Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: hRXR+8q0O1ExByHuFdqevbTY3BKzv7Pvv+rDwGvIpnE=
Subject key identifier: F2:A4:C1:6F:96:3D:E8:85:BB:03:5C:BB:D1:0B:CD:C5:C0:1B:64:05
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01A0890BBAA0603213FAFD13DA239C5BB9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1787
Signing time: Thu 10 Sep 2026 02:00:42 +0000
Manifest this update: Thu 10 Sep 2026 02:00:42 +0000
Manifest next update: Fri 11 Sep 2026 02:00:42 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: UooT1K3aMHm6wk7c8hVE6U2HpuI5fnsXgCb0h/RvEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:ba:a0:60:32:13:fa:fd:13:da:23:9c:5b:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Sep 10 02:00:42 2026 GMT
Not After : Sep 11 02:00:42 2026 GMT
Subject: CN=f2a4c16f963de885bb035cbbd10bcdc5c01b6405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:f7:0f:3e:c2:93:40:5b:d4:b3:a4:1b:d7:
2b:bd:e6:bb:54:50:92:76:20:9b:49:53:bf:ad:e2:
94:68:e3:62:65:bb:0c:d3:41:03:6b:73:f1:29:4b:
b6:a5:18:7b:c8:8d:83:7c:cf:49:20:95:06:1d:aa:
fe:6d:57:47:b6:ba:0c:98:1c:1e:ed:ef:df:4f:b2:
c0:6f:46:d6:53:e8:95:94:fc:24:68:fc:61:f6:7b:
2c:bb:13:25:e9:5f:db:dc:86:c8:48:6e:85:f3:ed:
73:16:fd:89:0d:38:27:f2:96:71:b2:9a:20:9d:76:
a4:67:9e:29:41:50:28:68:d9:af:4b:ab:98:f1:bd:
73:06:66:01:3c:08:36:d6:2a:24:b8:fc:86:b1:31:
98:bf:e0:1b:a3:d4:79:d4:44:cb:63:9e:56:e9:3b:
73:bc:b8:b1:05:7e:5e:7c:04:a7:6c:7f:62:31:81:
c6:6d:ab:b0:87:54:ac:0f:e3:b9:e8:fe:66:ed:9b:
39:ae:18:ee:51:85:4c:1d:8c:bf:30:89:7e:ea:80:
9b:d4:36:12:43:3f:eb:a0:76:a4:9d:59:1e:42:81:
8a:2c:35:5e:35:b0:9e:ee:e2:b9:1d:cd:f0:28:37:
a6:e2:b1:b1:d2:f0:63:4c:f1:2e:ce:e6:0e:ee:35:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:C1:6F:96:3D:E8:85:BB:03:5C:BB:D1:0B:CD:C5:C0:1B:64:05
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:ac:5b:e7:ef:63:da:e2:66:75:70:1a:06:3e:01:41:74:
39:8c:5e:76:8e:28:cd:6a:00:fd:da:70:7a:bd:10:40:d1:81:
26:5f:5b:73:49:06:8c:b2:90:53:d4:8f:3d:c8:39:19:4d:fd:
91:70:74:e5:00:d7:09:00:0b:aa:95:59:68:b8:50:b7:50:98:
7e:e2:7c:5c:f6:bc:01:20:b0:7a:d9:ed:3b:84:40:e0:d8:b6:
b6:ac:2a:77:e9:e3:bd:06:20:37:30:90:d8:c2:08:76:d4:45:
b0:cf:12:82:3a:1d:2f:06:68:18:dd:c9:29:eb:94:30:44:a2:
f4:0f:2c:f5:7b:18:b7:3b:cf:b6:ce:d0:28:9b:cf:54:23:23:
2f:af:72:0b:bf:ea:8f:3f:0e:d8:69:4a:fc:2c:ef:11:ab:5b:
87:31:35:9f:e1:a3:03:d3:75:ee:1b:eb:85:e4:27:c1:91:33:
11:45:de:0c:5a:cc:81:74:78:d6:3d:e7:72:51:aa:97:a7:12:
30:1c:46:3a:71:ed:03:ec:78:0e:6a:78:41:d4:42:b9:e4:d1:
a4:4e:6b:42:d5:9c:14:f2:c4:04:7b:8b:6d:8b:08:14:01:96:
66:58:6c:7d:40:8f:06:df:5e:ab:7d:f3:64:7f:18:19:c9:33:
cb:a8:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:06:38 2026 by rpki-client