Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: gfrtwsPNitaTaYL/ruyrZSXjvlbgduF3cWR8nLtQ5m8=
Subject key identifier: E0:00:4D:50:0D:50:47:10:2E:9D:00:34:4D:55:5B:38:07:B4:92:C5
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 019D9A3E1175D419A40AA0D0A961910F6829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: 3cVgZ+GM/8JU/B6nTGv9q0+xmVCGF0CAOIOqui4Qcfw=)
2: Vi8I4MkCYQcd0rGXc9xuEZAFofI.roa (hash: P7eM54+hvOkGLmFDM1sHFQzbHZ9ga56vNG5gdNovG80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:11:75:d4:19:a4:0a:a0:d0:a9:61:91:0f:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=e0004d500d5047102e9d00344d555b3807b492c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:93:6e:7e:f1:ac:40:e7:b0:08:d1:e0:7a:
8e:63:bb:a1:21:53:b3:27:a5:3a:18:cd:a9:7e:bf:
bc:3a:39:1a:64:b1:5b:87:17:c1:79:d5:93:06:1d:
ef:26:a0:b4:eb:fc:87:c8:49:e2:6e:a3:5d:7d:a1:
24:ca:f2:7c:d7:ca:e1:60:6b:05:94:a1:78:7c:8b:
c7:b2:31:89:2d:f1:fe:48:24:d5:16:2a:93:59:fe:
95:0d:e5:b5:1a:ce:66:72:bd:1c:50:01:ea:5f:8f:
ec:7c:6c:59:05:7c:3d:85:69:bd:64:c2:17:7c:c9:
cd:78:7b:dd:43:19:21:d3:b5:ef:c7:91:06:ed:02:
9c:5b:24:3f:fb:d3:71:6e:cf:e1:e6:65:fc:e0:e6:
67:ff:2b:33:e0:53:47:10:64:38:ef:36:58:12:30:
de:b4:22:4f:5b:4f:a2:22:de:55:11:ce:6d:89:2d:
a0:79:81:29:4c:51:14:c6:3d:8c:e2:fe:ec:29:15:
b0:fd:dd:3a:fb:19:bf:f9:c6:e9:51:94:71:4a:22:
22:0a:e9:8f:d7:93:6f:ae:4f:db:32:c0:1e:38:fb:
93:0e:e3:7a:83:e9:5e:a9:ce:a2:02:af:e4:f5:c6:
ee:ea:c7:5c:74:2d:e4:70:d7:c1:59:37:81:3f:1b:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:00:4D:50:0D:50:47:10:2E:9D:00:34:4D:55:5B:38:07:B4:92:C5
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:49:b6:92:2d:8e:26:dc:0d:8f:d2:3d:bc:86:b0:7e:8f:d7:
1d:25:6c:18:1f:e1:75:9b:5c:24:5f:32:2e:7b:e6:ae:bd:88:
2a:da:6b:3b:06:7a:c5:67:4c:d6:ce:55:90:ad:c4:01:d4:e9:
b9:9e:7d:5a:22:f0:10:7f:2e:8d:04:b3:e5:f7:fa:ab:78:e0:
d0:ed:40:be:fe:5c:e1:c3:b4:7a:5e:43:8b:2e:40:ed:f1:ab:
2d:e3:20:18:e0:56:d9:88:e6:2b:4d:02:e8:9a:d4:f0:60:46:
d1:52:27:a2:e2:fc:ab:8d:e7:2c:9e:db:ff:66:27:99:6c:88:
d5:28:cb:64:61:c3:74:90:ba:5d:20:55:0d:f1:6f:92:48:4b:
bb:81:4f:18:e9:4e:34:4d:3e:fd:28:1c:0c:95:5a:75:c7:e3:
29:16:7c:b4:fc:52:31:f3:3c:90:cf:d6:7b:c3:3f:fc:c1:4b:
6b:33:46:ef:a1:e7:f1:ac:a8:5a:fe:10:13:c6:0f:3e:ab:9c:
66:4d:b1:52:39:7f:66:85:80:e0:ed:d6:98:12:c8:6b:1f:30:
f8:4b:ba:12:aa:bb:d3:e9:ea:69:4e:cd:58:77:ee:b3:b0:1f:
7b:fe:ac:df:f2:d7:31:ac:2a:3e:a3:6e:b0:17:18:ae:8c:1b:
64:d5:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:38 2026 by rpki-client