Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: hxM16d5W4N/8/OWbIfqkGKv7BOV0UmQaeLEUrGvjq1s=
Subject key identifier: C2:B9:02:5E:6E:89:CD:01:2E:5E:28:F7:73:15:A8:21:85:71:39:B3
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019D39781504CCC4E781BF9812CEE2233E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 06DF
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: we9xlxSByi9rQYHhHNNz9/Mt1MDXa8BbVh+JKub3wqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:15:04:cc:c4:e7:81:bf:98:12:ce:e2:23:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=c2b9025e6e89cd012e5e28f77315a821857139b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:37:9f:cd:4d:57:b9:9b:20:65:a4:c2:7c:
e5:54:fc:f3:28:4a:33:20:9d:cd:1c:27:a0:a2:22:
8c:42:d0:58:3e:d5:15:02:65:95:d4:df:12:7d:47:
61:dd:8e:49:b8:00:18:af:97:d7:e2:16:35:af:6f:
e2:d8:59:ff:24:68:16:5f:7e:80:5a:18:47:3c:49:
44:72:54:79:50:03:19:2d:5f:5f:ca:80:6c:12:6e:
7d:ac:ef:3e:16:c8:9d:8f:ee:ed:b4:8e:12:c4:3b:
21:84:5e:4c:8e:a9:ba:16:f7:a9:16:a4:76:2c:74:
14:4a:10:36:fb:fa:2d:48:76:ca:a8:3a:ef:88:68:
aa:c1:1f:09:84:f7:69:ae:12:d7:25:1b:2d:e9:be:
cf:58:2b:bd:f1:21:99:c4:44:11:9b:e4:2b:81:99:
8a:15:73:9c:84:5f:c8:3d:2b:12:95:c7:f3:12:d9:
97:11:3e:c4:43:3e:3a:ed:c8:96:0f:3c:8f:96:9f:
77:b6:d6:52:de:90:58:64:bb:ce:68:89:b5:79:92:
05:1d:f3:26:0e:70:a9:28:29:01:a8:8d:11:67:9a:
74:4a:13:30:3b:63:f9:cb:26:db:b1:d1:82:fe:15:
08:31:bb:e7:3c:07:d6:82:b7:e0:ec:40:6f:94:ef:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B9:02:5E:6E:89:CD:01:2E:5E:28:F7:73:15:A8:21:85:71:39:B3
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:cc:ef:57:d3:52:57:33:0e:33:ce:af:6e:8e:ef:da:5a:
65:80:12:d9:33:c0:dc:10:0c:9c:c4:11:d9:3b:ef:41:1c:b3:
74:f0:6d:6b:b4:c7:c2:39:2d:e7:4c:0d:d4:71:f0:e0:dc:fe:
ae:b7:c0:dd:e5:d5:31:2e:66:36:7c:4c:06:f4:96:75:2a:cb:
03:ee:14:75:e0:93:d9:44:7b:07:ef:3e:41:50:81:42:9d:1f:
58:3c:db:0b:21:76:56:ca:ae:e8:a9:8f:7b:3f:6e:40:16:d4:
a7:46:7f:f4:17:6f:da:5a:0e:ef:68:79:a7:1a:95:d6:80:36:
bf:5a:84:ca:f9:47:db:6f:14:e2:6b:3c:b6:d8:89:83:0f:2b:
e8:3c:d6:b0:06:04:41:60:af:ba:51:98:08:f4:47:72:b0:84:
2f:9c:8c:7b:f4:38:5d:23:a5:1c:14:66:04:f7:d6:33:92:17:
29:77:32:a9:95:e5:da:34:86:4c:87:da:e4:13:89:50:c2:fe:
f2:ac:d3:4b:43:54:e3:97:46:34:b5:26:18:d0:8f:3c:e2:34:
6f:4b:6f:4a:4b:34:dc:54:e2:f8:52:10:78:c0:69:b9:90:1b:
16:53:cd:4d:d5:45:a8:77:bb:f3:2b:fb:96:af:cd:f3:99:12:
5b:d3:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:47 2026 by rpki-client