Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: w0Znmc9s0YahGN8U4tzGBReHq1Yurr1h5RtO9JdG8eE=
Subject key identifier: 0D:4D:F6:6C:BC:2C:8D:CA:E3:67:55:3B:96:D1:F2:8F:47:C8:0A:3A
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019D390A24E893B22AB5DC0DCFA266536F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0710
Signing time: Sun 29 Mar 2026 10:00:59 +0000
Manifest this update: Sun 29 Mar 2026 10:00:59 +0000
Manifest next update: Mon 30 Mar 2026 10:00:59 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: LmdLeuY28X8Sm6yZjhBkGBRNr67aAPXJXhfrHpe3y/Y=)
2: gKy9zHGv_AzpQLevKwupWQqjQQo.roa (hash: b17GwYPcAv3jWGndXOTYFmkgmyJcASg4uml7i5Uih54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:24:e8:93:b2:2a:b5:dc:0d:cf:a2:66:53:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Mar 29 10:00:59 2026 GMT
Not After : Mar 30 10:00:59 2026 GMT
Subject: CN=0d4df66cbc2c8dcae367553b96d1f28f47c80a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:9f:e3:9f:98:2b:72:19:90:00:09:c8:2a:
0f:eb:8b:ae:13:c0:43:d8:04:44:56:16:75:ce:88:
5f:e4:c0:44:69:2b:28:57:e8:09:9d:7e:e7:94:fd:
08:be:3e:65:71:02:b4:49:e8:a5:25:66:a1:7f:53:
b0:13:bf:e1:71:65:c6:4c:ed:99:f5:8b:9c:a0:a0:
7a:a3:51:69:83:9f:25:60:52:75:68:ce:40:6c:0e:
bf:f4:3e:ce:99:f4:32:93:ce:85:15:12:29:62:fc:
6a:a9:19:37:29:a4:a0:49:43:2e:61:19:30:a8:8e:
bf:28:71:14:bd:55:a3:1a:2e:55:c0:c4:16:d1:71:
35:24:18:03:ef:12:1a:72:bb:da:47:a1:83:eb:3b:
c9:65:34:a0:4a:c1:db:20:8c:e9:2a:76:70:e7:48:
cf:4f:4a:2c:94:ca:fa:5a:f7:59:2f:b6:b1:da:b6:
ae:e1:01:64:3d:cf:93:e7:72:ca:d8:06:9b:23:da:
dc:74:95:14:97:dc:a7:fa:97:81:9a:66:e9:58:ab:
dc:26:68:39:3c:8e:e2:66:7a:b1:01:35:da:b9:3d:
a3:a9:ee:d1:42:a9:35:2a:ac:8e:cd:0b:53:a8:eb:
22:54:7f:3d:0c:a3:05:6c:b3:25:0a:cf:cd:2a:d2:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:F6:6C:BC:2C:8D:CA:E3:67:55:3B:96:D1:F2:8F:47:C8:0A:3A
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:68:c8:d9:98:fa:d3:df:56:94:f6:d5:97:c1:11:4a:c0:57:
50:e4:ca:50:f7:4e:52:83:95:50:25:48:91:c8:82:dc:30:8f:
47:dc:8b:a7:e7:91:82:26:78:4f:c5:7f:ac:bc:ea:48:e5:50:
f1:f3:1a:c0:33:c5:58:68:9c:42:1b:49:fd:11:75:f9:ab:8a:
6b:94:37:06:a9:0d:33:d1:b2:50:54:3c:fb:9e:56:d2:12:23:
fc:f2:d9:62:cb:ea:0d:b4:db:e5:bb:55:5d:f9:5b:53:6c:60:
e3:c2:57:69:95:5d:15:79:fb:d8:fa:df:db:f1:f1:25:20:d4:
61:94:42:6f:cd:d8:af:9c:07:54:16:8e:13:01:d3:df:f5:52:
83:d6:dc:e0:96:82:08:92:a2:99:47:91:d6:3f:02:71:ca:9a:
74:83:24:a2:ff:06:ad:58:f8:1b:f9:91:d0:f3:40:86:1a:f2:
33:3f:1d:2b:8a:db:50:b5:dd:b1:54:33:04:f7:25:40:42:01:
37:29:9d:1c:63:5a:36:8d:b4:b9:88:8a:2f:2d:55:a1:ec:3f:
c1:a4:e3:f0:e0:16:84:54:fd:66:f4:e8:5f:48:83:92:0d:5d:
c2:22:0b:b6:11:f5:4c:36:3d:38:91:9c:c6:9c:79:55:7c:9b:
c3:23:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:57 2026 by rpki-client