Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: jrLHI/U/shMzwXB5/Lrn9v0FMsEPGyByG0Nn3zcrIFg=
Subject key identifier: 05:DE:30:5D:44:91:10:2B:9E:9A:AB:31:BB:1E:A4:BB:C1:8E:A8:F8
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 019D27A8A3D08916D3F5951400D58C1AC35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 1814
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: vCI94sN6/LFOxy4A6QxdK5FkYHo/IDnGrAguBJva2O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a3:d0:89:16:d3:f5:95:14:00:d5:8c:1a:c3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=05de305d4491102b9e9aab31bb1ea4bbc18ea8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:86:5a:77:3e:54:0e:5f:cc:75:fa:5b:14:
85:14:df:41:88:c7:3f:ab:fc:53:6a:a4:bb:b0:68:
6c:b1:8a:f1:f5:09:5c:ef:a1:e3:d5:d9:3e:a4:7f:
fd:d2:fd:ad:73:65:b6:ce:0e:9f:7e:0d:dd:87:95:
05:a2:d2:5f:ac:78:d3:46:29:e8:30:e5:26:02:70:
bc:41:a6:a8:5c:ba:29:75:78:1c:0a:00:34:c2:9d:
32:86:89:07:77:d1:33:4e:f7:80:76:d1:82:6e:2a:
7c:0b:4e:b5:34:aa:cc:54:2e:49:b0:d2:d3:0e:3d:
de:c4:a4:c5:e2:54:6b:67:9c:7b:48:82:4d:23:d5:
da:6a:9a:b8:4e:0e:4d:66:a3:54:d2:08:ce:33:17:
61:56:21:08:96:1c:81:33:8b:82:71:f8:e4:0e:f6:
12:f1:60:f0:a8:e0:02:f2:40:62:84:f4:ec:be:eb:
d2:3e:84:56:e6:2e:63:ef:09:3a:a7:5f:b3:d9:7e:
35:1d:57:88:eb:94:1a:9e:61:b6:f6:9b:1e:26:cf:
84:8f:24:f0:73:c0:3e:74:17:2d:e4:b5:75:5f:d3:
c0:b4:2b:0d:27:e7:ad:37:44:87:7c:3c:f4:7c:d5:
d4:08:00:cf:85:6e:ec:0d:3a:49:64:9a:81:3c:76:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DE:30:5D:44:91:10:2B:9E:9A:AB:31:BB:1E:A4:BB:C1:8E:A8:F8
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:de:52:dc:05:ec:1e:86:73:3e:c1:bc:2f:6b:62:c0:99:89:
6e:14:3e:bb:1f:67:1b:79:ae:19:9f:11:94:c8:7f:d6:9e:88:
a1:0e:d0:01:f1:9f:0a:e8:89:98:d6:89:25:fa:07:e9:5a:f9:
42:2a:d2:2a:93:ff:57:8d:ae:28:04:05:1d:1c:43:cd:40:b8:
ab:57:63:51:81:1b:7c:5c:31:bd:e8:5c:8a:2b:d6:a0:92:a3:
1c:0d:ca:a1:68:ab:b1:10:c4:c4:d4:11:3f:0a:ea:a9:89:68:
a8:66:0e:f3:bf:14:b4:16:b2:71:03:eb:90:70:8c:71:ab:e7:
d8:a3:83:9e:9c:23:8a:b1:64:89:14:fa:8d:23:f6:63:18:15:
2f:ab:bb:c5:b7:12:23:61:31:5f:bf:7d:d8:db:bd:40:de:cc:
0b:d5:6a:49:c2:08:1c:d4:8a:b6:79:36:4f:72:24:67:12:3b:
41:2f:8a:22:83:ef:44:ff:38:50:84:f9:b2:2b:5b:8a:ca:05:
f0:7a:46:15:79:8f:44:2f:52:c8:b5:f1:6e:eb:77:28:61:6e:
fe:04:34:f7:6c:36:fa:a6:7b:86:1d:85:e9:97:17:eb:78:44:
49:cc:85:78:77:7d:e8:f0:21:19:1d:3d:ca:36:c6:84:d7:ef:
52:69:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:05 2026 by rpki-client