Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: iuJU8w7Tm+euwQE/7u36wsKjOc1LW5TTo98WMXf1/jg=
Subject key identifier: 87:7C:38:A3:5D:F7:14:8A:D1:CE:BA:79:81:67:A1:6B:CB:02:05:FC
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 019D38D302998AFD44A59EF06F076939B1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 184F
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: WL0dTvTJT+7P/sC7WfiC72A9on4mns5EVbQa9pCnfBc=)
2: YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa (hash: RWCfa29kamid4Jj9pOqOGZ7EXsOuYoZh2w0x+4VeWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:99:8a:fd:44:a5:9e:f0:6f:07:69:39:b1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=877c38a35df7148ad1ceba798167a16bcb0205fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:f0:e8:33:cc:a1:ef:a3:f5:7a:54:3a:96:
4c:7a:0d:b0:54:60:94:4c:5a:3c:6a:20:9f:43:9b:
e3:3e:45:84:74:14:5d:47:20:c0:db:a2:ac:07:66:
69:73:58:f4:eb:d6:ff:f4:c3:c6:96:a4:ce:67:aa:
f4:ea:9c:fa:48:fa:71:04:64:3c:a6:98:4f:d4:19:
6a:d8:ba:db:d9:6a:a3:2d:5f:52:2c:5a:76:02:27:
c8:a8:74:2f:bb:95:8d:7d:bd:3c:27:21:d0:8a:1d:
e4:0e:ed:32:75:a9:97:8b:77:54:d0:65:d1:f7:74:
3a:74:0f:e5:e3:90:2c:b2:34:4b:87:b2:c9:8a:d1:
6b:96:06:41:04:15:a0:f7:1c:bb:8c:3d:f7:ef:87:
43:92:8b:51:ad:a7:45:3b:df:43:7e:6f:24:a1:d9:
4e:72:4e:ce:12:02:5f:80:5f:36:40:5f:6c:a6:31:
91:e9:34:ea:ea:41:bd:8b:f1:a7:3c:0f:2c:e0:28:
bc:1b:e7:93:87:f0:d4:55:3a:cc:92:f5:fb:41:18:
e2:42:43:df:c7:80:64:26:9b:e5:e9:8b:95:d1:48:
66:3b:f0:0c:dd:07:7e:98:70:ce:44:81:c9:f3:54:
9d:a1:b9:d5:0e:1f:d7:99:1d:44:1e:b6:af:c0:5b:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:38:A3:5D:F7:14:8A:D1:CE:BA:79:81:67:A1:6B:CB:02:05:FC
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:12:2c:3f:67:27:fa:89:a0:0f:b3:36:39:15:59:7a:75:15:
70:12:76:c8:fd:a1:3a:d7:cb:b5:4e:3f:14:0e:31:51:04:48:
31:b6:2c:60:f4:03:c8:53:c6:d7:34:46:b2:4f:44:1a:0f:02:
68:80:2d:ef:00:e8:f5:48:3b:8c:fa:bf:c0:39:75:85:69:77:
10:e2:05:f8:93:a8:dc:5f:c1:cc:bf:b0:a7:90:49:57:5d:e6:
64:a7:9b:af:05:45:30:33:f8:c4:4d:1d:63:0c:ad:e9:1c:ed:
61:f3:8b:c6:80:07:16:c9:e5:6f:fa:83:00:cd:55:6a:90:b6:
52:88:31:d2:91:cc:b1:b1:85:d4:9e:26:5e:61:ea:77:74:20:
4b:68:16:80:a9:4b:7d:e7:20:f8:cd:97:a6:28:47:1b:f4:10:
b1:e1:c3:d8:9b:3d:e2:ac:2c:0d:49:3c:9a:c6:35:6b:74:b5:
1f:99:b0:68:42:a2:d3:d0:0a:72:1b:ad:a2:68:9d:b3:64:c3:
41:36:5e:4e:99:19:cd:4e:7a:d7:55:bf:a9:72:24:12:6e:c7:
e5:1e:aa:d0:52:4c:41:f9:1a:97:39:1c:31:72:63:06:9d:7a:
11:c5:2d:0f:2c:eb:ae:0c:4c:2f:f1:d3:ca:0b:f8:a3:49:ab:
d4:0e:47:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wKZiv1EpZ7wbwdpObHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDI5MjlmMTY1MmY5NTg4MTJkMDk5YTIzM2YzM2FkMzQ0
NWJiZmIwHhcNMjYwMzI5MDkwMDQ1WhcNMjYwMzMwMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg4NzdjMzhhMzVkZjcxNDhhZDFjZWJhNzk4MTY3YTE2YmNiMDIwNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v7w6DPMoe+j9XpUOpZMeg2wVGCU
TFo8aiCfQ5vjPkWEdBRdRyDA26KsB2Zpc1j069b/9MPGlqTOZ6r06pz6SPpxBGQ8
pphP1Blq2Lrb2WqjLV9SLFp2AifIqHQvu5WNfb08JyHQih3kDu0ydamXi3dU0GXR
93Q6dA/l45AssjRLh7LJitFrlgZBBBWg9xy7jD3374dDkotRradFO99Dfm8kodlO
ck7OEgJfgF82QF9spjGR6TTq6kG9i/GnPA8s4Ci8G+eTh/DUVTrMkvX7QRjiQkPf
x4BkJpvl6YuV0UhmO/AM3Qd+mHDORIHJ81SdobnVDh/XmR1EHravwFvOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId8OKNd9xSK0c66eYFnoWvLAgX8MB8GA1UdIwQY
MBaAFDXSkp8WUvlYgS0JmiM/M600Rbv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEt
YjI4MGQ0YzYyNzQ1LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEtYjI4MGQ0YzYyNzQ1
LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRIsP2cn
+omgD7M2ORVZenUVcBJ2yP2hOtfLtU4/FA4xUQRIMbYsYPQDyFPG1zRGsk9EGg8C
aIAt7wDo9Ug7jPq/wDl1hWl3EOIF+JOo3F/BzL+wp5BJV13mZKebrwVFMDP4xE0d
Ywyt6RztYfOLxoAHFsnlb/qDAM1VapC2Uogx0pHMsbGF1J4mXmHqd3QgS2gWgKlL
fecg+M2XpihHG/QQseHD2Js94qwsDUk8msY1a3S1H5mwaEKi09AKchutomids2TD
QTZeTpkZzU5611W/qXIkEm7H5R6q0FJMQfkalzkcMXJjBp16EcUtDyzrrgxML/HT
ygv4o0mr1A5HyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:56 2026 by rpki-client