Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 3NttEjGVVm5maSIfokICf4QtOenc/XPQL+DUVcYFzYM=
Subject key identifier: 88:C3:2C:E3:8A:58:13:BF:B4:ED:A3:4D:AE:1F:02:F9:60:36:14:40
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019CABD9E3DDE7AFE9F8506B8AE5A77046BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1786
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: OJ6r4fcMrj8dTw4s27ZDHrUCoT0nPhfqDLQyAad9WIY=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e3:dd:e7:af:e9:f8:50:6b:8a:e5:a7:70:46:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=88c32ce38a5813bfb4eda34dae1f02f960361440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:0d:b4:c2:17:9e:49:48:55:ec:91:d6:61:
58:79:b8:91:8e:f4:8e:ed:c1:0c:bf:e8:7d:ea:63:
31:d5:34:27:07:ac:e2:c3:86:f9:e6:a9:61:a4:e7:
51:f6:eb:0c:7a:67:bb:61:c7:6e:ba:ad:42:1f:1c:
58:07:95:af:0b:de:8f:af:78:10:92:a9:70:4a:d4:
54:ed:c5:b9:27:d4:8d:12:fa:aa:56:03:61:72:20:
db:76:3b:3c:af:67:04:be:3a:70:47:5b:cb:e3:85:
bd:65:69:12:de:74:77:1f:eb:23:24:d6:aa:b5:6c:
92:bc:90:c3:89:1d:15:84:e0:ca:a3:92:d8:9f:05:
01:d4:51:c7:dc:3a:67:fe:56:8e:d7:97:13:d9:95:
83:48:86:74:16:2b:af:1b:9e:41:0b:02:69:38:22:
db:b4:fc:71:9b:ef:20:71:60:7a:4c:c0:3a:5f:a0:
79:ca:d5:0c:db:73:a3:cc:ce:72:fe:b4:81:76:67:
e8:c3:bc:5c:73:d8:37:12:ac:85:b0:bc:ce:04:75:
60:1a:c8:cd:77:9e:c8:bb:42:c2:c2:1f:9c:fe:0a:
9e:fd:7a:54:fa:96:80:29:0a:a7:09:f9:9b:50:73:
96:26:23:e3:7d:1d:97:bc:88:6d:16:55:12:37:83:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:2C:E3:8A:58:13:BF:B4:ED:A3:4D:AE:1F:02:F9:60:36:14:40
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:be:ab:b5:68:02:c7:ae:ca:b8:f9:ee:08:b0:ba:33:37:
ff:c2:31:29:43:01:dc:bd:79:a0:a2:a0:11:d9:4c:93:84:32:
bd:3f:e8:8a:e3:cb:fe:bd:82:99:ea:39:97:b0:da:09:84:b7:
f7:eb:44:1a:a9:04:16:2f:59:5f:97:ef:0a:0f:0f:26:71:a6:
f5:3b:5d:c2:0f:bb:ac:9b:2f:b7:9a:b6:13:ce:9b:00:cc:be:
60:3c:0f:5f:09:90:c6:43:b8:0b:2a:9d:8b:be:5e:2a:d6:d8:
6e:2c:7a:c6:83:b4:64:00:e1:1b:ba:04:68:b6:e2:f4:87:40:
d9:1e:49:a4:ad:26:a7:03:e6:95:0a:74:5b:2a:27:83:a2:ec:
2f:9c:d3:57:83:51:68:52:c9:59:1c:75:02:34:c3:c1:c0:15:
3f:e9:57:d0:29:63:6c:ff:45:8d:7f:2a:69:12:f0:6e:42:05:
4f:12:c8:c6:6c:11:d6:73:dd:da:62:02:63:f3:48:20:c1:6b:
59:5e:10:35:f3:44:0b:4e:85:61:c1:48:24:e1:b0:aa:bb:d5:
7c:69:c2:1d:86:14:ca:43:d1:c2:35:61:fd:ad:dc:3d:4a:e9:
8e:a8:05:80:2b:6e:eb:7d:7c:49:6c:e0:72:d1:3e:de:95:c6:
a1:0b:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:51 2026 by rpki-client