Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
File: ndVRnFTz4jtOEhKogIM58pXaSzQ.mft (raw, json)
Hash identifier: 2kSpVIcGIwJQH05agl35rTiauXeWWQtQpA6XTeN8CVM=
Subject key identifier: 43:DE:A4:24:6D:DC:DF:C3:00:32:41:59:87:5F:4F:0E:D7:D6:0C:53
Authority key identifier: 9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
Certificate issuer: /CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Certificate serial: 019D371B2230036918BCE0A53D2D9B7B1CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: ndVRnFTz4jtOEhKogIM58pXaSzQ.crl (hash: zN4n6i1cfA43CsJ8hlDZKSAzSjb0c5cSB2Goodciup0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:22:30:03:69:18:bc:e0:a5:3d:2d:9b:7b:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd5519c54f3e23b4e1212a8808339f295da4b34
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=43dea4246ddcdfc300324159875f4f0ed7d60c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:37:d3:e3:75:d6:68:43:10:0b:9e:06:91:
b5:ef:5f:84:ee:f1:c0:28:2f:e3:03:b0:83:db:90:
2b:89:f1:9a:67:2b:95:08:37:5a:48:2f:80:a5:ea:
b1:f3:c7:f0:a1:18:5c:29:a1:f3:44:82:26:b3:f5:
d1:ab:ed:81:4a:d2:dc:48:69:67:88:07:5c:5a:98:
53:61:13:18:53:ce:cd:e9:5c:0e:fa:c5:05:b9:4a:
19:3d:ce:63:e2:a0:b0:ea:6a:9f:10:fe:23:3d:69:
70:3d:ca:fe:c0:da:7d:12:06:30:6a:21:8b:22:ab:
f0:9a:18:cf:66:79:c6:75:48:61:ca:16:22:5a:64:
1a:aa:7a:d0:65:14:e4:f2:d9:ea:08:c3:09:ba:9f:
7e:0d:15:22:a6:70:32:02:cf:ee:1c:b9:ab:4e:ca:
a0:ed:cd:8a:a2:e7:b0:66:48:75:1b:9a:dc:9b:b3:
99:13:8a:11:b1:2c:92:60:f1:01:f4:8e:87:6a:37:
2f:fd:11:1f:b2:fc:f9:d2:00:99:69:c1:92:b3:eb:
b4:16:3d:d3:ad:83:63:4c:cd:e1:6d:89:38:8b:ef:
98:85:75:ed:54:6b:5c:1b:3a:da:03:13:5b:3c:1b:
2e:c7:52:b0:e9:45:7a:61:4b:56:c8:c1:d7:03:75:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:A4:24:6D:DC:DF:C3:00:32:41:59:87:5F:4F:0E:D7:D6:0C:53
X509v3 Authority Key Identifier:
keyid:9D:D5:51:9C:54:F3:E2:3B:4E:12:12:A8:80:83:39:F2:95:DA:4B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndVRnFTz4jtOEhKogIM58pXaSzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1509a1-944f-488d-914f-8f8a7711717f/1/ndVRnFTz4jtOEhKogIM58pXaSzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:51:aa:47:9f:22:bf:ea:65:ca:3b:7f:85:c4:9d:cb:45:
ab:1c:17:d7:4b:35:8a:06:12:3f:f7:d9:2f:84:01:d2:bb:ea:
02:4b:88:8b:71:a3:ad:e9:5a:5a:37:12:03:bc:20:2c:38:c5:
21:4f:db:fb:34:b7:c0:a7:eb:a8:c2:f9:bc:71:43:d9:ad:79:
b7:34:41:39:b0:e9:0b:19:b9:12:3b:a1:ee:4e:b4:c1:85:d4:
4a:1e:5c:bc:c9:42:10:c9:b9:75:ee:b1:4b:bb:58:1b:f9:69:
a3:8e:e6:c2:0a:ad:81:f2:58:18:76:23:08:75:ec:83:cf:89:
a2:6c:f3:25:4b:e5:95:6b:74:af:b9:0e:5b:33:9a:04:06:a4:
64:b9:3a:f5:87:cc:c6:87:d5:5c:87:c4:b7:1c:ef:97:43:68:
4c:5f:21:32:cd:49:d9:f9:a9:ab:a3:5c:b6:40:8d:ce:a3:6b:
50:09:60:89:fd:43:a4:c5:9e:96:64:ad:fb:66:99:55:39:21:
98:31:18:73:71:26:d0:e6:f2:c5:c5:0a:24:02:53:af:cd:4f:
39:8d:53:66:3b:85:5a:9b:7c:01:c8:1a:6b:81:dd:9b:5a:62:
71:ae:92:9c:82:38:23:c9:41:1b:b8:51:5b:aa:b1:96:03:75:
fa:82:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client