Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: TnUOJu/8OGaXZbPf2sE4aFhhI24O4ASTtc9umRt+mwo=
Subject key identifier: 00:5C:C8:14:3E:69:3A:C4:B2:E6:8A:A5:64:C3:AB:98:54:66:25:AA
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019D39E53D38CE77BA45DE32A063E22968F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:00:17 +0000
Manifest this update: Sun 29 Mar 2026 14:00:17 +0000
Manifest next update: Mon 30 Mar 2026 14:00:17 +0000
Files and hashes: 1: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: 9GqMP/CxEiVnNb27ArGAa9v3GGuiklRRYAOvZpn0upM=)
2: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (hash: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:3d:38:ce:77:ba:45:de:32:a0:63:e2:29:68:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Mar 29 14:00:17 2026 GMT
Not After : Mar 30 14:00:17 2026 GMT
Subject: CN=005cc8143e693ac4b2e68aa564c3ab98546625aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:ff:41:02:50:15:0b:80:91:cf:54:2f:ab:
b6:39:06:e5:03:63:38:31:ee:49:26:05:ff:18:49:
b5:e4:02:15:8f:ef:33:42:dc:92:5c:b0:5b:8a:9b:
32:5c:56:35:fc:5b:8e:9c:d3:13:fa:ec:07:88:0d:
c2:41:64:a1:7f:39:50:8c:a1:b7:98:9f:d5:0d:ed:
c6:40:c0:35:9b:1d:b1:69:5f:28:87:15:6e:df:a7:
e6:56:8f:a4:f0:eb:8c:4b:5d:42:b9:b0:57:f0:8b:
0a:a3:52:76:23:83:37:df:d4:44:d2:d4:0b:51:8f:
6b:9c:d4:bc:82:63:eb:60:fc:9b:3a:44:3d:4c:2e:
3e:23:21:5d:a3:b7:fb:75:82:3e:0c:b7:fa:38:04:
2b:d2:be:39:b9:38:93:e5:df:6a:ed:15:60:32:74:
f5:52:b3:a8:b4:3a:6a:1b:03:7f:16:51:5e:6b:0e:
cc:64:10:51:bb:6e:2e:51:27:c8:b8:78:f2:20:5b:
1d:d3:fa:14:2c:de:db:a3:4a:67:60:16:3e:56:b8:
2c:76:8e:06:18:c3:8d:7d:84:9c:57:37:3c:32:17:
3e:e8:2d:47:e8:4f:62:ae:b4:21:b5:ce:6a:9e:6e:
94:e3:8d:77:1e:43:aa:ed:15:66:64:6f:e8:f8:84:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:C8:14:3E:69:3A:C4:B2:E6:8A:A5:64:C3:AB:98:54:66:25:AA
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:05:86:75:e5:54:eb:a9:82:18:cf:e5:48:cb:79:43:6c:25:
d6:d8:01:cb:34:97:ba:34:f8:76:d2:06:48:70:37:d0:ef:da:
a0:b1:39:2b:36:54:00:49:8d:7d:ed:3c:b5:18:45:d7:e7:65:
db:ad:0c:3b:0e:f4:53:c6:df:5c:89:8a:ab:68:ae:b3:e2:ac:
b9:c8:63:9c:4e:eb:0b:42:28:a1:44:1b:d4:c8:8c:7a:90:57:
c6:22:eb:c0:e0:92:8a:ad:9c:1a:1f:d0:74:03:83:d0:1e:53:
f6:8f:ed:32:7c:67:da:2e:5c:da:19:11:01:ea:bf:4c:df:8a:
db:78:49:4b:94:6d:66:61:bd:04:38:42:c3:57:12:60:b7:6b:
0a:7b:8d:63:f8:2f:1d:8a:a2:8e:d9:7d:cc:cf:c1:f2:28:6d:
14:98:38:76:c5:9c:af:cb:1a:e8:26:a0:e2:05:7f:e8:aa:a0:
34:c6:0c:df:49:59:e2:c8:00:d3:cc:dd:ae:ad:5e:b2:8a:b3:
4f:c4:77:00:ef:fd:33:db:2d:48:9d:d6:56:81:57:dd:22:7f:
c1:86:3d:7c:ed:61:c6:85:a6:5f:51:53:c9:bd:3e:fa:43:19:
15:c3:11:b9:16:73:ee:a8:35:fb:0c:6e:94:ed:57:86:12:1c:
09:6b:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:24 2026 by rpki-client