Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: /g3vsWi1YY+ejT4XqySf/FwhvsOGXNBE+/L5UQiitAQ=
Subject key identifier: 22:96:C4:7A:45:44:B9:2A:29:E1:EA:AE:37:FE:0E:11:72:FC:ED:46
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019D97AAA481D1315C582C934EAD34AD5BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0C4D
Signing time: Thu 16 Apr 2026 19:00:35 +0000
Manifest this update: Thu 16 Apr 2026 19:00:35 +0000
Manifest next update: Fri 17 Apr 2026 19:00:35 +0000
Files and hashes: 1: 3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa (hash: JXEf/2aFK3BkZHNCEWJcH/8ouUNCu/50cDZ97h1t3QI=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: OcJSPcsBRpmif7UXH1veQjq8k2vwpgfsnOWZlexZ0qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a4:81:d1:31:5c:58:2c:93:4e:ad:34:ad:5b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Apr 16 19:00:35 2026 GMT
Not After : Apr 17 19:00:35 2026 GMT
Subject: CN=2296c47a4544b92a29e1eaae37fe0e1172fced46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:89:cc:0b:a7:a8:73:83:d3:f3:a9:b7:04:
fc:69:ae:6b:fd:c8:76:0c:4e:48:af:be:97:3c:f3:
1f:c2:6c:b3:cf:21:55:1b:fa:05:56:2a:64:b5:49:
b0:76:47:df:f8:4c:94:08:93:7a:e0:e9:f7:58:e9:
9b:9d:e7:aa:21:18:25:47:22:bf:df:42:a2:cc:59:
96:64:11:57:45:6d:db:11:2d:e1:7c:30:31:dd:a4:
fb:46:ea:f0:3a:d1:b5:3c:fe:aa:58:dc:22:dd:66:
4f:00:e1:cf:17:20:fc:3c:a3:4f:3c:51:fa:0c:b5:
99:40:09:62:53:9f:9a:06:fa:f0:3e:15:20:33:1a:
a0:77:cd:94:79:5c:c2:92:73:18:61:10:4f:52:75:
d6:fb:b9:b7:c9:7e:7f:58:d3:1f:b5:0b:e5:54:e9:
59:03:b4:d5:b5:f7:18:7a:7a:e5:59:1a:32:d0:21:
71:76:5e:ea:9e:69:53:3d:fc:66:f2:da:da:b3:ba:
5e:95:fd:5d:13:10:16:da:7f:75:61:d3:bb:1a:51:
10:ed:0b:b0:fc:b6:b4:c1:a5:33:9e:31:7e:cd:b7:
91:aa:5e:b3:47:7f:e2:96:5f:dc:03:49:d6:30:c0:
48:d0:f0:a4:4b:83:bb:38:ef:e1:e8:70:bb:33:ac:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:C4:7A:45:44:B9:2A:29:E1:EA:AE:37:FE:0E:11:72:FC:ED:46
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:3a:60:f0:49:bc:6b:2c:fa:24:fa:41:1a:c6:f6:99:88:
ad:06:2c:6d:ab:4a:cf:f5:6e:b7:9c:6e:35:1b:a7:f4:17:0b:
a2:e8:4d:9e:7c:07:b3:e8:df:d4:a4:2b:9d:59:13:71:36:4c:
7d:1f:36:de:a9:48:93:84:30:49:15:ae:d2:d9:58:73:d8:81:
64:97:83:40:d2:72:c4:1b:75:86:f8:b7:ba:e4:3c:2f:b4:9b:
7a:1e:4a:86:53:c5:99:db:c5:b6:a2:2e:f7:05:23:ce:14:87:
d4:af:fc:90:c2:73:df:94:a4:14:e8:3d:74:3c:e0:6b:04:82:
a6:47:99:4e:0b:0e:f5:4f:c6:8e:ee:77:2a:ec:84:07:d7:6c:
c8:0a:51:d9:76:33:e6:96:71:44:5c:00:65:8d:54:f6:0c:e8:
55:42:c5:f2:4a:66:b8:c8:14:9b:3a:16:90:15:32:fd:7d:9c:
25:01:91:68:b1:54:e1:b4:80:e1:dd:7a:5f:ae:69:c5:39:a9:
00:8d:c0:09:4b:b0:67:97:99:a7:bd:d5:9f:23:f9:6e:64:e7:
37:4d:63:fd:13:96:48:b5:34:20:d6:f7:af:65:26:9c:b5:af:
1e:47:b1:81:8e:01:ad:87:17:5c:a6:de:c9:1c:22:aa:b6:c4:
8d:1c:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:10 2026 by rpki-client