Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: kzuUsO02S3AqG0W39SD451IfNA9cwbJsBX8WHbAOQBo=
Subject key identifier: 1B:1E:E1:D3:BE:B8:9C:E9:0C:20:F4:EE:30:5A:C4:3D:DF:CD:CC:4B
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019D3A1D133E1A764E6508F49AD13662EF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 15:01:17 +0000
Manifest this update: Sun 29 Mar 2026 15:01:17 +0000
Manifest next update: Mon 30 Mar 2026 15:01:17 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: TY38W7tl0B0V3kaKTJPuFNxzUZCFyOdtqueGnKZVjzQ=)
2: _wICQn4-i4QzdIbhvMtwO6EwP8c.roa (hash: YrDt1Sh4fa2C8YaTwYl+f2XsqsBE5fk+QKt7Ei8e928=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:13:3e:1a:76:4e:65:08:f4:9a:d1:36:62:ef:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Mar 29 15:01:17 2026 GMT
Not After : Mar 30 15:01:17 2026 GMT
Subject: CN=1b1ee1d3beb89ce90c20f4ee305ac43ddfcdcc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:2f:2a:d6:2b:92:a8:ae:d5:c6:bc:c0:61:
25:07:dd:37:4a:cc:2f:54:c1:0e:ee:4a:64:f7:75:
99:c0:59:ec:7d:37:45:f4:be:87:0b:f2:b4:26:92:
85:89:d2:a3:68:41:d5:8d:21:61:4d:8e:50:43:63:
eb:4c:b9:83:c1:23:68:e5:cc:cb:e4:57:bf:af:f7:
22:17:24:9b:15:a3:30:de:13:fa:ed:34:aa:f3:af:
66:73:af:d7:1f:e3:e1:52:d7:75:7a:7d:3d:e2:45:
47:b3:20:82:df:a8:7f:88:d0:18:72:87:6a:15:8d:
00:dc:4e:ec:6d:e6:ee:d1:30:43:77:31:25:e8:ab:
8f:5d:d7:b6:bc:4a:ba:fb:bb:12:c8:b8:3c:2e:15:
e7:e8:85:89:01:0f:da:e7:b9:b1:49:41:82:0c:6b:
e0:3b:33:08:76:62:42:54:58:3f:a1:92:65:d5:f5:
58:18:b4:66:23:06:86:1c:c3:e0:7d:3e:17:c2:56:
d4:d4:e4:bf:c8:34:99:9d:25:c3:84:2f:d9:08:3c:
5d:7a:c9:54:d6:98:f6:12:b7:67:89:46:84:33:dc:
7d:70:9c:c7:7e:71:4b:21:f0:68:1f:df:47:26:b5:
03:f6:94:b2:53:23:f1:56:a4:d5:65:82:d6:01:6e:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:E1:D3:BE:B8:9C:E9:0C:20:F4:EE:30:5A:C4:3D:DF:CD:CC:4B
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7b:f1:aa:aa:17:c3:bb:e9:40:5a:e9:c8:9b:a6:70:cc:c4:
70:72:17:e3:e7:1b:0f:4a:03:f4:58:ef:73:55:6c:e7:22:43:
3b:0f:6e:db:57:e6:f4:0f:48:b0:61:26:12:d5:2e:37:a0:8e:
2d:ba:dc:f3:d3:d8:3e:4e:f8:c9:f1:9d:09:36:99:c6:c4:95:
b9:42:b8:61:48:93:80:16:55:1a:d3:49:c5:a1:9e:fb:4e:a3:
b8:23:14:36:62:93:3b:19:b5:a6:0a:9b:f3:fb:9b:e4:bf:d5:
d4:dc:23:a2:b8:b2:a4:74:67:97:cf:31:a8:ef:da:bc:a6:13:
ec:f7:a1:af:02:48:f0:89:88:4f:08:ae:d5:27:59:2e:0c:3c:
7c:91:43:93:a3:e3:33:1e:ce:aa:c8:a7:da:f1:14:55:07:29:
98:96:3c:a9:79:47:37:37:8f:d7:27:88:07:6b:d5:cc:8d:a7:
09:9b:f9:a4:da:71:0f:7d:02:cf:47:2c:44:8b:93:ab:ce:bc:
22:71:d6:a7:64:af:94:31:0b:b8:a3:46:bf:64:9a:f3:66:16:
f6:d4:7a:ec:16:a1:ae:5d:7f:67:e8:cd:d8:6c:1d:76:8e:d6:
a0:bf:ec:f1:71:42:c9:48:0e:23:40:c8:d5:b5:4d:0d:dc:9f:
7d:57:e2:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HRM+GnZOZQj0mtE2Yu9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDg1MWMxMTRhM2Y3NzllYTgwMjU3YjFlZTE4MjZhY2Rh
ZTRhNGUwHhcNMjYwMzI5MTUwMTE3WhcNMjYwMzMwMTUwMTE3WjAzMTEwLwYDVQQD
EygxYjFlZTFkM2JlYjg5Y2U5MGMyMGY0ZWUzMDVhYzQzZGRmY2RjYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnYvKtYrkqiu1ca8wGElB903Sswv
VMEO7kpk93WZwFnsfTdF9L6HC/K0JpKFidKjaEHVjSFhTY5QQ2PrTLmDwSNo5czL
5Fe/r/ciFySbFaMw3hP67TSq869mc6/XH+PhUtd1en094kVHsyCC36h/iNAYcodq
FY0A3E7sbebu0TBDdzEl6KuPXde2vEq6+7sSyLg8LhXn6IWJAQ/a57mxSUGCDGvg
OzMIdmJCVFg/oZJl1fVYGLRmIwaGHMPgfT4XwlbU1OS/yDSZnSXDhC/ZCDxdeslU
1pj2ErdniUaEM9x9cJzHfnFLIfBoH99HJrUD9pSyUyPxVqTVZYLWAW7M6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBse4dO+uJzpDCD07jBaxD3fzcxLMB8GA1UdIwQY
MBaAFDXYUcEUo/d56oAlex7hgmrNrkpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2Et
NzA1NTYzMTM3ZDdhLzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2EtNzA1NTYzMTM3ZDdh
LzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHvxqqoX
w7vpQFrpyJumcMzEcHIX4+cbD0oD9Fjvc1Vs5yJDOw9u21fm9A9IsGEmEtUuN6CO
Lbrc89PYPk74yfGdCTaZxsSVuUK4YUiTgBZVGtNJxaGe+06juCMUNmKTOxm1pgqb
8/ub5L/V1NwjoriypHRnl88xqO/avKYT7PehrwJI8ImITwiu1SdZLgw8fJFDk6Pj
Mx7Oqsin2vEUVQcpmJY8qXlHNzeP1yeIB2vVzI2nCZv5pNpxD30Cz0csRIuTq868
InHWp2SvlDELuKNGv2Sa82YW9tR67Bahrl1/Z+jN2Gwddo7WoL/s8XFCyUgOI0DI
1bVNDdyffVfiKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:05:01 2026 by rpki-client