:79:75:f8:
76:ea:b2:28:ae:c9:9c:e6:05:89:df:29:86:0a:1a:
34:69:64:af:1e:e9:bf:07:74:e2:03:7c:b8:f5:6e:
66:bf:b1:a5:8d:62:56:5c:1e:2c:cd:53:00:72:b3:
3c:dd:96:9f:3d:c3:7e:b9:36:17:2d:c6:18:fa:3a:
cb:85:10:7c:da:b6:c2:8d:a9:b9:e2:ad:e4:89:13:
4a:48:27:36:5b:af:2b:59:b8:85:f6:8d:68:8a:78:
f7:e3:72:11:7a:5a:3f:ea:db:41:79:c5:c0:5b:f9:
4f:c4:37:a2:4a:65:56:f9:71:ac:d2:8e:2a:97:52:
89:ce:f6:41:b5:42:75:96:72:19:2b:89:4b:82:ba:
85:a6:39:e2:74:95:1b:57:0e:ab:fc:fc:5e:67:d5:
06:01:eb:ec:e7:ec:c5:e6:90:ad:2e:72:32:89:2a:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:B4:7A:6F:D4:AF:54:18:92:2E:57:75:A5:F4:74:4C:34:5B:0B
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:16:38:25:24:8f:b9:29:ee:f7:e5:82:23:f4:b0:e2:4a:1e:
50:72:ff:68:87:b3:36:c6:4e:dd:f1:32:8a:18:dd:77:0f:7e:
6b:a0:f8:3b:07:f3:eb:35:1d:e8:57:cf:3c:90:47:ef:7d:55:
c9:c7:e5:72:05:8b:74:ea:85:7e:6c:0d:f6:48:8f:7d:f3:25:
da:bf:5e:da:ef:e5:ad:ed:6d:30:c7:92:d7:aa:f1:0c:2e:e8:
01:83:e8:b8:33:d3:ff:ab:61:62:ad:2d:8a:29:5c:12:f9:2b:
af:46:54:f4:61:86:49:54:3b:3e:67:1a:bc:97:e1:8b:25:16:
19:12:78:af:65:c6:9e:96:8f:84:22:e0:64:c3:b0:2b:d6:35:
49:8d:f3:d8:c0:87:f9:05:09:98:02:c7:6d:9a:c7:87:bb:09:
85:c2:91:af:62:81:b8:78:59:6c:66:03:2f:06:32:33:61:9e:
26:a7:8a:e9:cc:9c:e4:90:a9:36:7c:87:9b:8b:5a:41:fd:17:
6f:be:8e:21:aa:f0:e1:c6:e3:36:a6:cc:a8:ba:e2:6e:55:38:
84:c8:e3:fc:a9:2f:e1:a5:34:cf:fe:17:fb:2c:94:2b:ce:aa:
0c:d3:ed:e1:0f:70:93:b5:de:3b:9d:91:ac:7c:90:66:20:fa:
08:2d:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:35 2026 by rpki-client