Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: /BKBqsFE8bFFdLo50/2ohyxcGx4E02rJkRd/BtlpMmw=
Subject key identifier: 1F:DA:96:10:C6:5B:7E:EA:B3:10:6E:1D:13:4E:5D:52:D4:53:04:08
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019D9A3E4F60D1F544D25FB36B7D6531BC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:07 +0000
Manifest this update: Fri 17 Apr 2026 07:01:07 +0000
Manifest next update: Sat 18 Apr 2026 07:01:07 +0000
Files and hashes: 1: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: 1aftIqv0k/nw7BR0XR0jvJA5iiYHvXmHBA8BNbTvr8Y=)
2: YIADlJEaOqXbDe848xRwPpNrR2E.roa (hash: GAf0RBlCvyX7yioFoOVmfF//A2GhSK/l+zTEgxM3/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4f:60:d1:f5:44:d2:5f:b3:6b:7d:65:31:bc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Apr 17 07:01:07 2026 GMT
Not After : Apr 18 07:01:07 2026 GMT
Subject: CN=1fda9610c65b7eeab3106e1d134e5d52d4530408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:57:f7:67:ae:07:6e:59:c6:8c:be:cb:d3:
1d:f7:c1:d7:49:53:0b:60:cd:18:2f:57:59:4a:ab:
b7:38:d1:e8:de:81:fa:1b:f8:58:09:12:f7:c6:f7:
e2:ee:1f:ef:05:7e:7a:cb:44:3d:a5:b6:6b:d0:f6:
99:a6:36:d3:b0:dd:1a:bb:ec:46:98:db:df:af:f2:
41:c6:82:41:13:64:30:00:13:f6:41:9d:91:9e:55:
df:fe:96:64:07:7e:0b:43:1d:40:03:ba:d5:f0:e3:
6c:7b:05:05:af:5e:9b:d2:3f:5e:f5:cc:14:18:e1:
36:59:ab:45:7a:07:80:83:b7:66:0b:0c:10:22:c9:
b0:02:86:6c:28:6c:5e:65:c4:45:63:30:a3:a6:91:
18:55:04:08:5a:5b:13:aa:df:df:14:b7:17:1e:8b:
2f:8e:31:6c:f0:fd:32:bf:ce:60:ac:91:6e:9d:61:
53:49:92:b6:e4:69:0e:f8:b5:66:5e:dc:73:cc:8e:
7e:9c:05:c5:99:c9:54:5e:14:da:4c:41:97:eb:d4:
70:6c:53:2c:f3:d2:51:5a:09:96:33:a8:9e:c4:3c:
9d:f8:d3:7e:f2:5b:ba:3f:21:37:45:50:43:22:28:
e0:48:be:70:16:8e:7a:9b:00:0b:5c:53:a8:3c:bb:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:96:10:C6:5B:7E:EA:B3:10:6E:1D:13:4E:5D:52:D4:53:04:08
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:d9:07:ab:74:ae:d9:19:74:48:9d:b0:7a:b1:1e:4e:70:
79:aa:50:59:4e:32:68:04:c9:30:74:5d:87:5b:7c:ec:49:5a:
e7:68:35:72:41:c6:27:6c:30:8d:a6:99:57:1c:9e:63:3a:88:
7a:ca:50:d4:31:de:0a:e8:9c:64:10:b5:d2:fe:d8:bf:81:d7:
c1:0e:cf:bb:90:3c:b8:a5:52:86:7a:71:e4:0b:7f:25:03:14:
b4:0e:23:fa:f1:26:d7:30:87:69:3c:1e:19:2f:eb:e3:fd:7e:
78:48:d8:42:6e:19:2d:4c:f0:70:1b:ca:96:d1:ca:08:b5:c8:
9a:17:5d:db:cf:3f:b8:3b:1f:4f:fb:fe:88:fe:18:33:92:da:
9f:03:4c:75:b3:5a:b3:eb:c4:6b:bd:93:66:f9:07:9c:12:2a:
84:6f:aa:b3:33:d8:26:68:d4:8e:34:8b:16:de:42:fd:68:0c:
16:e3:78:3e:15:bf:ff:37:02:e0:74:66:5f:f6:8e:27:a7:98:
10:c3:6b:ef:36:e8:61:51:d8:85:5f:31:23:1c:68:77:06:2e:
5c:1b:56:0f:d2:79:d2:a7:03:ae:9e:9b:cf:9a:ce:c2:2c:29:
4b:1d:4f:05:f4:62:57:89:64:61:c1:73:b2:50:5a:f1:f9:00:
e9:46:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:26 2026 by rpki-client