Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: RXQ5+CmQTI/Avc3a8Bi7AEVt/RuqubEWXeyreSoGuFg=
Subject key identifier: EE:12:1B:AD:6F:03:0A:D4:90:C0:B7:38:5B:71:E2:0F:22:0F:F8:E9
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 01A0894335070318D6E541CD8254F80F4E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 03:01:18 +0000
Manifest this update: Thu 10 Sep 2026 03:01:18 +0000
Manifest next update: Fri 11 Sep 2026 03:01:18 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: mgu9BH6Oo4mUVPZxKfq/uysUeYRksmlnLnhsgpl/NjE=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:43:35:07:03:18:d6:e5:41:cd:82:54:f8:0f:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Sep 10 03:01:18 2026 GMT
Not After : Sep 11 03:01:18 2026 GMT
Subject: CN=ee121bad6f030ad490c0b7385b71e20f220ff8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:3b:24:fd:bd:71:ca:28:09:f9:e5:89:ed:
63:4f:4f:cb:1a:70:75:99:77:7f:b5:c1:98:5d:ca:
c4:70:b2:6a:c9:2e:42:51:91:f0:86:37:bb:aa:73:
88:9a:fb:66:43:7e:b5:f2:ab:5f:c0:6e:02:6a:2a:
5e:33:c5:dd:b1:19:1c:c1:4a:fc:e1:f8:33:4e:41:
81:4d:5a:a7:1c:4d:6f:9d:fb:c7:19:0e:77:f4:89:
b9:3a:64:08:0a:ab:b3:43:ce:93:f5:8b:7b:31:6c:
10:0d:9d:52:3d:23:8c:5c:50:9d:45:53:c3:ba:f6:
d3:a6:72:64:b6:8e:14:eb:88:33:ca:69:65:cc:cc:
4f:79:f8:a3:62:97:10:08:d5:c3:ab:06:21:4b:30:
9e:df:21:49:4d:f8:bc:ba:a8:6c:94:de:50:48:44:
91:a0:50:61:ca:0f:3d:75:f6:c7:eb:8e:93:76:03:
e0:1a:35:a3:d5:87:e1:e0:95:7c:78:aa:d0:fe:0e:
a6:c3:d3:d6:41:e8:06:94:74:d9:29:69:ab:db:41:
1a:be:f8:a3:29:27:06:ae:30:fa:b1:87:e1:39:b4:
f0:43:51:c7:0e:08:10:b3:56:ec:12:5f:30:ba:ba:
1f:e4:d5:34:68:88:ab:bb:9a:dd:59:e4:01:b2:c0:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:1B:AD:6F:03:0A:D4:90:C0:B7:38:5B:71:E2:0F:22:0F:F8:E9
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:47:41:2a:e5:b9:41:a8:43:8d:93:1c:72:b5:8f:74:23:2c:
51:f2:7d:1f:97:0c:4a:11:ac:1d:0b:3b:3d:bd:73:80:39:78:
19:bb:bf:2b:ef:6b:56:a5:68:72:a4:86:ce:1d:b8:d7:e6:ca:
a6:41:e7:d4:f9:a8:00:f2:03:fc:a0:d4:8d:64:e5:9a:d6:3c:
da:50:70:74:cd:3e:5a:9c:9d:34:af:a1:a5:41:11:7b:22:3f:
e7:46:b6:4b:e8:76:43:77:9e:36:d5:eb:86:a2:3d:29:d9:d8:
b1:41:90:98:12:45:cd:70:72:fc:1c:b9:32:53:8e:6d:49:df:
ac:03:9d:7d:0b:73:46:f8:1a:0b:43:db:10:bc:2b:9d:7c:10:
69:97:1e:fb:8c:38:15:c5:16:fc:c7:a1:9a:74:32:ed:c5:97:
e6:f1:7d:a0:44:03:1c:a9:cb:d2:bf:d7:ce:25:cd:34:a5:1b:
b9:25:59:7c:ab:f2:47:f2:56:d2:2f:34:84:c2:80:30:6e:8f:
45:bc:c8:c5:52:2b:a9:95:09:57:95:b9:c4:ed:49:58:69:e1:
c3:aa:ed:c2:a2:06:b9:42:e5:43:b1:db:b5:3c:d5:b1:83:b3:
7b:ec:17:3a:fd:39:ff:c5:6e:53:a1:d5:ae:84:5d:b4:e3:64:
4a:28:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:17:31 2026 by rpki-client