Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: IvRtAY04gry4/cSqU5KeQvIOooRuHXar/y+FQeJ9knk=
Subject key identifier: 21:76:82:9A:8E:F8:B0:7E:DD:5D:FC:EA:25:A7:02:0B:F9:BD:9B:8B
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019D9AAC38A0475F369F2CBCD131C2BA9295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: v68fLlN4jAW2szBWLKvL4+yOqmGVD4BBFIavjvZEYAg=)
2: _wICQn4-i4QzdIbhvMtwO6EwP8c.roa (hash: YrDt1Sh4fa2C8YaTwYl+f2XsqsBE5fk+QKt7Ei8e928=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:38:a0:47:5f:36:9f:2c:bc:d1:31:c2:ba:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=2176829a8ef8b07edd5dfcea25a7020bf9bd9b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:91:63:a4:8d:b7:ee:11:19:c4:10:36:ae:
78:83:40:16:de:ad:f2:20:8b:70:8f:3d:81:ed:0e:
a2:45:72:c4:98:f9:a7:2e:50:a2:1c:0d:e2:30:b9:
ec:9b:8b:8d:0e:2f:2b:71:4b:09:db:41:db:61:16:
d0:e0:bd:e8:ff:52:8c:2c:65:2b:6b:80:4f:da:a8:
a8:cc:e9:35:16:89:7d:7e:77:6b:58:16:7a:3c:07:
0d:45:a6:84:c9:ad:da:7b:78:29:a4:80:d4:ce:e8:
e6:fc:06:1e:0b:41:8e:3c:40:e6:70:25:d8:94:ea:
db:aa:1d:06:85:c8:27:2a:0d:fa:d9:fc:cd:d7:25:
8d:89:48:ea:1e:28:23:72:c8:40:6f:c1:3e:c7:b6:
10:e6:fc:f0:36:a5:54:8c:5c:fd:cb:d6:1e:f1:b2:
8c:2d:7d:9c:27:60:c8:8e:de:91:51:a8:44:27:38:
05:d3:a6:0b:64:5f:89:f4:a8:f9:f2:37:f3:2b:13:
37:c7:17:9e:fa:b1:ab:5d:ac:4c:d8:b5:5a:7b:08:
34:f7:ea:44:f2:36:20:d3:98:ee:36:63:81:a9:a1:
36:5e:63:c7:ff:1c:ae:d7:d4:2b:9c:07:ce:b7:f5:
dd:f1:73:93:f8:e9:b1:87:96:eb:b2:20:12:9a:c7:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:82:9A:8E:F8:B0:7E:DD:5D:FC:EA:25:A7:02:0B:F9:BD:9B:8B
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:00:76:c8:7e:7c:00:5c:4c:e5:a6:23:8e:34:20:ba:21:
30:00:ca:85:87:8d:6a:6f:4f:0b:0c:a4:f1:10:9e:d8:80:ec:
f8:61:f9:17:4f:42:30:34:19:29:5a:52:e1:df:d5:07:84:7b:
3d:87:2d:f1:c1:8f:0c:14:8d:7c:eb:47:e4:33:e1:68:13:6e:
bc:9b:8a:e9:bc:d3:19:9b:5c:ee:f0:85:5a:d0:05:a8:cf:f9:
94:e5:97:88:25:c6:3b:b2:52:dd:a3:61:41:c5:cf:36:5e:36:
b3:b7:ed:ed:39:e1:e6:07:bb:d6:ab:55:42:9d:e2:c9:a8:13:
4c:7f:78:2c:2d:88:28:b8:18:44:f7:bb:c4:15:e8:2f:02:62:
be:5d:05:41:c3:86:5d:a8:85:2a:0e:e3:82:d9:0d:5a:35:76:
a6:90:ff:09:31:a8:12:79:a4:76:a0:f2:46:eb:0c:19:47:23:
41:05:40:0a:a3:80:bf:b3:3b:79:ea:43:34:05:ed:78:40:b7:
da:1c:33:6d:ca:8c:ea:22:dc:7f:10:88:2a:20:e2:38:b7:fd:
79:29:77:d6:9f:8d:4a:73:e0:20:62:5b:d9:2b:90:5e:c5:e0:
b9:2f:f0:cf:02:21:9d:28:ae:58:1e:5d:e7:18:75:8b:8d:e1:
23:ca:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:32 2026 by rpki-client