Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: Uw3HRkSbTuhTjJ5o69IDsWD4174xWgucbSqRsA9Upto=
Subject key identifier: 60:69:7E:4D:E0:EC:BC:18:00:FE:3B:8B:38:84:87:05:CA:6D:3D:63
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019F129CC5D0A14E609A6A2153E0D7F61678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 07D4
Signing time: Mon 29 Jun 2026 09:01:31 +0000
Manifest this update: Mon 29 Jun 2026 09:01:31 +0000
Manifest next update: Tue 30 Jun 2026 09:01:31 +0000
Files and hashes: 1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: FmUEKqTS/C1EjnF0iARqj4P+2C/WrwvAw9RXgpK2D0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:c5:d0:a1:4e:60:9a:6a:21:53:e0:d7:f6:16:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jun 29 09:01:31 2026 GMT
Not After : Jun 30 09:01:31 2026 GMT
Subject: CN=60697e4de0ecbc1800fe3b8b38848705ca6d3d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:8f:c1:0c:d1:d1:ac:a6:ce:6c:03:c2:66:
d6:6d:e4:cb:3e:fc:a4:5f:5b:b1:14:f4:d6:e5:45:
0d:89:81:f4:b1:cb:82:26:43:a1:74:11:6a:a7:85:
28:c7:5e:ca:9f:27:3c:9e:aa:f7:50:b3:5e:80:52:
5c:4b:c5:9b:3b:3c:c4:9f:b5:2b:84:21:e0:b6:d9:
c7:e6:2d:17:51:a1:67:31:05:0e:1a:ee:b9:1a:9a:
24:64:b2:49:4d:2e:b1:58:ea:1c:a1:2c:bc:b9:b3:
e0:23:0e:4e:d3:5b:03:db:94:b1:55:9a:ad:8c:6f:
89:b0:c3:26:c1:98:15:f3:73:46:e1:d9:e1:fd:4e:
03:5d:db:9e:7c:85:f6:3e:1b:e0:0f:d6:8f:3d:1b:
fe:2f:ad:2a:22:77:63:50:19:ba:10:cc:06:54:f4:
fc:f1:c7:96:d7:ff:d0:48:59:3e:48:79:ae:5d:01:
24:ec:9d:e2:25:b0:69:0d:c8:0c:cf:6f:c1:5a:6e:
e6:30:8f:73:c8:d7:76:7b:0e:a5:4c:96:c5:5b:64:
e1:4f:9f:1e:c9:e2:4b:ff:b8:08:31:22:98:b7:d8:
f6:8d:f6:51:ce:14:4b:42:b3:f8:ba:c1:59:17:77:
2e:a3:93:0b:cd:89:48:9b:18:a6:74:28:0e:6f:81:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:7E:4D:E0:EC:BC:18:00:FE:3B:8B:38:84:87:05:CA:6D:3D:63
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:21:fd:84:15:26:61:0e:c8:45:a3:97:1d:37:7b:f1:e4:
fa:ca:d6:f8:b8:9e:bd:9e:72:e8:37:bb:c8:de:85:e9:c2:47:
79:a6:6d:57:74:cc:44:6a:87:52:cb:ce:1b:fa:58:22:11:51:
e4:50:3c:a8:5f:99:f5:9d:ca:b8:2d:97:43:93:a2:5f:b2:59:
53:fc:36:7c:80:e0:0b:86:be:d2:df:e5:e5:ee:4c:72:a3:e9:
39:dc:0d:e7:74:4a:ce:da:14:9f:69:a3:78:4b:7a:7e:21:a1:
eb:71:dd:ce:95:4c:71:60:a5:de:47:0d:b6:25:41:76:48:19:
7d:2c:b3:ad:ed:32:23:a5:cc:2e:cc:fc:55:c7:86:26:2a:e4:
63:1d:b4:5f:a2:72:70:b8:5f:19:58:28:f8:39:75:5d:b9:71:
00:63:d3:e5:ae:45:25:8a:cb:0f:55:56:de:11:de:a8:fe:1a:
d2:1a:49:a8:3a:23:a5:a8:c7:94:65:94:3c:17:04:8d:34:96:
87:a7:7a:44:8e:40:b6:73:d7:d3:80:f3:53:db:1e:10:b9:15:
22:0f:53:77:d7:96:cf:78:3f:d3:05:f9:73:63:bd:73:a7:6d:
33:94:44:66:b5:66:dd:3b:76:0a:69:90:95:5d:dd:17:62:f3:
52:12:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:55 2026 by rpki-client