Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
File: NdNdrWLFWYRuok4UUAv-RePXUfI.mft (raw, json)
Hash identifier: Vz3dMZMm0lqHMf5vb6iYCF9Wjq6oPxiB7lQYfiXicM4=
Subject key identifier: D6:19:A8:E2:12:F5:2F:FE:97:17:15:36:58:B0:CE:65:ED:17:E3:4C
Authority key identifier: 35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
Certificate issuer: /CN=35d35dad62c559846ea24e14500bfe45e3d751f2
Certificate serial: 019D3A1C4AE9E57E19BE85727AC72A3F43B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
Manifest number: 34
Signing time: Sun 29 Mar 2026 15:00:25 +0000
Manifest this update: Sun 29 Mar 2026 15:00:25 +0000
Manifest next update: Mon 30 Mar 2026 15:00:25 +0000
Files and hashes: 1: A52xkOJ3gt9nOlPHcfsZqFwzDK4.roa (hash: 39PbgxontqguJHDp8xB13e5MSDd4oSH9j0HuESC2TAg=)
2: NdNdrWLFWYRuok4UUAv-RePXUfI.crl (hash: c+ls9LGCEtZZht2i0xqAECXi0go/onDBTwaqzzQu/B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:4a:e9:e5:7e:19:be:85:72:7a:c7:2a:3f:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d35dad62c559846ea24e14500bfe45e3d751f2
Validity
Not Before: Mar 29 15:00:25 2026 GMT
Not After : Mar 30 15:00:25 2026 GMT
Subject: CN=d619a8e212f52ffe9717153658b0ce65ed17e34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:b7:fe:ea:08:87:31:1a:b5:27:a8:b4:70:
ea:c4:b3:f9:c9:f6:36:de:32:c8:2b:ea:c7:7a:04:
30:3b:0a:0d:32:19:25:e3:17:c0:24:14:b3:ca:e1:
29:55:43:2b:e2:7f:69:a6:a0:57:f8:94:90:39:15:
a8:68:9d:18:c3:f5:35:2e:30:c9:94:47:d2:b1:70:
42:4a:e3:d6:7e:a7:c3:ba:b4:69:79:5f:0b:03:37:
fd:3e:ba:05:80:2b:1f:4a:68:04:dc:9d:86:0d:15:
ed:dd:73:e0:ec:53:d2:e3:83:99:3f:bb:7f:67:2d:
e2:a3:15:c0:3b:ce:b7:f1:17:96:4e:24:55:d2:6a:
60:3d:d4:c2:d6:71:5f:86:68:0e:2b:a2:9e:5e:1d:
74:81:3d:5f:24:dd:8d:7f:a0:e5:ec:66:f6:11:d9:
2c:35:d5:2b:30:f7:f2:ed:d3:62:4d:1c:da:a2:14:
7c:14:f5:e8:21:32:63:41:f2:60:a7:36:6b:8c:51:
aa:e7:3c:7e:86:53:22:b0:0d:2f:52:9a:41:f9:14:
f5:73:44:8b:1e:79:13:61:7d:11:12:f5:1b:3c:bf:
1a:a7:d8:be:79:ee:d7:a0:f5:84:4c:7b:09:93:a5:
b5:6c:ea:8e:02:95:c4:c9:25:e6:18:e4:47:0a:70:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:A8:E2:12:F5:2F:FE:97:17:15:36:58:B0:CE:65:ED:17:E3:4C
X509v3 Authority Key Identifier:
keyid:35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:31:a7:be:af:74:2e:42:ca:fa:8a:96:e1:4d:46:5d:65:
f3:3a:e1:cf:ee:a6:22:c8:c0:4e:6f:77:6d:58:a2:e3:73:2e:
b6:86:f4:cb:52:2f:99:ed:df:fe:89:2e:a4:71:5b:26:ce:3e:
38:e5:7c:43:69:a4:49:16:ce:36:66:be:db:33:fd:a2:3e:a5:
9b:9d:d8:99:ec:e8:5a:a3:00:5a:06:de:8f:15:ac:ce:c7:9b:
4e:27:7b:0a:fa:91:be:f9:dc:eb:4c:5d:c5:c6:45:fc:0c:26:
91:7c:83:dc:a0:33:a2:73:f7:6f:ac:f6:20:7b:bf:df:68:ce:
f8:b7:f5:5c:a4:6c:14:2c:06:68:a2:e0:f7:2d:44:f2:40:56:
2e:af:fd:05:29:2e:c3:07:f3:6f:b8:db:69:f5:d6:be:26:49:
95:8c:7e:62:eb:9e:77:ca:63:88:a1:31:bc:66:3b:c8:04:09:
37:6f:7e:21:00:7c:40:55:6a:e6:e0:8a:95:35:62:fc:39:1d:
40:1d:43:e4:ad:d5:0c:18:07:b4:47:b0:50:ef:91:c7:35:fa:
14:e3:db:b8:0f:39:dc:1e:92:50:11:c6:99:ad:d4:21:46:fa:
01:94:19:bc:ac:76:b3:0a:7b:f7:08:a8:4e:de:d4:c7:87:d7:
9c:19:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:39 2026 by rpki-client