Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: fqWi0Gh3ndUpbN/KDK9u1B86AYocv9ecK3W/OXIG+sE=
Subject key identifier: D9:1C:B4:F9:80:EF:FD:45:B6:0B:DF:AF:79:C4:2E:8E:20:81:42:6B
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019EB5E948C5DFF83C3194A2A3DE1802016A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 09:00:24 +0000
Manifest this update: Thu 11 Jun 2026 09:00:24 +0000
Manifest next update: Fri 12 Jun 2026 09:00:24 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: 2UiiMxx7Oiq+fsqW+8zG2HUVPnYeyCpcq5GDqvMiM2E=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:48:c5:df:f8:3c:31:94:a2:a3:de:18:02:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jun 11 09:00:24 2026 GMT
Not After : Jun 12 09:00:24 2026 GMT
Subject: CN=d91cb4f980effd45b60bdfaf79c42e8e2081426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:a2:4b:f3:96:c4:a9:00:1b:01:d2:db:f6:
42:28:38:da:39:1d:0b:af:31:30:0d:32:2e:93:e6:
6b:68:82:7d:b1:42:e6:33:0e:ee:24:23:60:43:f4:
57:be:f5:d6:b0:a0:df:bb:4d:0c:2f:2b:32:38:a3:
e9:4f:08:f4:90:ae:f1:7d:a9:4b:38:88:6c:84:71:
12:86:27:34:7b:e1:5f:c9:29:5b:7b:50:89:8c:7b:
5d:b6:b6:19:d6:3f:eb:44:86:8f:41:55:f6:01:02:
27:a4:40:61:f4:2b:68:ef:f1:05:f1:a8:ac:f3:8f:
33:67:6e:5d:dd:a2:c2:92:fa:ae:70:01:61:cd:ea:
c7:bd:48:de:55:c6:0e:86:da:fb:16:52:c2:f8:f4:
14:a6:4b:3c:0d:fe:16:84:e7:e9:e7:3b:ed:89:56:
08:64:01:4b:fb:dd:14:11:a6:52:75:14:a2:27:7b:
82:c0:40:af:fb:69:04:f6:e1:82:7b:28:e0:74:7a:
93:3d:c9:5e:fc:0f:6d:43:e7:b4:96:b9:e2:05:ae:
b9:14:da:e5:94:64:f7:09:68:0f:31:a4:5a:7e:f1:
81:aa:e6:bd:7f:f4:e8:0a:87:4b:25:a6:28:13:ad:
54:64:0a:ab:7d:51:17:e7:80:11:77:93:30:45:bb:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:B4:F9:80:EF:FD:45:B6:0B:DF:AF:79:C4:2E:8E:20:81:42:6B
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:eb:a7:85:06:24:44:5c:30:ad:1e:97:96:41:9e:9e:49:
36:b1:93:bd:4c:63:1c:de:67:b0:fd:42:25:07:a9:a7:33:04:
83:fb:19:55:be:66:66:4a:0b:72:45:92:aa:d0:d9:89:d1:2b:
b5:ff:24:89:ec:30:6b:c8:8d:ba:63:e7:5c:34:ae:94:ff:82:
92:8d:94:3b:d2:5b:13:f3:dc:b6:c9:f8:a1:5a:11:f0:05:7d:
10:be:27:08:87:b2:82:b0:ff:79:68:10:e3:81:5d:6b:69:a9:
61:11:08:ab:92:c3:15:4a:b8:50:8f:85:be:c5:7c:17:81:02:
dc:9e:50:70:9a:df:a8:2e:d1:0e:21:94:c1:b9:7e:e7:a4:25:
76:51:80:48:0d:90:1a:f1:c1:a8:0a:d5:50:a1:d3:13:11:37:
5f:fb:b4:eb:14:51:cb:79:09:66:80:2f:57:d2:8b:b4:45:b2:
be:31:53:62:53:4b:19:58:47:17:59:6c:fc:41:67:82:24:62:
3c:8a:a9:41:79:fb:e3:30:e2:95:71:21:91:18:ba:b9:5a:7b:
82:c9:66:08:b1:0a:a1:98:31:4e:d5:cd:ce:2c:46:63:70:3d:
d7:45:16:58:8d:b6:90:2b:97:09:78:a1:28:86:27:98:2f:9c:
2f:51:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:13 2026 by rpki-client