Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: RBVkYgcioe5i3auWCDGftBVozCRQqSPzjmst7VkSLDE=
Subject key identifier: 28:78:FC:FC:E8:44:64:D4:E8:B7:CE:57:44:8B:EF:81:C3:67:FA:91
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019D2583994320C790383185F822C6F9ED8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 17C5
Signing time: Wed 25 Mar 2026 15:01:14 +0000
Manifest this update: Wed 25 Mar 2026 15:01:14 +0000
Manifest next update: Thu 26 Mar 2026 15:01:14 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: kP549MYfhg8jtdBO3DiJR7cFkFvuj3O98ywlf3v2Vnc=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:99:43:20:c7:90:38:31:85:f8:22:c6:f9:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Mar 25 15:01:14 2026 GMT
Not After : Mar 26 15:01:14 2026 GMT
Subject: CN=2878fcfce84464d4e8b7ce57448bef81c367fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:43:fb:61:57:41:c8:89:28:aa:74:09:80:
0e:85:17:aa:5b:64:7b:08:27:8a:fa:62:23:f6:a2:
61:ed:9b:46:84:47:10:71:89:4e:f1:f7:30:74:ce:
d7:0a:2d:e1:96:b9:cb:7c:38:1c:aa:6e:93:d6:45:
7b:2a:c4:32:86:94:3b:e6:78:37:bf:ba:67:62:f2:
84:fb:11:da:1a:ea:0c:da:4d:63:0e:a3:60:0b:8f:
91:0f:07:ab:a1:44:4f:4a:98:da:46:2f:4d:1f:a8:
75:a5:9b:3c:a6:f4:04:77:c8:96:4b:2d:09:9d:fd:
b0:71:a6:25:22:96:1a:1b:80:ef:a0:68:0d:f2:eb:
6d:97:a4:61:b7:74:95:dd:26:e9:c3:fc:64:ea:3a:
e8:8f:e9:55:c8:3e:f6:70:5b:fa:fe:92:5d:a6:90:
0d:a4:7c:71:fb:58:17:b1:e2:34:bf:de:06:5b:42:
38:13:3b:c0:71:56:d5:eb:d5:fb:31:f2:6e:c6:a7:
47:0b:40:b9:de:13:86:02:eb:0e:2d:f6:25:81:d5:
30:52:fe:f2:41:8d:a1:a2:b9:df:f0:d9:35:f8:be:
08:85:6c:4d:fe:b3:95:4d:37:83:d0:d1:f5:e3:44:
16:09:fc:e0:38:78:bf:7e:23:6e:13:f3:9e:6b:3a:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:FC:FC:E8:44:64:D4:E8:B7:CE:57:44:8B:EF:81:C3:67:FA:91
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:ec:da:6e:2f:54:5d:38:e5:ba:2c:58:d3:d6:5f:e8:5a:
9f:b5:0f:2c:a7:00:e5:29:e8:32:40:d7:42:8f:8d:be:65:16:
ca:3f:25:8f:da:90:ec:9b:69:12:61:5e:eb:d8:e1:b9:c8:5f:
04:82:55:d6:40:9b:35:6e:c2:af:9b:21:0e:7f:d7:85:91:8e:
9d:41:e0:eb:5d:d4:c1:db:a7:4a:8f:cc:3c:9b:6a:22:ad:a9:
09:15:74:84:0d:85:73:2b:e4:43:9a:93:60:0f:bb:70:68:4b:
5d:fa:54:36:2d:cc:79:be:29:e7:e5:23:47:e2:87:de:8e:ac:
9e:fb:23:8f:0f:88:44:0f:f6:bd:cb:3d:8b:71:c9:42:b2:ea:
0e:c7:0e:73:c3:57:8b:ee:0d:c4:9e:db:64:1c:60:4b:28:10:
d0:a2:dd:5b:c8:45:f4:79:d3:6b:e5:60:20:cf:0b:87:c8:d3:
a5:d6:06:a1:1f:43:f5:d0:c7:b2:98:3c:1a:ab:5a:10:08:39:
f2:33:09:23:0d:8d:52:1c:b1:87:c4:82:56:d8:8a:ea:ac:a7:
6f:8d:4c:53:dc:6b:92:5a:a3:db:2c:33:ac:62:ad:27:a8:2b:
25:a4:a3:23:1b:a3:d7:04:83:4f:6d:2b:4a:c1:e1:d7:c5:5f:
a1:89:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:45 2026 by rpki-client