Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: nt3MQvWb4tyL+1BjwxXykXUQh8RqaNl+JCVfQ4NChqk=
Subject key identifier: A5:D6:36:0C:72:52:CF:F8:4E:E5:00:37:A3:D2:A8:70:E5:4E:F4:31
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019D389BC04B1CC9D25F5FA8A3314BB80338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0E3A
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: V6Sb9SWwNXe6+n5qYvpFsxzkNRZo1xLHIOR7AUTIHAE=)
2: z4L6AD3m-R2tfOhJaueCbCo3ru0.roa (hash: 0ubsZGhqaNgq/MTbY8mEdyeAa24CrlFwOd2MlfZ80j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c0:4b:1c:c9:d2:5f:5f:a8:a3:31:4b:b8:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=a5d6360c7252cff84ee50037a3d2a870e54ef431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:9e:8a:d2:86:00:ce:a1:64:b8:4c:1d:90:
d3:68:41:12:02:0b:0f:43:ef:93:43:fe:04:19:30:
3f:e9:cc:ef:59:d6:ef:8e:fe:b4:11:83:99:7b:61:
6e:9a:f2:bb:1a:92:10:d4:51:ab:18:56:90:97:58:
d7:13:91:f7:9e:09:38:b2:67:8e:ae:1f:c7:57:0a:
ab:e8:e1:7f:02:83:7f:8a:ea:45:1f:a3:90:14:d9:
6d:21:6e:21:7e:bb:c0:e4:32:eb:15:6c:43:b6:8b:
ee:7b:9e:c6:75:8e:50:d1:17:19:1c:4b:bf:50:55:
aa:b5:d0:77:2d:47:b2:13:1b:a7:40:90:6d:6d:78:
85:a5:70:70:bf:fa:db:14:4d:14:f8:86:3d:6c:89:
26:4b:92:11:bf:6e:ac:6b:92:46:f4:be:39:23:ef:
c0:18:61:a4:b3:65:5a:30:80:70:f5:6b:ec:c8:84:
6a:99:23:65:d2:ff:a2:e8:9b:73:c3:50:fa:a7:99:
d3:95:92:7e:73:b1:75:5f:29:e4:6f:5c:ea:5c:74:
22:49:1e:02:3f:df:f1:d1:cb:48:ed:0b:9f:d6:f9:
72:7e:47:ff:28:00:2d:ce:19:53:b3:0b:7f:c8:68:
0a:8b:87:e2:29:16:9f:0b:50:b0:4c:ec:b8:5d:d0:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:36:0C:72:52:CF:F8:4E:E5:00:37:A3:D2:A8:70:E5:4E:F4:31
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fd:d5:79:3f:84:11:8d:ee:b9:f4:a6:be:b8:6b:2b:7f:dd:
9b:c6:01:95:66:36:d5:e1:ca:87:81:82:d4:05:49:92:d2:d9:
0e:7c:d5:e6:33:95:58:58:3e:cf:1f:14:53:64:c1:ac:f3:81:
fa:29:b0:fa:02:30:8e:9a:e5:ea:4d:54:03:fc:e3:45:46:71:
cd:33:6b:76:1c:d6:35:e0:2e:c9:a7:69:b6:0b:50:55:af:2a:
72:95:2d:d9:60:d1:74:58:7a:f1:2e:16:b8:38:9a:b3:93:e6:
b1:97:79:3e:e6:7f:ab:a3:30:70:00:70:4e:d0:66:a8:ea:3a:
32:0a:ab:ef:15:21:4c:f6:04:70:4a:5f:a2:5e:25:9a:5d:7d:
d4:6d:5c:38:6d:3f:ec:97:b1:c1:92:f8:51:e4:57:06:a2:b5:
76:b7:95:7e:46:13:cd:95:f9:e5:f3:c4:c2:96:8d:19:20:15:
ca:94:51:a2:8a:af:2c:6f:93:9d:2e:2d:db:a2:29:15:b2:ac:
d2:1d:b6:6e:69:4c:6b:02:5b:1d:d8:36:1a:e9:7b:b9:18:d9:
4a:6d:f9:02:37:b9:e8:79:ff:08:d9:b0:8e:44:ab:d4:89:d4:
26:75:ac:dd:b8:9f:c4:cb:fc:f8:07:4f:55:d6:57:c1:21:e3:
bd:5c:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:08 2026 by rpki-client