Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: LTsq5DDmXXHZ1FWzqxsASZwrMNMlDAd/HcbkD2JQ7F4=
Subject key identifier: A1:E5:96:B0:CA:31:30:4E:70:E0:56:A0:18:4D:97:C9:9C:5A:5C:3E
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019D37898217512F793D65351F982DFDB035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: hPNd9nPeKfmgeIH26dce2MmmNCvM9RCd50yXaoQl/m0=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:82:17:51:2f:79:3d:65:35:1f:98:2d:fd:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=a1e596b0ca31304e70e056a0184d97c99c5a5c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:6b:a0:8c:9b:5f:cf:ee:35:5d:b0:4e:cf:
de:6a:67:c7:68:89:bc:c0:99:ce:26:36:1a:65:5b:
a0:da:3f:94:84:42:af:96:b5:95:1e:c7:69:00:db:
c4:ca:c1:ef:e4:44:15:29:12:11:07:87:82:40:00:
0b:77:0d:18:4e:a7:cb:55:2e:66:e6:52:ae:4e:a7:
87:8f:2e:0e:63:3a:78:c4:37:02:7a:39:84:29:34:
f6:90:70:80:c5:3a:8c:3f:ef:e9:6b:c6:c5:12:35:
9c:6e:83:2a:4b:20:f3:ae:21:67:c1:2b:5b:90:34:
bf:e2:4b:f2:d2:48:c1:c2:5e:7b:84:42:8e:60:5a:
4b:25:45:65:d4:54:2d:f3:a6:39:e4:db:e1:ed:e9:
2a:d7:81:89:f3:63:87:65:52:85:39:06:a9:61:11:
5a:d1:8d:96:60:ac:76:31:a6:3b:c1:b1:19:ff:86:
19:13:75:09:b8:1d:a0:58:2b:3e:4d:74:78:8f:dd:
72:83:b2:ca:af:30:22:d1:77:a0:01:b0:9e:a6:c9:
52:ba:d6:b3:fd:53:02:51:38:52:0b:63:ba:df:82:
d7:92:57:ea:d4:f4:9f:fe:80:b5:a8:10:b4:54:fd:
9b:d8:ac:42:61:d5:91:ac:95:94:87:5e:c3:ed:5d:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:96:B0:CA:31:30:4E:70:E0:56:A0:18:4D:97:C9:9C:5A:5C:3E
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:13:5e:9b:48:c8:81:e1:c0:d2:e0:ad:62:4d:6a:59:de:
e8:59:52:ff:1a:aa:35:b1:24:a2:20:05:00:af:02:a7:2a:27:
3e:de:7a:78:aa:2e:96:8a:3d:7a:3d:fb:f2:77:2f:fe:01:93:
c9:1f:5b:45:e2:5e:0f:df:73:df:60:db:23:da:b1:1b:24:23:
12:fb:f5:27:29:ac:d5:a4:fd:7b:4e:7b:5b:45:71:58:18:4f:
1c:4f:20:3c:c5:70:21:f4:d4:b7:3f:75:ce:87:a1:e4:ea:af:
cb:20:51:e2:7f:94:11:a1:bf:e1:a7:68:0f:c8:9e:84:ca:80:
8b:6d:51:0f:44:03:13:ea:a4:a3:d5:d2:af:ff:99:0f:b9:29:
86:06:7e:f6:a9:c3:f6:4d:0f:bb:eb:3d:88:4e:1e:91:63:63:
98:5f:37:46:37:fe:df:ad:1d:ba:b7:8f:91:5e:56:d6:14:6b:
e0:ee:94:31:e7:7e:a0:9a:95:a9:82:da:01:da:de:9e:86:4a:
eb:06:18:58:1c:f1:3b:29:45:e4:db:b4:3b:7e:3c:1a:64:c2:
a0:c1:d9:95:12:7f:06:9e:31:c9:be:02:96:29:6a:d4:d3:4e:
5a:f5:47:16:3b:07:f3:0c:7f:a0:6e:c0:3f:d9:2a:f8:6e:a5:
83:64:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:43 2026 by rpki-client