Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: RxXrEPiNuK+g+9gz7Ol9yXDYvR7Bc57IJraXqEPr5Uk=
Subject key identifier: AC:EA:6A:37:3F:92:E6:5F:58:A6:C2:5B:04:57:FA:06:79:C8:82:F7
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019D394157E87EA21241C3F1248F5854AE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 15D0
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: 6cPPU7EqyrGodAYktwKiOhd5jPZO5CAn5TVmHdZxwMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:57:e8:7e:a2:12:41:c3:f1:24:8f:58:54:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=acea6a373f92e65f58a6c25b0457fa0679c882f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:0e:d3:63:95:b0:9f:b2:23:b0:88:25:bf:
1a:7a:f5:dc:09:f1:c1:6b:5b:44:75:4d:57:08:2d:
b6:d6:86:19:1d:1b:fb:32:5b:85:a7:75:bd:82:39:
85:46:14:51:ec:92:ea:9f:94:79:49:58:a6:77:77:
63:a4:11:e2:29:7d:b6:0c:87:46:5d:a2:78:76:2a:
04:a6:6b:81:c7:97:67:7d:82:fa:10:a5:2a:b2:f4:
38:1e:53:c8:6c:8f:89:f5:3a:6b:66:c2:be:4c:bc:
e4:04:1c:6b:10:cf:01:5d:d1:49:f3:ae:19:fd:79:
21:94:5f:14:15:d3:4e:78:3d:8e:e8:7f:95:28:8e:
ff:dc:9b:91:06:92:e7:14:24:8e:f7:da:fc:4f:01:
63:ff:e0:fb:3a:5b:45:6d:8b:2b:a4:d2:85:dc:cd:
71:ab:be:67:c1:6e:39:00:ee:b3:ea:6a:11:fc:21:
b6:fb:13:02:63:62:ec:2b:f4:24:88:17:da:58:fd:
f1:10:32:ce:df:0e:50:87:18:05:b9:2b:9f:8d:54:
b5:6a:c0:21:8c:b4:83:38:30:08:e9:03:c2:a6:05:
73:8e:2a:67:9a:d2:a6:83:a2:99:0f:5e:cc:c5:ad:
c3:69:2e:52:68:9a:a7:8a:b0:07:43:db:b2:25:c8:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:6A:37:3F:92:E6:5F:58:A6:C2:5B:04:57:FA:06:79:C8:82:F7
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:30:bc:cf:25:72:4f:4c:65:2f:82:fd:ea:58:b9:07:20:
72:16:f9:8a:29:f4:08:c3:ec:03:7f:8b:83:cb:b2:0b:bd:c6:
73:eb:25:a2:d6:42:3b:4e:22:f4:2c:e9:ec:b0:85:23:f2:69:
49:db:d8:26:54:c5:64:9e:e9:71:16:58:aa:d6:66:68:2f:4d:
6a:8b:0f:a2:85:d7:75:1f:79:b7:2b:5c:52:d2:6f:ef:80:f4:
7c:a6:20:09:09:8a:1c:53:d0:0f:b8:e6:ba:89:92:c7:6c:e1:
de:01:52:d5:fd:c3:18:aa:60:70:3c:08:8d:7a:e6:4d:0e:25:
5a:89:8a:ef:dd:4a:be:40:f9:7f:94:e7:9b:22:d8:52:3f:8b:
39:08:38:58:03:41:c1:cf:45:58:5d:99:68:0f:83:ff:fd:3c:
d8:ee:17:57:7f:10:4a:6d:0c:41:97:da:1a:58:1c:bb:a6:5f:
90:da:33:8a:65:d3:28:1a:85:b3:71:ce:e1:3e:79:63:47:31:
d3:47:be:4c:f6:d3:b2:66:58:95:31:3a:0e:ed:13:51:a6:ba:
01:21:b4:53:42:16:36:2a:11:38:9c:7b:84:91:4a:3c:72:5b:
34:3b:79:81:72:e2:c3:2d:96:e5:ae:ab:74:2b:1a:a4:12:47:
66:22:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:26 2026 by rpki-client