Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: 2GR4lJ21+3HV01uercTAGpT3F9bSlO8Bhn0UFOyVeuM=
Subject key identifier: 6A:61:DD:34:E3:1F:CF:DE:3E:08:00:08:F3:E4:83:33:27:2E:3D:E2
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019CAD2283496B385F26DD64D8C261C98D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: fyaQT0XgstnKwlbmjxhz/MYNHleCjiwuDNy8ndlB5Ek=)
2: _wICQn4-i4QzdIbhvMtwO6EwP8c.roa (hash: YrDt1Sh4fa2C8YaTwYl+f2XsqsBE5fk+QKt7Ei8e928=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:83:49:6b:38:5f:26:dd:64:d8:c2:61:c9:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=6a61dd34e31fcfde3e080008f3e48333272e3de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:63:50:da:32:e0:ba:4f:5a:ad:04:a6:87:
a8:a8:4a:9a:3f:81:a5:40:a3:d9:26:55:af:30:33:
0f:17:5b:dc:00:bd:47:5a:8f:bd:b0:ee:db:73:7f:
e6:1a:c4:15:1c:70:43:bc:f0:e3:7f:54:95:27:c2:
97:77:f6:d0:01:fc:ef:fd:82:44:65:69:01:44:47:
1e:bf:41:87:75:d8:6e:c4:4c:39:2d:06:b0:3c:77:
a4:0e:79:7a:7c:4a:7f:7f:5d:98:44:98:c2:4c:2d:
90:22:89:15:7e:da:18:b1:b4:48:b2:61:d0:a8:10:
7d:0f:dd:34:09:23:d0:e7:01:bd:d2:c8:16:29:e5:
9a:2d:35:e4:ee:38:f3:30:44:b8:9c:9e:9f:b4:02:
ed:eb:2b:e2:e2:be:6f:f9:29:9b:fa:d1:35:c6:ed:
a7:74:f9:af:64:79:aa:15:7c:4b:c9:eb:24:d7:65:
98:7d:9a:98:2f:cf:b7:9a:b6:bc:b9:df:45:d4:2a:
b3:b2:cd:16:0f:83:14:c8:c4:8f:71:27:58:0b:14:
53:f1:6b:90:22:16:9e:08:20:23:ea:d4:af:5b:64:
c5:d8:63:51:b1:ec:91:ca:3b:eb:56:3b:be:8b:8c:
5f:86:7b:ad:cb:36:1c:1a:a2:d3:45:a4:8c:68:05:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:61:DD:34:E3:1F:CF:DE:3E:08:00:08:F3:E4:83:33:27:2E:3D:E2
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:da:bc:12:3b:3d:be:0c:22:ed:da:33:ef:6b:dd:77:8e:
82:bf:27:03:4a:3b:ad:19:ba:a7:e4:ac:7e:cf:35:3a:4d:03:
5d:15:3f:e3:39:b8:1d:37:ae:6d:aa:42:f4:90:09:90:5f:da:
b1:22:4e:fa:48:d1:ab:e8:c7:c0:95:31:91:d1:dc:69:2d:a6:
49:90:ad:d4:58:fc:c9:8c:d8:c0:5c:87:d4:44:a0:1b:d5:35:
d4:0c:2a:02:a5:9b:09:ee:5b:33:35:01:a3:5d:34:5d:f0:7a:
b4:ea:46:fc:e8:c3:b3:0f:7b:6b:b1:25:dc:56:6e:bc:70:a5:
c9:3c:9e:d1:a6:cc:2b:f0:39:37:a7:d1:01:18:b9:cb:c7:47:
c2:65:da:59:3b:ad:90:7c:58:a7:83:c9:3c:eb:41:05:43:e5:
a4:a7:de:21:03:24:58:62:0c:06:22:cc:b1:15:2d:9a:0b:6a:
98:53:b7:f0:c3:bb:b8:dc:a7:12:83:11:18:11:aa:78:e3:b1:
93:18:e2:d5:7e:d4:18:f7:3d:39:a3:d0:a6:7f:cc:8f:75:29:
9c:b0:4a:01:46:78:fb:41:4d:18:48:4d:37:54:69:a4:1a:a5:
89:fb:2c:39:71:05:4a:a0:6b:35:ef:33:64:0a:d7:30:49:6d:
82:4a:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:51 2026 by rpki-client