Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: OvBWf6K/QT0G/GnC/8C3Y5S/m71xZnyph+L35mgQwQ0=
Subject key identifier: 1D:82:C9:9E:6C:87:04:76:3C:AE:3A:7B:66:EF:78:BC:72:21:AB:DF
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019D996227ED220F180D1ABC36BC4E996C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1801
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: MqCYKfSpLdf+QA0m7LIlvtNV6b8GUwyZTEqvYlT8qlI=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:27:ed:22:0f:18:0d:1a:bc:36:bc:4e:99:6c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=1d82c99e6c8704763cae3a7b66ef78bc7221abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:a9:1c:20:59:b7:64:0c:90:5a:be:8e:d2:
31:ba:7c:b0:b7:60:af:5e:19:ae:e0:e9:d1:29:8e:
4a:89:8d:c2:a0:e9:8f:45:a9:7d:60:dc:2e:02:92:
29:95:4d:80:ce:f2:09:fc:cd:45:d9:2c:bf:a6:46:
94:3e:9a:c7:b4:23:bc:53:d3:92:01:7e:10:45:86:
a4:32:87:11:8b:c0:1e:0e:03:c3:a4:fa:94:91:a5:
c0:a9:cd:3a:1d:26:6f:6b:a8:47:ca:0d:ba:c9:32:
b4:02:0b:35:5b:eb:6e:09:29:99:de:f1:4f:6f:a2:
e5:e3:49:7c:93:64:5a:32:72:e1:65:c7:30:0b:0f:
54:32:cb:d5:9d:f3:1b:f8:d5:1c:6b:af:00:5f:6b:
71:fd:ed:1b:f6:af:78:96:3b:67:81:89:39:df:ca:
ef:04:db:03:9d:d3:35:21:86:44:dc:97:15:a2:30:
e4:0c:a4:2b:69:db:17:52:4c:e8:eb:82:90:fa:7e:
48:53:45:9a:2b:7a:03:4a:4f:f3:70:e4:fd:ad:f2:
3b:70:80:ca:39:93:d3:46:94:69:29:8b:64:13:3b:
d3:c1:6c:98:0e:e0:c2:6c:9e:ef:e8:af:01:c6:87:
7f:7a:43:fb:98:1e:39:f7:f4:90:db:d8:27:b0:b8:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:C9:9E:6C:87:04:76:3C:AE:3A:7B:66:EF:78:BC:72:21:AB:DF
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1d:e7:bf:df:0d:1e:4b:1b:15:76:aa:45:6f:87:3e:f0:c1:
75:3c:55:dd:5a:63:47:1a:92:90:23:1e:78:7f:69:70:80:5a:
68:d6:1b:0f:90:69:c6:ca:f1:85:8c:09:07:f2:14:05:6c:f5:
1d:2d:88:24:0e:a9:36:a0:26:53:29:12:14:d7:b9:0f:03:62:
c5:c1:f2:ff:ca:c8:ac:ad:17:3d:b3:95:f3:31:31:55:76:fe:
65:89:30:bc:ba:12:35:98:e2:8b:c4:eb:1e:e5:2b:03:6f:b6:
0b:bc:9b:30:3b:47:68:ae:76:9c:2b:b6:77:01:a0:96:0b:ed:
9a:5d:2e:d3:09:38:d3:56:b9:32:2d:34:72:25:e7:4b:9c:14:
ad:c0:0f:cc:41:82:0f:3c:29:51:ea:00:28:94:50:2f:2a:c5:
c2:20:ba:57:6b:cd:20:ba:fd:df:c7:ab:b9:7b:0d:a7:8c:31:
39:d6:f3:5c:8f:0a:f9:ec:86:1f:b6:1a:0e:4c:bd:8b:4d:df:
08:e2:15:01:c0:1d:91:ba:38:4e:d1:c2:8c:9f:cf:5e:02:70:
77:8f:0b:de:06:aa:25:24:39:85:85:bd:19:c2:fa:ca:da:f1:
5c:c1:ef:17:ea:d1:01:bb:e6:dd:cf:c0:e2:a3:3d:18:35:74:
0e:a2:5b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiftIg8YDRq8NrxOmWwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh
MGNkYzkwHhcNMjYwNDE3MDMwMDM5WhcNMjYwNDE4MDMwMDM5WjAzMTEwLwYDVQQD
EygxZDgyYzk5ZTZjODcwNDc2M2NhZTNhN2I2NmVmNzhiYzcyMjFhYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGypHCBZt2QMkFq+jtIxunywt2Cv
Xhmu4OnRKY5KiY3CoOmPRal9YNwuApIplU2AzvIJ/M1F2Sy/pkaUPprHtCO8U9OS
AX4QRYakMocRi8AeDgPDpPqUkaXAqc06HSZva6hHyg26yTK0Ags1W+tuCSmZ3vFP
b6Ll40l8k2RaMnLhZccwCw9UMsvVnfMb+NUca68AX2tx/e0b9q94ljtngYk538rv
BNsDndM1IYZE3JcVojDkDKQradsXUkzo64KQ+n5IU0WaK3oDSk/zcOT9rfI7cIDK
OZPTRpRpKYtkEzvTwWyYDuDCbJ7v6K8Bxod/ekP7mB459/SQ29gnsLjywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2CyZ5shwR2PK46e2bveLxyIavfMB8GA1UdIwQY
MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt
YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh
LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx3nv98N
HksbFXaqRW+HPvDBdTxV3VpjRxqSkCMeeH9pcIBaaNYbD5BpxsrxhYwJB/IUBWz1
HS2IJA6pNqAmUykSFNe5DwNixcHy/8rIrK0XPbOV8zExVXb+ZYkwvLoSNZjii8Tr
HuUrA2+2C7ybMDtHaK52nCu2dwGglgvtml0u0wk401a5Mi00ciXnS5wUrcAPzEGC
DzwpUeoAKJRQLyrFwiC6V2vNILr938eruXsNp4wxOdbzXI8K+eyGH7YaDky9i03f
COIVAcAdkbo4TtHCjJ/PXgJwd48L3gaqJSQ5hYW9GcL6ytrxXMHvF+rRAbvm3c/A
4qM9GDV0DqJbvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:33 2026 by rpki-client