Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: DXl/5uMybzb3LP4po2myI+4aGuabVMqBGYWx35lcKyc=
Subject key identifier: B2:31:4B:EB:F7:85:78:80:5B:6F:45:98:C9:3E:46:E7:01:8D:90:AD
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019CAF7F0FEE41DCDC96FF38397D91993825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 17:01:05 +0000
Manifest this update: Mon 02 Mar 2026 17:01:05 +0000
Manifest next update: Tue 03 Mar 2026 17:01:05 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: BKXY8rxNRek3qO6WThkIDlZozIBqne430EvDOWUAPBk=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:0f:ee:41:dc:dc:96:ff:38:39:7d:91:99:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Mar 2 17:01:05 2026 GMT
Not After : Mar 3 17:01:05 2026 GMT
Subject: CN=b2314bebf78578805b6f4598c93e46e7018d90ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:f8:9c:56:3f:55:1d:d5:ef:ad:4d:9d:87:
87:0d:b6:62:b6:88:2e:b4:17:2d:90:eb:e5:9c:12:
2e:8e:ab:58:f4:f1:1c:0f:de:cf:55:f5:bb:27:df:
8b:09:bd:0f:1d:c3:44:e8:90:85:47:65:80:6f:f7:
54:77:65:63:be:58:4c:f1:71:31:8e:9f:ec:60:4e:
99:70:a3:44:cc:85:ed:e4:61:cf:36:f1:cb:07:c6:
73:b6:a1:13:01:03:4d:2c:df:ff:1f:7a:f8:35:0b:
a7:0a:86:38:76:32:7e:40:bc:42:ff:f2:9f:26:21:
90:61:a3:54:4f:49:5e:03:47:02:0f:11:85:e4:6e:
60:09:71:7d:2f:73:53:03:88:27:08:7f:75:a9:ea:
bf:24:28:48:7e:07:e5:79:b2:89:41:4a:7a:37:e7:
f8:7d:05:7e:d7:64:88:24:d9:b7:0e:fb:7a:94:2a:
fd:a0:0e:73:56:30:53:8a:aa:37:a6:b3:6a:ac:df:
30:af:9a:b0:fa:a4:2f:de:81:0b:59:80:f4:49:d5:
4b:ff:fc:30:90:0d:1b:e8:13:87:37:cd:b7:ff:7f:
9d:57:c7:ec:62:09:19:b2:f4:0f:2e:69:49:cf:a6:
be:ea:84:0b:3c:e4:f3:b8:1c:ef:af:ae:7b:59:7a:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:4B:EB:F7:85:78:80:5B:6F:45:98:C9:3E:46:E7:01:8D:90:AD
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:71:ba:48:7c:51:ea:eb:d3:f3:46:4f:d4:c1:69:5f:a1:
a8:17:ab:b9:6d:99:7c:3e:cd:3f:28:08:20:9e:a9:0c:0a:57:
0f:1a:a4:49:54:5d:05:fb:97:3c:74:0f:df:ab:c4:03:1d:ae:
2c:d0:0d:66:1b:65:23:b2:0a:4b:b5:11:7d:7e:21:43:64:10:
9b:a2:97:69:f8:a5:38:e7:6f:ee:0e:1b:90:3c:48:99:7e:4d:
33:8b:be:d2:cd:61:e1:62:2a:47:c2:43:1f:75:7b:90:e2:37:
69:9d:ac:7b:72:4d:70:3c:ec:a7:53:bf:c5:55:55:4c:e7:60:
42:a5:42:01:f2:b2:52:51:9e:52:49:2e:93:b0:2d:67:8c:2a:
aa:4d:76:2e:0d:fe:a8:78:a7:57:f6:18:b7:91:04:a8:4d:34:
13:41:06:ff:ed:ca:43:08:11:5b:94:29:db:0f:fc:50:5d:ed:
81:c7:89:b4:4f:e9:b2:12:15:2c:27:2f:f4:23:55:a6:e0:65:
a6:52:7e:b5:3d:d9:11:7f:5f:b6:1e:a0:a2:2e:3f:f1:f1:00:
5a:b0:79:9e:cb:dc:5a:66:98:a8:3a:04:31:08:61:de:50:e0:
86:27:ee:d0:54:7d:69:f2:c4:80:6a:fe:9f:f4:68:ce:da:8f:
c6:de:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:34 2026 by rpki-client