Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: //o2xH9soqDBtWPNqCNMJVwzyO/jX3HZmVzgXNW/p5o=
Subject key identifier: 52:F7:70:4B:10:7A:2E:71:54:9C:47:9A:30:4E:94:5F:67:79:E8:9C
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01A1803D61B13B6A0F57641616A47E8394FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1807
Signing time: Wed 28 Oct 2026 02:01:08 +0000
Manifest this update: Wed 28 Oct 2026 02:01:08 +0000
Manifest next update: Thu 29 Oct 2026 02:01:08 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: Lw0JBxLohbUE4zUFsHtHhUeguRr9DPK61s7TVEleGug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:61:b1:3b:6a:0f:57:64:16:16:a4:7e:83:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Oct 28 02:01:08 2026 GMT
Not After : Oct 29 02:01:08 2026 GMT
Subject: CN=52f7704b107a2e71549c479a304e945f6779e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:e0:74:79:72:a3:a9:8c:ae:df:31:dc:fb:
ed:c4:3c:c2:79:79:97:5c:84:7b:69:2b:75:80:2d:
07:57:eb:59:17:c0:ef:ec:26:ce:3f:86:7c:fa:cd:
d3:a5:b9:65:12:28:ea:0a:d5:b6:97:f5:e2:9b:ce:
f1:e9:fb:e4:cf:47:ab:f8:54:fe:79:6c:25:9a:00:
6a:72:cd:47:12:c0:57:75:76:64:a1:67:9e:b9:f7:
15:15:00:eb:62:6f:e1:6d:13:64:17:7e:3d:0c:43:
ea:7e:97:cc:0d:c2:a7:b6:71:82:ff:4a:ac:0c:eb:
b9:56:70:f9:0b:c1:4a:95:bc:c2:1c:e2:56:43:50:
d8:5d:99:8f:1f:8f:4f:2c:94:0e:40:88:5c:d7:45:
b8:8c:7b:03:30:7b:12:5c:46:14:61:1a:b5:7e:6b:
48:26:6f:5e:2a:10:27:83:39:ea:4f:44:e7:4a:d5:
2a:97:77:d1:90:a2:8b:19:d8:8e:02:bd:14:5a:aa:
56:78:68:1e:9c:2b:ee:51:ae:52:4c:4e:4a:a3:94:
6f:ad:d6:a5:e7:c5:0f:e6:1c:40:33:70:70:dc:6b:
dd:ed:67:c1:62:c9:b3:79:a1:03:4d:fa:0f:c3:9c:
b2:5d:e8:af:53:b2:8c:69:aa:da:e7:b3:b2:78:11:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:70:4B:10:7A:2E:71:54:9C:47:9A:30:4E:94:5F:67:79:E8:9C
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:73:d2:74:e0:d6:25:00:7e:63:3d:9f:87:ec:89:27:3d:84:
30:ae:a2:0c:03:ce:21:bb:85:d4:32:1d:6e:32:00:ce:82:1d:
31:b2:61:de:5a:11:ff:75:82:88:a5:4f:18:d0:a9:99:b2:95:
19:b3:b8:e4:3e:f7:ae:1a:af:5f:d5:40:cd:8d:ff:1e:d8:3d:
70:a6:8c:4e:d8:84:53:df:c2:b1:31:25:9c:94:69:2e:59:ed:
95:9f:e2:63:8b:a1:3f:ad:e6:53:b1:23:b6:71:ae:c7:cc:fb:
66:b2:f8:77:12:6b:79:ee:a5:8e:e5:69:51:1b:71:1d:ea:a1:
71:44:f7:e5:8b:af:6a:cb:7e:de:82:16:e9:d7:77:bb:ae:5e:
d0:84:74:44:bb:96:6a:be:b9:dc:19:04:b8:5b:86:4f:c5:95:
81:f8:67:54:14:64:e8:88:0b:19:cd:65:2a:b2:b9:d4:e9:62:
bc:39:8b:1d:90:00:8a:04:61:21:9a:d2:8b:3d:f5:1f:01:d5:
64:c9:12:92:cf:fe:88:fb:f9:05:e3:f4:4e:f2:29:6a:4c:00:
f1:4c:25:23:93:b0:7e:60:90:f7:8c:a4:a6:dc:74:11:de:cc:
03:b9:b3:7c:dd:6d:70:8c:b3:87:6a:7e:0b:55:8c:24:e6:83:
5a:27:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:28 2026 by rpki-client