Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: AfRMCANj4c/sPZ5t1GXPKfi3QNMuDExqUDzktxH3CPY=
Subject key identifier: AB:E9:60:86:7F:3B:0A:C0:5B:9D:1F:1C:CA:54:7A:09:EF:EE:CA:B0
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019E1EA2D999246448BD8AAEB41B8741BA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1846
Signing time: Wed 13 May 2026 00:00:49 +0000
Manifest this update: Wed 13 May 2026 00:00:49 +0000
Manifest next update: Thu 14 May 2026 00:00:49 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: AvR9HXIeJr3skYatCNIU5F0Vnb8VfqHIvD28IyY1cqg=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d9:99:24:64:48:bd:8a:ae:b4:1b:87:41:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: May 13 00:00:49 2026 GMT
Not After : May 14 00:00:49 2026 GMT
Subject: CN=abe960867f3b0ac05b9d1f1cca547a09efeecab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d8:2e:c3:b1:b7:e4:de:62:b5:ef:55:57:ba:
7d:1d:f5:d4:73:d5:91:83:ac:5f:c1:20:eb:39:df:
ab:c7:fd:68:e2:b2:59:69:e1:26:93:1d:8f:1e:29:
76:7c:8d:ed:c5:70:63:70:ae:4e:27:c5:32:28:78:
0b:d8:34:23:98:b4:9c:c2:17:56:88:bb:7b:fe:5c:
69:f5:22:54:f2:8b:67:20:d3:1d:32:aa:a2:26:5f:
97:bc:5d:e9:31:fa:f0:1b:6b:a9:e8:41:f6:6a:99:
4d:2a:aa:f6:23:1a:2f:8e:99:8d:fd:b1:d6:8e:1c:
35:24:37:47:65:2f:2a:55:ba:73:2f:07:22:8c:64:
6c:95:a4:01:16:4e:83:ad:2e:00:02:50:8b:60:fc:
41:cc:c8:be:eb:b5:6e:82:f8:f7:06:d6:b7:16:7d:
e8:0a:0d:fb:24:f5:8c:41:e9:b0:6f:ee:e0:96:ca:
12:8f:d3:d3:8f:45:ba:e5:5c:37:ca:a8:d3:da:20:
61:b2:c0:56:07:4e:1e:3b:38:dc:8e:9d:c5:84:1f:
5b:8e:67:dd:90:b4:3a:73:b9:f6:fa:f5:2c:fa:4a:
5e:a6:7e:c4:f5:00:c1:5c:5d:4a:24:5a:90:8a:08:
ec:e6:ac:80:13:2d:70:c7:54:af:b6:18:f3:43:ef:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:60:86:7F:3B:0A:C0:5B:9D:1F:1C:CA:54:7A:09:EF:EE:CA:B0
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:09:72:53:db:6e:82:22:fa:ea:ee:25:8c:af:fe:a6:39:8f:
5b:e5:99:08:0e:57:84:7d:66:e3:db:67:57:5d:d8:34:3c:6c:
41:a5:49:0c:0e:cd:c9:88:4b:19:c2:43:07:61:f4:24:d7:25:
60:28:d2:96:82:71:56:c1:a1:6e:28:64:03:88:45:3e:80:fa:
ed:48:40:25:97:8e:f2:22:01:e1:84:83:47:18:29:16:77:7e:
d4:35:05:b9:6c:b2:27:a7:e1:42:1e:5d:4e:6d:e4:8a:04:b7:
3d:49:2a:63:e3:9d:b3:4c:8c:c3:d9:fe:37:8d:a8:71:b3:95:
e3:6c:e1:cb:a0:c1:00:17:47:f2:c3:b8:2f:15:63:63:2f:5b:
92:40:1f:85:3a:06:c3:7b:60:d2:60:d4:9e:90:03:bc:22:b9:
55:f1:ac:5c:9c:f5:23:86:fd:db:eb:44:62:39:b7:91:2d:e0:
6b:f8:1b:d7:6a:ad:db:16:2c:67:9e:45:52:02:a4:f7:d5:49:
d6:06:de:5d:e1:13:6c:40:a0:f0:86:7c:38:25:4d:2c:ca:3b:
fb:04:1f:ec:4d:86:3a:31:88:e8:fa:69:26:a6:07:4a:90:d4:
5c:b3:d0:98:4a:e6:e4:ef:a3:1b:b5:e6:70:04:26:95:c6:32:
13:73:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:47 2026 by rpki-client