Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: 3HRr0q8Me7xnzkSfzNd+wqo4dl9YOXpNXB/yd2Vf++A=
Subject key identifier: 07:A2:02:F5:15:8A:0E:5A:17:F3:50:B2:9D:23:B9:B6:D5:29:C2:78
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 019DA41CA67040E3CC832E939287D0BD7B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 119C
Signing time: Sun 19 Apr 2026 05:00:34 +0000
Manifest this update: Sun 19 Apr 2026 05:00:34 +0000
Manifest next update: Mon 20 Apr 2026 05:00:34 +0000
Files and hashes: 1: GBUw27gsiJFLtmfTXNRWbUZ_Y94.roa (hash: b7QdPsdPI/bxDJG7gykmn29+t0AwGH/1f0qFnRyv30s=)
2: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: NmlnD9lOrkP3/kQ0epUYEEyrqgY725cPcmW2thEP/pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:a6:70:40:e3:cc:83:2e:93:92:87:d0:bd:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Apr 19 05:00:34 2026 GMT
Not After : Apr 20 05:00:34 2026 GMT
Subject: CN=07a202f5158a0e5a17f350b29d23b9b6d529c278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:d5:e4:2d:c8:08:13:ea:6c:6b:93:7a:2b:
0a:07:12:5c:90:37:5b:6c:ec:9b:7f:24:3c:2e:33:
d0:0d:a0:93:27:c1:e6:e0:d8:31:bf:b9:49:24:92:
6b:0b:08:d7:16:b6:14:05:93:5a:9d:3e:79:a5:10:
c0:d4:36:8a:d1:04:88:bc:ad:96:78:d7:a2:eb:b1:
df:02:39:66:73:ec:f7:8d:62:07:74:3b:18:93:eb:
d9:22:a7:59:b2:0a:33:02:6b:f4:65:e1:b5:cb:cc:
72:1e:5a:ce:3c:96:19:2a:0c:ba:2b:41:eb:32:fc:
e3:7e:ba:72:b9:0b:ea:1c:e4:eb:6c:ab:f5:98:c4:
6d:b2:de:c5:23:d1:c7:cd:46:d9:9b:2d:21:bd:c0:
b0:b3:c5:91:51:92:40:06:56:41:53:d6:06:9c:a8:
7c:a8:75:72:0e:c3:ff:5d:3e:9c:47:dd:9d:86:96:
37:33:cd:46:67:d3:fd:84:5d:f4:a3:78:57:dd:82:
57:d1:8d:28:1b:dd:b0:97:05:22:ab:a4:19:6d:90:
2c:28:a7:79:a2:6f:38:e3:55:b2:f1:82:95:d3:af:
2c:3c:55:eb:f9:b9:16:46:00:3b:ee:2d:62:a4:3e:
c3:68:2c:bb:6b:a7:2b:e8:50:d3:ef:04:d6:8f:44:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A2:02:F5:15:8A:0E:5A:17:F3:50:B2:9D:23:B9:B6:D5:29:C2:78
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:8a:a8:e6:47:5c:ce:f5:8c:a9:0b:d2:4b:96:c5:90:5c:
4a:0f:66:05:f9:28:9e:64:86:b7:80:7d:79:0d:ac:1e:b3:e8:
c1:7e:43:1b:75:cb:8b:1f:b3:f9:7c:a8:97:45:9c:7c:7e:16:
69:ba:0c:54:01:d8:10:04:3c:3f:41:a7:80:65:a0:df:bf:79:
b6:ef:ae:01:60:15:26:13:3d:c7:8c:9d:a7:62:a4:ab:bb:0c:
48:05:a7:df:c8:d7:b8:81:d6:6e:62:49:fc:bc:13:6e:61:51:
ad:52:cf:fa:22:33:9f:12:46:f3:76:d2:4f:d8:ac:2a:15:df:
8a:8d:20:e7:0f:2d:69:f8:8b:08:b3:2f:2c:16:ad:ba:d0:3e:
b2:54:5a:87:63:ee:12:75:3b:6f:be:df:1a:cf:04:f0:5a:f4:
47:7e:5c:86:f4:e2:3f:0b:ed:fb:96:69:4a:d5:ed:d5:5b:a4:
4d:39:fe:94:6b:2a:fa:c1:00:f2:2f:0e:f1:60:cb:61:a2:e4:
e5:6f:54:f3:b5:91:ed:0e:6e:70:96:cf:07:4c:f6:11:4a:99:
c9:09:c6:6e:d9:8e:9c:e2:7a:07:06:6c:aa:fe:ec:e8:d2:3c:
b5:c4:2d:c1:e7:1f:70:0a:0c:db:41:06:ee:8b:db:f8:03:9d:
0a:ac:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:00:11 2026 by rpki-client