Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: cYw5jSu4vufp/2iE5VX7u21ltb3zCCfFasEl632ScjI=
Subject key identifier: 0D:3E:D9:3F:49:7D:C5:B1:2C:1F:47:94:1F:A7:C8:1F:52:DE:03:4B
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019ED31841BE7E048A2DA89CE10E020A0E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 0868
Signing time: Wed 17 Jun 2026 01:00:42 +0000
Manifest this update: Wed 17 Jun 2026 01:00:42 +0000
Manifest next update: Thu 18 Jun 2026 01:00:42 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: zCOD065touu3bCGXe8YTw0VTLH5u4SUCLoo9pXkLhlc=)
2: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
3: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:41:be:7e:04:8a:2d:a8:9c:e1:0e:02:0a:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Jun 17 01:00:42 2026 GMT
Not After : Jun 18 01:00:42 2026 GMT
Subject: CN=0d3ed93f497dc5b12c1f47941fa7c81f52de034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:9d:4e:da:a1:d3:d3:ec:cb:a0:35:27:37:
20:27:8d:d2:84:cd:55:cd:c1:94:f3:e7:ba:c5:47:
f9:dc:2a:e2:e0:e2:fb:79:fd:4e:14:ba:51:ca:59:
79:d6:c6:08:bb:8e:1e:a5:40:d8:4d:88:1c:f2:79:
49:57:a7:65:50:b4:44:65:19:0f:26:41:76:26:2b:
cb:64:cf:1f:44:5a:e4:78:67:2b:a2:70:8b:0f:e9:
69:b3:d7:10:2c:b8:98:9a:0f:e5:44:e4:cd:a5:4a:
68:dd:54:eb:d0:43:40:61:09:c2:be:58:78:03:b9:
b2:23:b0:4d:ff:2a:18:31:0a:55:94:aa:12:da:d9:
f9:97:d1:f0:79:ad:9b:6b:1c:95:02:09:b9:e9:0c:
62:45:bf:af:0a:ce:a8:c4:3c:51:58:19:8b:50:a8:
fe:58:8e:71:b4:9f:6b:fc:81:32:d0:05:01:01:59:
99:bb:2e:59:83:98:4f:76:9b:4f:70:69:0d:b6:c3:
ff:be:68:34:c0:5e:39:ab:ad:63:2c:d4:71:c4:8f:
6e:9b:47:b0:35:31:49:7d:1b:d4:61:f7:c9:86:6d:
1c:9d:d2:6d:6a:15:cd:74:4d:f3:05:71:76:81:7b:
16:d6:fe:32:ad:cc:b1:23:d2:0f:21:a0:b7:ee:8a:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3E:D9:3F:49:7D:C5:B1:2C:1F:47:94:1F:A7:C8:1F:52:DE:03:4B
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:9e:13:ef:76:1d:73:a9:80:a7:b2:37:92:8a:7c:93:09:
09:9d:6d:56:b6:ec:17:25:82:57:e7:fd:06:f3:9f:f2:13:24:
d4:07:f8:e1:c4:46:f8:ad:68:64:2f:9e:6b:d5:46:46:6b:95:
a9:a4:10:cf:4b:c2:8a:77:3e:e8:70:22:ae:73:2e:35:63:0a:
74:99:5c:e6:a4:20:02:98:81:d6:c0:60:c5:8b:39:6a:3a:90:
af:71:41:7d:78:48:a7:00:15:8b:b4:00:35:61:97:21:26:f7:
82:82:1c:1a:5b:eb:61:09:42:c9:34:2e:a9:da:5a:c3:de:bd:
be:3b:e1:bc:3d:a7:d4:ee:53:52:68:cc:ce:46:6e:f2:f4:b5:
67:28:be:64:6d:53:42:23:a7:3e:dc:ad:a2:a2:3b:0c:e9:3c:
b2:c8:d8:73:0b:64:37:85:58:a0:b3:0b:38:1c:aa:11:66:aa:
ca:67:95:21:53:a5:df:b5:74:6d:fb:97:80:be:f5:4b:1a:e4:
d7:6c:41:22:01:21:42:97:74:61:c7:5e:d5:60:79:19:bd:c1:
74:49:90:f4:f2:46:a2:42:c5:4d:79:48:23:44:a0:76:49:45:
d0:74:30:6d:87:80:31:65:80:ad:1b:d3:46:c7:7d:27:95:59:
b4:99:9d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGEG+fgSKLaic4Q4CCg4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjYwNjE3MDEwMDQyWhcNMjYwNjE4MDEwMDQyWjAzMTEwLwYDVQQD
EygwZDNlZDkzZjQ5N2RjNWIxMmMxZjQ3OTQxZmE3YzgxZjUyZGUwMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTWdTtqh09Psy6A1JzcgJ43ShM1V
zcGU8+e6xUf53Cri4OL7ef1OFLpRyll51sYIu44epUDYTYgc8nlJV6dlULREZRkP
JkF2JivLZM8fRFrkeGcronCLD+lps9cQLLiYmg/lROTNpUpo3VTr0ENAYQnCvlh4
A7myI7BN/yoYMQpVlKoS2tn5l9Hwea2baxyVAgm56QxiRb+vCs6oxDxRWBmLUKj+
WI5xtJ9r/IEy0AUBAVmZuy5Zg5hPdptPcGkNtsP/vmg0wF45q61jLNRxxI9um0ew
NTFJfRvUYffJhm0cndJtahXNdE3zBXF2gXsW1v4yrcyxI9IPIaC37oob1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0+2T9JfcWxLB9HlB+nyB9S3gNLMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj36eE+92
HXOpgKeyN5KKfJMJCZ1tVrbsFyWCV+f9BvOf8hMk1Af44cRG+K1oZC+ea9VGRmuV
qaQQz0vCinc+6HAirnMuNWMKdJlc5qQgApiB1sBgxYs5ajqQr3FBfXhIpwAVi7QA
NWGXISb3goIcGlvrYQlCyTQuqdpaw969vjvhvD2n1O5TUmjMzkZu8vS1Zyi+ZG1T
QiOnPtytoqI7DOk8ssjYcwtkN4VYoLMLOByqEWaqymeVIVOl37V0bfuXgL71Sxrk
12xBIgEhQpd0Ycde1WB5Gb3BdEmQ9PJGokLFTXlII0SgdklF0HQwbYeAMWWArRvT
Rsd9J5VZtJmd6g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:47:11 2026 by rpki-client