Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: 0asEMCBHYVGuNntXZWZgTLRf/TtrWDE+UneRuqIgNSU=
Subject key identifier: 48:21:CB:52:A4:A9:69:DA:3F:F5:2E:0C:3D:FC:4E:51:E2:21:CC:AD
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019CACB4A9077D3D09B26E0394B733BC3AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: xr816OqGm7HQCpveZkg1mCK5hPLYw1s/GP4LAJcqkA4=)
2: YIADlJEaOqXbDe848xRwPpNrR2E.roa (hash: GAf0RBlCvyX7yioFoOVmfF//A2GhSK/l+zTEgxM3/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a9:07:7d:3d:09:b2:6e:03:94:b7:33:bc:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=4821cb52a4a969da3ff52e0c3dfc4e51e221ccad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:34:39:f6:08:1b:e6:87:96:4f:43:de:72:
0d:2c:56:43:e0:2f:f0:ca:4d:e7:80:b4:5a:07:15:
e4:77:25:83:9a:1c:e3:98:36:09:d2:9c:a7:f6:33:
df:b0:4b:c9:f3:71:1e:cc:12:9a:77:26:e9:8f:32:
da:7b:c8:eb:98:50:15:87:d0:33:af:5d:84:8b:a3:
c6:1c:27:4b:46:84:4f:59:aa:f9:40:71:62:58:d9:
89:de:f2:13:d5:dd:fd:5e:76:ce:bf:9d:42:75:ba:
24:39:78:d5:b0:10:9a:df:5a:18:6f:f0:10:b4:a4:
51:5b:09:fe:52:4a:04:91:bb:03:ad:22:77:42:d1:
2e:b3:ea:42:d5:ca:6d:eb:03:b8:b8:41:94:fc:ac:
8a:3b:76:3f:c1:8a:80:c8:0a:db:c1:ff:5c:1f:c3:
bf:ca:89:4e:80:ba:b2:86:d4:c3:24:eb:f3:b5:09:
43:47:ef:88:05:6c:ff:71:02:1e:dc:ad:26:09:41:
27:2e:75:39:c9:0b:18:a9:dc:1d:44:37:a8:65:48:
6b:d9:76:92:7a:69:ac:78:4d:6e:73:47:0d:7c:01:
eb:35:7d:18:34:5d:f2:42:41:2f:8e:77:12:30:05:
7c:61:4a:9f:be:14:94:8a:94:84:3a:4a:1a:24:f6:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:CB:52:A4:A9:69:DA:3F:F5:2E:0C:3D:FC:4E:51:E2:21:CC:AD
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e2:88:01:4c:b7:44:47:51:c4:b9:dd:f0:b8:56:a2:21:db:
e1:b8:e0:4c:13:38:a3:6d:08:36:f1:0c:94:e9:a1:03:f3:5b:
87:b1:34:78:ea:95:40:26:e7:00:43:02:ed:bb:c6:79:c0:a0:
bb:3c:db:5c:f2:38:d3:3e:6e:23:77:ca:99:db:1a:5b:d8:79:
56:74:c7:9c:37:91:17:01:5f:2e:fe:bf:cc:69:97:fe:48:4d:
6b:d3:1c:95:1e:9f:55:14:43:57:cf:2e:c7:f2:87:f7:38:41:
3e:c1:ef:43:2c:9b:92:64:a7:b8:90:3c:a3:28:32:b2:83:a8:
fd:04:53:71:4e:26:86:ff:c0:bc:a9:57:f7:b6:1d:35:b8:1a:
1d:47:89:d8:dd:22:97:a3:43:a0:e5:ab:37:b5:f6:f1:a6:7d:
d3:7e:9a:86:bd:ce:91:f7:51:3f:af:25:9a:39:31:54:23:df:
5b:2c:32:0c:2f:bc:b9:20:3b:d8:28:b7:71:74:db:7f:30:5d:
6d:73:c1:65:ea:d0:fc:e2:c6:76:c6:88:ea:f6:80:4f:e9:1e:
8a:5e:17:82:ca:50:c8:48:b6:ef:a8:eb:8e:d4:07:ba:3a:93:
56:78:7f:c2:10:02:9e:12:35:ed:b5:a0:6b:c9:85:07:4f:4d:
65:e6:89:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystKkHfT0Jsm4DlLczvDrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGMwODM2ZGQ1YzczYjA3NzU5MDRlYWEzYjdlODdhNGEw
YzBjZjUwHhcNMjYwMzAyMDQwMDQ2WhcNMjYwMzAzMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg0ODIxY2I1MmE0YTk2OWRhM2ZmNTJlMGMzZGZjNGU1MWUyMjFjY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf80OfYIG+aHlk9D3nINLFZD4C/w
yk3ngLRaBxXkdyWDmhzjmDYJ0pyn9jPfsEvJ83EezBKadybpjzLae8jrmFAVh9Az
r12Ei6PGHCdLRoRPWar5QHFiWNmJ3vIT1d39XnbOv51CdbokOXjVsBCa31oYb/AQ
tKRRWwn+UkoEkbsDrSJ3QtEus+pC1cpt6wO4uEGU/KyKO3Y/wYqAyArbwf9cH8O/
yolOgLqyhtTDJOvztQlDR++IBWz/cQIe3K0mCUEnLnU5yQsYqdwdRDeoZUhr2XaS
emmseE1uc0cNfAHrNX0YNF3yQkEvjncSMAV8YUqfvhSUipSEOkoaJPZePQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEghy1KkqWnaP/UuDD38TlHiIcytMB8GA1UdIwQY
MBaAFDRMCDbdXHOwd1kE6qO36HpKDAz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTIt
MTllMTM0NzEyZTkyLzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTItMTllMTM0NzEyZTky
LzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+KIAUy3
REdRxLnd8LhWoiHb4bjgTBM4o20INvEMlOmhA/Nbh7E0eOqVQCbnAEMC7bvGecCg
uzzbXPI40z5uI3fKmdsaW9h5VnTHnDeRFwFfLv6/zGmX/khNa9MclR6fVRRDV88u
x/KH9zhBPsHvQyybkmSnuJA8oygysoOo/QRTcU4mhv/AvKlX97YdNbgaHUeJ2N0i
l6NDoOWrN7X28aZ9036ahr3OkfdRP68lmjkxVCPfWywyDC+8uSA72Ci3cXTbfzBd
bXPBZerQ/OLGdsaI6vaAT+keil4XgspQyEi276jrjtQHujqTVnh/whACnhI17bWg
a8mFB09NZeaJgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:48 2026 by rpki-client