Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: HuFlXrbdERxwUlWWfTrfqa/evBN2lfE8rXodOmEWpMc=
Subject key identifier: C2:EB:A8:AE:1E:B9:60:6B:09:29:4A:93:58:49:4C:D8:6C:5B:58:AE
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019F916D09CFB7748473D1887B34299753D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1906
Signing time: Fri 24 Jul 2026 00:01:09 +0000
Manifest this update: Fri 24 Jul 2026 00:01:09 +0000
Manifest next update: Sat 25 Jul 2026 00:01:09 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: werVOvTyPby1aLcFcIntGcJx7ys+SKNnJQ68+OZU0NY=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:09:cf:b7:74:84:73:d1:88:7b:34:29:97:53:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jul 24 00:01:09 2026 GMT
Not After : Jul 25 00:01:09 2026 GMT
Subject: CN=c2eba8ae1eb9606b09294a9358494cd86c5b58ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:ba:ce:23:15:6c:74:98:52:50:02:fd:cf:
a6:ed:74:42:46:ef:11:ee:56:b8:f7:a6:1d:a7:6f:
da:d7:6d:67:fd:d4:55:23:fc:60:3f:66:4a:d1:8f:
3c:6a:8e:7b:55:3e:15:85:ab:cb:2e:59:30:c2:50:
6f:d8:81:1a:68:ca:8d:ad:48:ea:50:c1:84:92:1e:
df:29:34:b7:4c:58:12:ed:de:51:cc:00:25:78:d8:
ea:46:49:cd:62:1a:9f:09:51:c3:64:37:f5:be:3c:
71:d1:01:46:50:02:3a:c7:51:33:58:f9:70:45:b5:
23:d9:74:80:1f:eb:96:a7:87:1b:f3:07:d3:65:d7:
b7:35:aa:76:76:69:66:e1:c3:b4:df:66:1f:af:1d:
0d:35:56:42:8c:7d:02:1d:66:d7:8e:9d:13:e0:4f:
b9:a7:95:eb:bb:57:5f:f5:12:3b:1b:09:92:c2:96:
ee:90:33:f4:9d:ef:ce:c5:1b:f5:23:56:dc:45:d2:
e9:32:c9:47:aa:b1:c4:7e:be:a2:64:e5:8f:23:ef:
fe:27:1c:78:9b:c9:61:1c:9f:e0:f0:df:b4:69:f7:
82:3f:13:66:9b:58:a8:fc:75:4c:96:b0:e3:bd:41:
0e:65:f9:5f:76:c3:fd:33:59:4a:22:3e:32:07:ce:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:A8:AE:1E:B9:60:6B:09:29:4A:93:58:49:4C:D8:6C:5B:58:AE
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e8:4c:fe:a7:6d:5d:15:25:0d:6b:db:22:9b:25:20:04:85:
e8:bb:db:0b:5f:a1:d6:06:45:4a:17:ff:ec:8b:c5:2e:24:5f:
44:e7:4d:87:41:f3:1f:93:6b:50:12:ea:a9:e3:bd:3e:8c:97:
d3:ad:39:b6:26:19:41:ec:5e:d1:28:cc:af:44:1b:70:0a:41:
aa:ad:67:45:19:25:55:a2:5e:7e:07:44:24:bd:fc:a3:77:9b:
fe:d6:92:c0:17:ad:f2:c4:dd:41:9b:f6:59:58:3d:9f:c5:8c:
46:9f:e2:1a:58:af:82:10:18:65:c1:2d:7f:81:37:ba:f1:37:
45:6b:03:39:a5:e3:5e:74:0f:6a:a0:18:5d:34:b7:1d:aa:f3:
b6:29:da:2a:40:56:4a:3c:f1:d0:64:33:6d:82:0e:e3:aa:73:
c3:dd:26:91:11:d6:24:c1:15:d1:38:74:29:f3:1a:d6:fa:3e:
95:47:41:1a:ab:84:45:41:25:14:66:d1:2b:20:fc:07:7d:ee:
98:36:e5:ca:a1:f0:38:20:7d:0c:36:53:44:af:e8:61:33:b7:
59:a8:cd:26:d6:14:ef:47:7d:1f:c5:a0:6e:18:ef:d1:bd:b6:
53:09:23:0c:83:1c:9f:cf:e3:c1:a9:7a:21:00:6c:54:89:c1:
44:1d:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:48 2026 by rpki-client