Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
File: NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft (raw, json)
Hash identifier: ApbbBst+NmeebUNF5U96whRxpUO9oOn8uf5foHsottw=
Subject key identifier: 01:E1:A7:4A:3F:35:00:E3:31:8B:76:43:10:17:48:F9:08:7B:B0:4C
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 01A08AF9FC075F755E005133329E20693194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
Manifest number: 0819
Signing time: Thu 10 Sep 2026 11:00:33 +0000
Manifest this update: Thu 10 Sep 2026 11:00:33 +0000
Manifest next update: Fri 11 Sep 2026 11:00:33 +0000
Files and hashes: 1: NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl (hash: OMTgN75nJ5PzyAfEmMx4FLShLjdW+W2W6T76lTW+KgY=)
2: V0FXBHF7zd7eoSFLKhrjKxi24vc.roa (hash: Ku0lrgk8w0+7zmhpvQbPryOCwIndLIyVecGBgi9w3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:fc:07:5f:75:5e:00:51:33:32:9e:20:69:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Sep 10 11:00:33 2026 GMT
Not After : Sep 11 11:00:33 2026 GMT
Subject: CN=01e1a74a3f3500e3318b7643101748f9087bb04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:75:98:df:94:9a:8a:3b:17:00:a5:9c:95:14:
70:e2:5a:c6:16:cf:95:5f:e0:e5:a2:88:b4:8e:40:
0a:ae:c8:54:bb:26:50:7f:21:d2:bd:5c:14:e7:df:
04:93:2a:59:54:42:13:3a:f0:a4:cb:e7:f2:af:13:
a4:60:8a:de:6f:3c:ef:fa:1d:40:13:7d:44:c6:f5:
4d:4d:c5:4b:31:f4:dc:37:58:2d:9e:75:2d:1e:89:
ac:e3:dd:0e:81:dc:96:8d:7f:ab:13:38:20:1b:61:
58:b1:a7:de:e3:54:b3:e2:c2:e7:0d:49:5f:42:2f:
7f:60:d1:03:54:67:51:93:42:4e:c3:81:68:6e:84:
4a:7a:38:0a:18:4b:5e:78:a8:f6:18:1c:98:51:57:
1f:6c:87:d8:bc:3c:99:30:14:60:2b:56:6c:b7:c6:
cc:21:7f:92:ed:d0:e0:5f:cb:ad:8b:67:aa:4c:a6:
ff:b2:16:fd:39:c0:2b:c5:41:d5:db:62:ee:03:ee:
7f:41:9c:e2:ef:ed:04:10:c6:f0:f2:80:ce:d8:c1:
be:f3:aa:10:2d:eb:fc:7a:95:cd:15:b7:cd:4b:02:
5a:b9:aa:22:9d:cb:b3:b5:b8:8d:1e:48:75:f4:fc:
04:85:1e:9a:d9:ca:2a:e4:d4:9f:0b:ab:7b:47:ca:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E1:A7:4A:3F:35:00:E3:31:8B:76:43:10:17:48:F9:08:7B:B0:4C
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:12:61:c7:37:36:0e:0e:02:57:ab:d0:58:b0:94:60:ec:a3:
96:af:6f:b6:55:70:61:bd:87:1b:3f:99:2a:1e:19:7c:4d:61:
f0:39:66:2a:b8:97:1e:3e:3d:62:bb:02:b6:dd:4c:fb:f6:e9:
38:e3:b5:53:68:60:88:e9:32:6f:ce:c3:b0:8e:d8:5d:bb:87:
dd:10:50:c7:cf:20:04:e5:20:91:44:55:90:6f:5e:f6:9f:4f:
63:02:6e:8d:71:f8:a3:dc:d6:d3:40:e9:c1:33:95:31:9c:3c:
31:f3:1f:6c:0e:54:db:e8:31:37:30:9b:40:2d:70:34:c6:37:
21:f9:b8:e9:e2:9c:f9:23:c1:db:22:63:45:cb:05:be:80:67:
6d:77:72:c7:9d:09:6b:92:e6:4f:24:94:cf:f1:b7:7b:79:e2:
ed:cd:06:ef:4c:99:62:b0:09:f3:67:e2:18:77:b1:d1:90:a5:
6b:ff:60:f9:b2:af:b0:cc:f0:58:f5:49:c9:cd:3d:30:1a:4f:
de:bf:ca:2c:b5:36:e1:4e:ac:2d:d3:08:c8:59:d0:70:3c:74:
df:42:af:16:7d:51:a2:97:aa:d5:a1:c4:28:0e:64:c1:c0:94:
4e:26:01:e8:cd:1b:be:3f:af:3b:d0:1f:4d:e0:f0:13:d3:0c:
93:7d:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:42:03 2026 by rpki-client