Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: eLrDSrhUqBLzCsN2/ZBxE34E3JjwYUWAyyQ3q6Gh47Q=
Subject key identifier: 80:60:DB:38:68:15:D0:44:CB:29:4E:E4:7F:C2:C0:70:01:89:B9:3E
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019D39AF0DCE37825741DAF3AAE4BDBD447C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 062A
Signing time: Sun 29 Mar 2026 13:01:06 +0000
Manifest this update: Sun 29 Mar 2026 13:01:06 +0000
Manifest next update: Mon 30 Mar 2026 13:01:06 +0000
Files and hashes: 1: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: QPrKNSGYpldMLUvp3XRxZoo/lQCyIvSjXBJ2vlHYhOI=)
2: ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa (hash: pPHicEIizRCimEFs1IEl8Pv0RkfkVNW4hyUZC1BFM4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0d:ce:37:82:57:41:da:f3:aa:e4:bd:bd:44:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Mar 29 13:01:06 2026 GMT
Not After : Mar 30 13:01:06 2026 GMT
Subject: CN=8060db386815d044cb294ee47fc2c0700189b93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:05:56:ac:5f:96:b6:60:2a:15:01:fd:35:
bd:45:ca:3c:bc:d4:9d:1f:b1:78:95:99:46:47:d4:
a1:f3:43:c6:ce:4f:a7:a3:98:ae:9f:09:86:c1:c2:
9b:43:30:db:22:68:ad:b0:83:f0:06:5f:e9:a2:91:
49:9a:03:26:42:6c:3e:f7:27:b6:8f:a6:60:73:8e:
1f:9d:61:0a:c8:ec:c1:29:fa:c8:85:62:42:58:c8:
3c:cd:ae:9d:f5:3d:ec:15:30:b0:d9:cf:f9:0d:08:
2f:49:bc:3b:3a:91:b6:bb:0f:4f:9c:41:c3:9a:8a:
28:52:ce:54:0e:bb:10:32:e5:d3:3b:12:2b:cf:e9:
a3:7d:36:d2:e2:80:1e:3e:42:5c:8f:dc:93:3e:1e:
1a:82:66:47:d5:78:8d:23:2a:cb:52:50:09:ac:00:
fb:04:d3:2d:ab:66:e1:ca:fd:9f:e2:e0:45:a1:4c:
1c:7d:56:f1:6e:0e:6a:e3:9f:41:df:3c:da:6c:72:
f2:1d:ba:e4:21:f5:e4:e0:52:da:55:11:02:31:ee:
14:f5:52:2f:f6:2f:a0:b4:45:5e:c4:bd:7e:36:bd:
35:bb:b7:4e:cb:c6:5b:96:65:b9:e4:e3:5f:e5:06:
76:e4:3c:8f:62:b2:51:dd:f0:30:fa:3a:5d:e0:64:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:60:DB:38:68:15:D0:44:CB:29:4E:E4:7F:C2:C0:70:01:89:B9:3E
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6b:cb:40:28:31:8c:ec:61:08:ca:f2:95:3c:15:57:81:36:
fe:8a:32:92:fd:18:b1:a4:34:fb:73:5d:0f:1f:db:49:b1:d2:
32:55:c2:ac:ef:78:b9:8b:a9:43:dd:12:cd:08:b7:07:f7:34:
a0:58:d5:50:45:5a:f4:cf:1d:d8:40:31:74:7d:4c:9f:1f:a3:
90:21:65:4e:72:80:7f:66:50:23:3b:9b:a4:2f:5b:2a:95:42:
a0:b9:d3:93:24:d6:e7:b3:29:35:7a:a7:ca:07:59:7b:d6:c5:
8a:64:8e:5f:0a:a3:a9:15:79:11:2b:97:45:23:2d:c2:fb:e9:
80:a1:de:0c:10:88:87:28:52:e3:b7:02:60:3c:b6:cb:a3:e9:
17:73:22:4b:f8:00:20:0a:31:2f:09:43:36:53:db:30:16:80:
71:6a:49:48:db:08:a2:7f:38:b8:74:44:b3:3f:f9:8c:ff:fb:
65:71:68:09:14:4c:48:01:a4:bd:a3:21:26:50:e9:75:c7:9b:
56:e3:e4:bf:11:45:b0:94:5a:29:b1:38:df:35:57:27:f6:75:
0d:d7:76:f0:03:65:37:2c:b7:2d:d9:ac:d7:cc:77:5b:ed:db:
80:0c:2d:d4:e6:59:91:82:d5:b2:32:81:68:5d:71:4a:d7:d9:
4a:fa:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:26 2026 by rpki-client