Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: GJhPUAr0kdQebWxVTLVaQxUkzKUlOK2jN/Ru02vYwpY=
Subject key identifier: F5:81:A7:18:B1:D9:46:41:C6:4E:74:7B:B7:05:23:92:74:19:B6:E7
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 01A0016EF3DFB76106261A23049D3FC5B6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:00:43 +0000
Manifest this update: Fri 14 Aug 2026 18:00:43 +0000
Manifest next update: Sat 15 Aug 2026 18:00:43 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: Q1c5uJSky120s2DP7ufqP360F2V4P4rfjFYYpgIwmpM=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:f3:df:b7:61:06:26:1a:23:04:9d:3f:c5:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Aug 14 18:00:43 2026 GMT
Not After : Aug 15 18:00:43 2026 GMT
Subject: CN=f581a718b1d94641c64e747bb70523927419b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:3b:8e:d2:d3:0f:85:1a:ae:37:c8:03:c9:
82:b3:49:16:8b:c5:2f:46:c2:d6:ae:6c:8b:d7:b4:
ed:d7:cc:e5:2c:4b:ee:ce:17:1f:e9:82:b6:b5:a5:
47:50:4a:f5:2d:7f:90:2f:44:64:0d:41:2b:14:67:
76:77:ac:ae:3c:a3:ce:25:6c:22:cf:06:8e:80:dd:
38:76:9b:da:54:7b:96:eb:27:0a:0a:bd:96:08:07:
78:4f:a2:2d:45:0e:43:56:ac:74:14:17:0a:7a:51:
69:83:0a:54:e8:2c:30:fb:ee:05:39:dc:06:53:5c:
ed:68:2b:a9:fc:bd:71:ab:b2:c2:cd:21:ed:15:ec:
0c:34:44:d6:70:2e:c1:fb:02:f0:6e:46:87:a7:50:
3c:fe:27:58:37:0c:79:57:16:57:6f:37:a6:61:24:
36:b9:fe:7a:27:be:8a:14:f9:22:14:08:61:88:22:
5c:8a:26:8f:00:0f:af:91:b0:20:1c:21:d6:f6:e6:
4b:46:26:9f:d7:a8:fb:c5:e4:e8:f5:ff:69:1b:7e:
07:71:48:44:c5:5e:54:29:12:8e:8f:61:0b:8c:34:
82:56:b8:17:d6:3b:94:f4:fc:f3:91:bd:d9:87:b3:
6c:c1:f0:70:cf:ba:82:8a:5d:70:a2:d5:3e:15:cb:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:A7:18:B1:D9:46:41:C6:4E:74:7B:B7:05:23:92:74:19:B6:E7
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:90:d4:bd:e3:75:3d:87:07:f0:22:f9:e0:56:08:bc:99:
3b:94:6e:c2:55:65:2a:d7:c3:64:a5:d3:7d:9c:34:1e:05:f4:
32:2d:89:6c:30:d1:f8:ca:a0:c7:42:40:65:fd:30:51:97:0b:
06:7a:da:7d:a9:27:46:1c:db:d0:0f:dd:bf:61:ae:30:f9:03:
07:4d:b3:90:b0:ea:63:eb:1d:6d:0a:29:5e:3f:f5:e1:14:68:
42:da:d3:8e:8a:7e:39:0f:2e:47:34:19:79:da:23:4d:50:5e:
fd:55:57:47:fd:a0:66:ce:66:34:0b:30:a4:96:67:c3:b5:05:
50:f0:74:68:2e:8f:38:8a:14:2d:71:b6:0d:a4:fc:04:c1:c9:
65:6a:cf:4c:7e:16:8f:78:2a:ab:19:82:eb:22:81:ad:ad:83:
10:45:f2:e0:45:73:6c:6a:22:52:75:f5:f8:3c:06:1c:2f:c4:
fb:27:83:f1:a0:60:fc:d0:c7:da:ad:f6:dc:c2:78:97:a3:7d:
17:fb:71:7b:8b:ed:79:f4:2d:8f:94:3a:d8:46:e5:c8:6a:0a:
58:f9:cd:ce:90:f7:a0:29:9c:af:bd:76:88:d3:97:9e:e1:fb:
7b:7f:77:82:6a:db:cf:2c:38:f6:5f:32:40:d0:c2:22:81:31:
14:ba:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:44 2026 by rpki-client