Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
File: ndTrefSC_obHVL6IQ22Xv2qMgNc.mft (raw, json)
Hash identifier: 6TMb5HgrU8YCryNU6OkFvvkB8bv2ZoGqu5l6oVszlDs=
Subject key identifier: 5D:54:9B:7B:90:50:F3:5A:2F:B8:62:35:B4:37:21:4F:E5:A8:2F:49
Authority key identifier: 9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
Certificate issuer: /CN=9dd4eb79f482fe86c754be88436d97bf6a8c80d7
Certificate serial: 01A18186C99C7ED665935BBEDEF58E4C26F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
Manifest number: 24
Signing time: Wed 28 Oct 2026 08:00:56 +0000
Manifest this update: Wed 28 Oct 2026 08:00:56 +0000
Manifest next update: Thu 29 Oct 2026 08:00:56 +0000
Files and hashes: 1: A5F-xneRwgQot3BTUwPwkssiOdU.asa (hash: o6Rk9Y1RygKYIq/XkqtupjqwwG7M7GHQwiVZC0cerVU=)
2: RXWEge3XsQyNhMewQlQ1T6x8YE4.roa (hash: YUNhuXxRkP6m6K8c61s7TxOvYxgFMCYZN3YevKq02Es=)
3: ndTrefSC_obHVL6IQ22Xv2qMgNc.crl (hash: EH3sI4I9QR23HhChOwY3PlM1D1b7642nx90NFNViOsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:c9:9c:7e:d6:65:93:5b:be:de:f5:8e:4c:26:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd4eb79f482fe86c754be88436d97bf6a8c80d7
Validity
Not Before: Oct 28 08:00:56 2026 GMT
Not After : Oct 29 08:00:56 2026 GMT
Subject: CN=5d549b7b9050f35a2fb86235b437214fe5a82f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:48:2e:f3:b8:d3:f9:79:9f:0a:7b:88:47:
52:59:dc:22:9f:3d:1a:60:49:ae:9b:72:a3:f2:7d:
b2:69:6f:62:b0:72:3d:ab:f0:4c:2d:82:9d:e6:c4:
0d:8b:d4:84:da:f5:a3:b7:c3:19:45:d0:68:21:38:
6c:7c:38:72:68:86:fa:f8:a1:77:69:2b:51:fb:49:
ba:34:fd:84:b0:3c:a1:7c:ae:74:2b:31:7b:2e:8d:
1c:dc:1f:0c:80:2d:59:f9:fc:a0:e0:20:df:1e:fa:
1f:60:81:28:e3:ca:35:27:42:de:00:64:9d:0e:70:
a4:1f:d5:cc:fe:27:18:6b:14:32:74:d6:fc:d6:fe:
cd:d7:61:74:ae:99:1b:e6:d9:9e:ce:63:c4:26:a1:
62:68:04:2c:ac:32:81:e4:65:ff:79:05:ee:7e:fb:
27:dc:04:23:2c:4d:54:14:da:b0:b2:fd:1c:2a:3f:
ea:08:b8:1e:a2:d7:bc:e0:23:c9:fc:a7:34:52:eb:
09:12:4d:e9:a4:9f:1c:bd:ec:22:d0:b9:f3:aa:de:
cc:18:5b:50:7b:a2:43:e8:4f:47:6a:d8:0b:52:94:
d8:78:ce:6c:04:a6:92:22:88:1b:c8:56:2a:79:c2:
dc:8c:c0:4b:ee:cb:99:b8:9b:0f:d0:66:7d:e2:1f:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:9B:7B:90:50:F3:5A:2F:B8:62:35:B4:37:21:4F:E5:A8:2F:49
X509v3 Authority Key Identifier:
keyid:9D:D4:EB:79:F4:82:FE:86:C7:54:BE:88:43:6D:97:BF:6A:8C:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndTrefSC_obHVL6IQ22Xv2qMgNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0d813e-9e9f-4994-97ef-58417f4a9218/1/ndTrefSC_obHVL6IQ22Xv2qMgNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:ba:77:53:00:1c:07:d6:2f:b9:eb:c5:8b:d0:ce:33:54:
c6:b9:08:d6:dc:eb:5a:0e:48:e0:10:71:55:c0:ee:99:c5:cb:
fc:74:7c:7a:46:33:46:a8:b6:8a:c1:c3:bf:d1:01:f7:1c:e1:
16:29:df:38:90:8b:b4:25:cb:ac:6d:33:4a:86:e3:e2:41:01:
8d:2d:b0:a5:15:09:62:0b:54:1a:0c:0c:b4:35:1d:b2:03:07:
96:91:70:38:32:e7:cf:ab:22:50:6e:75:87:27:32:96:24:a2:
a5:d0:fc:66:5e:8d:00:a7:a8:df:0e:e5:11:42:e8:a1:e1:13:
47:3b:cb:3a:de:fc:c2:44:60:37:48:45:01:30:35:10:17:b3:
41:49:6c:2b:a0:79:29:11:c3:73:d9:d6:36:e8:76:31:0b:3d:
ad:03:51:ce:a4:3c:cf:d1:8e:7c:e2:66:36:b5:4f:99:ca:dd:
02:68:f3:b0:8f:ee:0b:25:8f:48:94:3e:20:77:b6:40:04:5b:
14:55:7a:74:60:13:7f:3f:51:bd:84:37:78:c0:5b:c0:28:72:
12:61:bb:36:82:de:97:a0:af:96:93:73:76:9d:0c:c5:e6:b0:
c3:95:2b:a5:cc:7c:fa:87:77:02:b8:37:b2:6f:75:b8:58:25:
5c:f3:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:47 2026 by rpki-client