Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: bsL8IiXg0S3gkdLJgy9suZkBBSBg077emQE1ozb9TWA=
Subject key identifier: 8C:69:23:06:98:B6:15:41:77:5A:53:B2:5F:22:AB:42:42:8B:9B:6A
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019EC0DB76A5205E529D57664FFB8F7F9F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 189A
Signing time: Sat 13 Jun 2026 12:01:08 +0000
Manifest this update: Sat 13 Jun 2026 12:01:08 +0000
Manifest next update: Sun 14 Jun 2026 12:01:08 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: zUdNTm573UBn0xK4vBazZqoHzU9lpF6IeVqhjuGbXk8=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:76:a5:20:5e:52:9d:57:66:4f:fb:8f:7f:9f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jun 13 12:01:08 2026 GMT
Not After : Jun 14 12:01:08 2026 GMT
Subject: CN=8c69230698b61541775a53b25f22ab42428b9b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:06:06:b4:3d:e4:7a:31:1d:cd:2b:5b:d5:
c6:bb:52:ac:d4:50:c0:d0:99:96:78:19:0b:b0:32:
6e:6e:d7:d1:60:96:13:b0:b9:34:01:5d:50:b6:a0:
3a:16:cd:1f:82:bc:ed:ab:9f:fc:3c:a8:27:20:fa:
27:f6:8d:bb:aa:94:be:7a:30:33:bf:93:3f:59:d2:
24:74:eb:75:1c:d2:6d:c1:38:f0:86:88:b3:cd:c2:
ab:ba:cd:00:ff:35:91:b2:2c:a4:c6:8e:9d:bf:e9:
fc:18:0d:8a:f3:80:df:91:b1:8c:b6:eb:22:a3:de:
6e:e1:6b:a9:98:d1:f9:b8:db:a9:a1:f9:3d:c4:82:
92:e5:cb:44:0e:0f:d4:62:9b:fe:56:87:e2:21:bb:
e1:39:42:69:18:37:49:5b:bc:fe:89:9a:30:ee:9f:
bf:cd:94:4e:bc:42:c7:16:78:a3:20:6e:46:9e:7c:
48:36:7c:f0:7d:bd:7c:a6:f4:3e:72:67:16:37:aa:
ac:9e:f9:9a:73:f9:a6:89:33:34:0c:af:2e:cd:71:
54:52:6e:49:63:78:3e:1d:2a:07:a3:83:02:2e:b1:
5e:fb:fd:47:ed:0e:64:ad:28:30:4c:80:64:6e:b2:
72:5e:d8:3c:07:cf:13:1a:4b:1a:b0:73:2d:ec:49:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:23:06:98:B6:15:41:77:5A:53:B2:5F:22:AB:42:42:8B:9B:6A
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:91:31:cd:01:00:60:99:80:0c:98:28:b3:ce:a8:43:8b:ab:
d7:e0:9b:23:0e:f1:b0:09:8c:5a:71:37:1e:8c:2a:5f:fe:e2:
f8:75:66:f3:d1:c4:84:72:7c:e6:0c:c0:92:29:fc:fd:b9:31:
e4:91:22:3f:11:8a:46:0b:e0:95:ee:90:c1:39:cb:7f:53:1c:
79:ef:26:d2:ba:2e:60:28:e2:24:a5:82:26:48:ee:6b:64:5e:
a5:cb:a0:8e:c8:d5:c0:72:62:26:ea:03:c4:cb:5f:a1:23:e0:
f1:ca:57:6a:58:a3:a6:d3:f7:f4:01:dd:31:18:86:07:e0:1c:
92:eb:87:8d:85:69:ef:44:39:55:27:93:c4:91:9f:af:b3:9d:
3e:3a:93:ef:b3:31:1a:60:9c:67:0b:3b:22:c0:7e:9b:1f:f5:
df:8a:dc:b6:86:cc:fe:d7:cf:1f:75:13:73:25:b7:1e:54:2f:
f3:4a:cf:db:1f:6b:1c:f5:55:68:46:c7:2b:77:7e:30:f2:1a:
07:18:a4:2e:6b:bc:b3:18:59:9b:51:c4:db:38:29:8f:ae:0f:
32:f9:e7:05:24:61:de:f8:23:54:2e:ee:da:72:82:e3:2f:c4:
7c:97:f0:95:70:94:a2:e0:4e:bb:34:74:98:67:d1:9b:91:9c:
ab:da:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:19 2026 by rpki-client