Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: j2nstIjeKUdmw+E5gHOOsV1IcDMUiSDw4JQf0LOA+Co=
Subject key identifier: 57:CC:9D:A0:54:1A:D6:83:E3:01:06:87:99:B5:F0:44:31:D4:79:DA
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019CAAC6601C0F4D9491984851459BCEB22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 074A
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: KBE0fN4c4yqKlYGcr+bDG8ojk8oThhPLjm0A83N6q38=)
2: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
3: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:60:1c:0f:4d:94:91:98:48:51:45:9b:ce:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=57cc9da0541ad683e301068799b5f04431d479da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:c3:44:ed:8a:66:66:bf:d3:16:d3:2e:12:
b9:03:bc:95:4d:64:19:a8:e8:20:4d:c0:77:bd:63:
76:6b:a4:da:d3:f5:e5:b6:53:70:92:12:d9:99:89:
ee:d3:3a:2f:3a:81:ce:ac:75:1c:71:b0:42:18:f3:
34:02:d2:02:4a:00:45:20:48:b6:44:71:b3:87:74:
5d:96:00:de:4e:18:45:9f:d1:36:18:ac:42:5b:34:
c5:96:b4:91:df:db:bb:59:e6:4f:f7:6e:b2:d6:b3:
75:09:77:a5:bc:86:79:90:5c:9d:82:42:4c:d8:ce:
06:6f:db:68:0e:cf:7e:84:f0:14:8b:1d:60:e6:dc:
e5:7c:7d:33:fc:a2:fe:a4:65:5d:23:6e:8a:c5:c0:
86:b7:ab:33:f1:4e:b0:7e:7a:de:47:2d:92:72:e6:
13:05:a8:14:9c:9a:bb:b6:f7:9c:c7:59:c2:f1:5e:
43:70:49:0a:25:e2:6c:f2:f6:55:83:cd:ec:42:ba:
6f:bb:5f:83:a2:8b:63:1e:e8:b2:94:a1:e3:a4:ae:
ad:c2:35:80:21:7b:03:6c:7c:e5:59:7e:9a:08:47:
b4:13:8a:af:95:ab:fe:53:f4:68:1a:37:7b:bb:ce:
a2:57:3a:89:28:da:42:dc:96:e3:6c:d3:f6:5d:f3:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CC:9D:A0:54:1A:D6:83:E3:01:06:87:99:B5:F0:44:31:D4:79:DA
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:21:d4:25:90:95:d4:c9:5f:fd:0e:88:8a:46:f4:d6:e7:1e:
cf:6b:55:08:f2:72:35:c0:5a:b1:e7:86:02:3c:78:43:e6:2f:
e6:4e:ee:09:7c:8d:c2:90:0e:28:9b:7b:8a:b3:c6:8c:6c:e9:
bd:e9:b3:9b:57:4a:d6:e5:f6:ba:fa:1b:13:e3:af:ea:e9:79:
3f:ab:96:d9:47:c7:35:7f:50:2a:b1:b2:de:6e:7f:1a:d3:f5:
3f:19:c3:c3:82:db:42:d3:07:dc:3b:c9:22:e2:6c:bd:6d:f7:
3b:29:85:4b:65:f5:b3:d2:c1:b3:ac:1c:17:e0:a7:b0:f9:9b:
13:fa:fa:bf:c4:f1:ed:57:7e:21:0a:79:42:2c:da:51:44:60:
49:18:19:9c:80:e1:24:cb:38:76:21:57:c9:03:4b:b9:06:30:
23:00:1c:1a:19:24:1d:d0:98:8d:f1:99:90:47:42:b9:87:c4:
a9:51:66:b3:5c:a3:c2:a7:d7:7e:77:9f:d8:10:bd:5c:a2:69:
33:a3:79:45:c3:8d:66:cf:b0:9c:5b:c6:7b:58:47:ed:b8:df:
fd:2a:28:e0:d8:80:5d:d9:62:0f:dc:47:55:af:2e:9a:7d:2c:
c3:d6:49:66:5a:7f:86:f8:b6:6e:0f:5b:f4:fe:46:aa:73:7e:
e0:14:d2:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmAcD02UkZhIUUWbzrIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjYwMzAxMTkwMDUzWhcNMjYwMzAyMTkwMDUzWjAzMTEwLwYDVQQD
Eyg1N2NjOWRhMDU0MWFkNjgzZTMwMTA2ODc5OWI1ZjA0NDMxZDQ3OWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLPDRO2KZma/0xbTLhK5A7yVTWQZ
qOggTcB3vWN2a6Ta0/XltlNwkhLZmYnu0zovOoHOrHUccbBCGPM0AtICSgBFIEi2
RHGzh3RdlgDeThhFn9E2GKxCWzTFlrSR39u7WeZP926y1rN1CXelvIZ5kFydgkJM
2M4Gb9toDs9+hPAUix1g5tzlfH0z/KL+pGVdI26KxcCGt6sz8U6wfnreRy2ScuYT
BagUnJq7tvecx1nC8V5DcEkKJeJs8vZVg83sQrpvu1+DootjHuiylKHjpK6twjWA
IXsDbHzlWX6aCEe0E4qvlav+U/RoGjd7u86iVzqJKNpC3JbjbNP2XfOHdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfMnaBUGtaD4wEGh5m18EQx1HnaMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSHUJZCV
1Mlf/Q6Iikb01ucez2tVCPJyNcBaseeGAjx4Q+Yv5k7uCXyNwpAOKJt7irPGjGzp
vemzm1dK1uX2uvobE+Ov6ul5P6uW2UfHNX9QKrGy3m5/GtP1PxnDw4LbQtMH3DvJ
IuJsvW33OymFS2X1s9LBs6wcF+CnsPmbE/r6v8Tx7Vd+IQp5QizaUURgSRgZnIDh
JMs4diFXyQNLuQYwIwAcGhkkHdCYjfGZkEdCuYfEqVFms1yjwqfXfnef2BC9XKJp
M6N5RcONZs+wnFvGe1hH7bjf/Soo4NiAXdliD9xHVa8umn0sw9ZJZlp/hvi2bg9b
9P5GqnN+4BTSzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:16 2026 by rpki-client