Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: upVsZNbUENDYpn8mvrNCMJyiodd0Ecd4PWDgWpG4k3M=
Subject key identifier: F3:8C:EB:A6:D0:5A:6C:18:F9:89:CC:6E:E4:81:74:48:C9:D5:76:21
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019EB7A1203377DFE39B1502C81CF24C1738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1696
Signing time: Thu 11 Jun 2026 17:00:50 +0000
Manifest this update: Thu 11 Jun 2026 17:00:50 +0000
Manifest next update: Fri 12 Jun 2026 17:00:50 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: 6F0PQacxxn9xoh0TwX99M0ivsqM6qgjNMJYVqr2WOeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:20:33:77:df:e3:9b:15:02:c8:1c:f2:4c:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jun 11 17:00:50 2026 GMT
Not After : Jun 12 17:00:50 2026 GMT
Subject: CN=f38ceba6d05a6c18f989cc6ee4817448c9d57621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:00:f6:f4:15:dc:b5:64:0f:9a:a4:01:7e:
3a:85:65:2d:80:65:6e:1f:00:a9:29:c7:a8:a5:98:
b4:f5:e7:54:59:d5:da:dd:4b:05:ca:5c:18:75:bc:
46:60:70:43:00:32:d3:08:a9:0f:d6:d3:55:12:6d:
32:03:e6:12:fa:66:e5:12:d1:14:41:5c:35:ac:75:
9b:df:a6:a9:a0:78:17:47:5a:b5:94:95:3d:9f:b4:
0b:86:3c:f8:86:38:f8:d0:7c:37:4e:a0:9a:b5:ce:
bd:b8:dd:55:64:f7:e1:47:a1:8a:ca:87:66:46:7d:
db:4d:4e:9c:a3:de:6c:a3:36:d5:a1:38:ce:35:c8:
35:91:65:78:89:8d:62:98:0e:3d:f5:94:2a:32:8c:
6f:af:5e:ce:9f:e0:84:c2:a1:8a:ab:0d:46:17:84:
9c:04:14:68:bf:b9:2f:db:44:77:1b:98:67:06:e6:
2b:cd:85:10:18:1f:21:65:3a:82:fc:40:f5:0c:2a:
0f:70:91:cd:b3:4a:8e:7c:8d:40:d5:99:b6:76:3a:
14:3e:da:0b:5f:20:f0:92:be:ae:39:54:71:29:df:
c8:cd:5d:4f:a5:da:69:9d:85:be:05:cc:3b:c1:32:
e2:e8:1c:58:48:55:92:dc:12:25:1c:3b:02:65:83:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:EB:A6:D0:5A:6C:18:F9:89:CC:6E:E4:81:74:48:C9:D5:76:21
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:86:54:7b:d5:fc:8e:cf:59:bc:de:4d:d2:2b:6b:3b:d0:
0f:df:c8:6a:48:7e:be:58:fa:86:a9:13:a3:04:37:06:d2:02:
79:44:26:dc:a9:9f:ec:57:aa:67:4e:5f:f5:74:fb:6d:ca:51:
d2:17:34:b2:75:ff:d7:b7:74:39:8f:c4:14:b5:5f:43:a7:0a:
1b:6e:db:22:1c:f9:e0:93:23:d6:96:77:6f:a2:cd:a0:50:7a:
52:a8:ba:1a:11:3b:2c:c6:63:47:a0:26:b7:71:22:3d:4e:8a:
31:10:fe:2c:32:d6:74:98:df:0a:8d:43:55:7b:54:de:44:8f:
49:40:cf:92:3d:b5:f4:8a:c2:e9:11:00:d9:1c:d1:cf:29:0c:
0f:ef:df:52:f4:e0:9b:30:8e:a4:a2:44:70:27:29:b5:01:21:
76:83:65:ea:85:d5:3b:0c:16:6d:40:d3:e1:01:72:43:83:77:
4d:75:2d:5c:17:03:8f:00:82:c5:cd:07:16:59:b4:ba:97:f6:
d0:cb:76:e4:8f:0a:2d:4e:12:49:9d:9c:52:55:7f:cc:12:93:
30:3c:a9:ac:98:de:58:1f:6d:e8:6c:b5:02:34:93:57:f9:7f:
4b:b3:94:4f:be:27:74:31:91:f5:61:1c:a5:01:d0:c8:08:a5:
37:eb:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:11 2026 by rpki-client