Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: sdc2qT9qhBUD8CqYDRr8+7H5+fmWY3CXymUEyMO39jM=
Subject key identifier: 0B:50:96:59:F0:61:3F:5E:48:EC:D4:9B:CD:D0:2B:45:B9:BF:7F:01
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019CA8A0CE283CFC69A638B7F80FA15DE42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0694
Signing time: Sun 01 Mar 2026 09:00:36 +0000
Manifest this update: Sun 01 Mar 2026 09:00:36 +0000
Manifest next update: Mon 02 Mar 2026 09:00:36 +0000
Files and hashes: 1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: nJy/vBR8yET9vlbdspMwc0JD/g/6LIrTUfKZ0ayjYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:ce:28:3c:fc:69:a6:38:b7:f8:0f:a1:5d:e4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Mar 1 09:00:36 2026 GMT
Not After : Mar 2 09:00:36 2026 GMT
Subject: CN=0b509659f0613f5e48ecd49bcdd02b45b9bf7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:eb:e4:73:ef:cb:12:89:50:a6:ae:00:32:
67:71:c8:31:29:dc:a3:8d:63:fa:42:cd:00:75:ed:
fe:92:ef:bd:08:c4:ec:a4:dc:e8:9d:4a:b0:ba:4d:
a3:a8:0d:bf:46:4a:f1:3a:db:82:63:5e:70:de:6f:
be:bb:df:b3:6b:9d:90:04:d8:ea:f9:66:b4:5c:5c:
41:15:fb:42:b5:f7:a2:cd:40:7c:eb:7e:da:16:2d:
c2:37:8b:2e:7d:ea:89:1b:4e:1c:60:52:f0:d0:ca:
2c:70:58:8c:74:d1:11:a5:91:a3:a4:55:bb:df:ff:
c1:08:05:d7:df:da:b7:51:25:24:11:f3:fb:6e:d3:
fd:f4:1d:14:21:66:4b:11:77:2d:3a:4a:7a:ce:1b:
ba:10:f6:45:3d:46:b3:bc:e4:e5:60:ef:0b:9a:2b:
7b:27:b1:25:12:af:53:f4:e8:a8:68:c6:ae:b8:79:
6b:c8:16:51:5d:6f:9d:b5:98:0d:11:ed:60:52:a0:
c4:5a:2d:c8:32:71:43:bf:20:2a:3f:d9:cd:35:96:
d1:2b:11:df:be:1a:cc:37:d0:e9:bf:ae:f5:00:03:
a2:1f:35:30:3b:e4:6e:23:63:57:12:b8:b2:cf:f6:
a5:03:4d:05:57:d7:08:a2:02:d8:4e:90:58:2d:d3:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:96:59:F0:61:3F:5E:48:EC:D4:9B:CD:D0:2B:45:B9:BF:7F:01
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:4b:dd:6e:66:60:e0:eb:5f:f6:51:fd:44:c1:22:24:06:
de:11:45:d6:63:72:13:b7:c8:d0:26:00:1f:70:40:7a:ee:b8:
7d:04:65:02:0a:82:60:0c:1c:34:32:cf:30:a4:99:e3:f5:b3:
71:a2:9a:ed:16:5f:24:ff:6c:c0:b4:79:22:6d:b8:c9:58:14:
bc:73:35:c0:6d:00:69:96:76:de:c9:c3:31:be:54:bd:19:50:
72:28:d6:b4:bf:d3:d5:aa:ac:c7:29:38:fd:95:27:de:a8:8f:
42:51:d9:ed:f7:97:cc:2c:38:32:1c:d6:47:e5:70:fc:75:cc:
dd:81:77:77:7c:00:7a:44:e3:a2:0e:cc:84:61:72:07:c6:64:
19:c8:42:02:90:7c:83:7c:3f:f8:d6:4d:c3:16:fe:08:0b:17:
f6:4b:1a:ce:62:e5:fc:12:b0:e8:d8:90:92:39:3e:08:ab:2b:
54:56:e0:75:12:5c:ea:d5:a4:2a:57:21:0c:d3:f8:5e:5e:4d:
39:85:69:00:05:09:81:d6:74:39:0b:c4:21:76:93:d2:cf:ca:
d7:af:82:71:c3:92:8d:58:b1:44:18:9c:1c:c3:21:3a:e0:14:
95:33:3c:1c:9e:a8:0b:53:25:d0:92:c3:6d:e7:e8:f0:01:d7:
9c:f5:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:28 2026 by rpki-client