Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: AtuMYVmTQoTW3iB8X4LqdIKL7hRKLVhRTi3VamCmeec=
Subject key identifier: B0:A1:14:66:9D:5E:44:F0:32:C5:F6:B7:26:ED:6F:BD:0E:11:6C:14
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 019D9BBEDEE509C2696188C3E56349AA6A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0A35
Signing time: Fri 17 Apr 2026 14:01:10 +0000
Manifest this update: Fri 17 Apr 2026 14:01:10 +0000
Manifest next update: Sat 18 Apr 2026 14:01:10 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: rUBDt/h5AQEf/cPKfxNHRWkzncPmVLYH6lERMP9ZI6o=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:de:e5:09:c2:69:61:88:c3:e5:63:49:aa:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Apr 17 14:01:10 2026 GMT
Not After : Apr 18 14:01:10 2026 GMT
Subject: CN=b0a114669d5e44f032c5f6b726ed6fbd0e116c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:f3:fe:2e:71:cd:2e:7c:66:58:98:60:85:
72:e6:7c:27:96:e9:17:6c:fa:c7:95:7e:63:50:3f:
6c:7b:a4:52:7d:e9:a0:12:7e:9f:aa:c7:c4:db:20:
89:40:2d:42:50:38:47:c4:86:ce:c1:4f:a1:05:34:
80:ed:4a:06:2d:11:71:db:a1:a8:3b:bd:01:53:84:
0f:4e:ef:fa:96:8f:f8:2a:a6:07:79:b3:a5:98:d9:
f2:75:ac:d1:45:12:68:eb:fa:35:55:5f:14:39:60:
d2:2d:48:45:1d:49:7d:7b:cf:92:bd:3f:c7:69:ea:
c5:30:e0:b9:fe:5c:be:0d:87:a5:ea:3d:34:be:7d:
94:01:2e:03:ac:84:02:62:c5:0c:30:18:b8:2d:39:
e2:d6:b4:4f:c8:08:be:f6:7f:de:ba:87:e0:48:65:
63:2d:4e:42:61:76:07:d8:2d:2c:4c:62:c1:97:94:
7f:af:e4:1e:d7:74:63:4a:2f:4f:5d:40:c2:04:20:
e7:c2:27:e7:ab:f7:be:3b:a1:d8:41:52:fc:b6:bf:
d3:6a:78:40:d8:72:ff:c3:7a:da:2f:73:f5:1f:e0:
bb:39:93:91:2e:92:21:34:91:55:d3:9b:c5:36:dc:
a2:56:5c:46:66:da:ec:1e:c7:8f:2c:3f:d4:bc:8d:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:14:66:9D:5E:44:F0:32:C5:F6:B7:26:ED:6F:BD:0E:11:6C:14
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:93:2a:f3:b4:5d:66:5a:fd:86:28:de:b2:f9:ca:bf:ab:cd:
f3:30:45:5f:10:af:c9:e7:ab:7f:51:92:c1:59:9a:65:b5:e7:
0b:1e:2d:c1:0f:d7:02:ea:15:24:48:61:3a:aa:de:5f:47:9c:
6b:e6:5a:44:58:6e:f4:89:34:e1:88:90:8c:0b:d1:8a:ee:89:
9d:4f:3a:39:5d:5d:01:99:d6:47:b6:21:67:bb:b7:a6:25:21:
99:d6:d3:5c:e2:01:cb:a8:05:28:d1:17:35:62:bd:b3:5b:24:
0e:02:d1:b6:2d:af:4f:36:03:82:91:21:fc:ef:ae:6a:de:bd:
fb:3a:33:95:23:fc:34:3a:c5:60:27:2c:bd:2d:5a:c1:7f:de:
3c:17:5f:fa:8f:41:27:d5:b0:54:8f:79:2b:61:1d:67:9e:d3:
c1:67:ed:43:4d:23:9c:41:66:1c:80:aa:19:70:05:4d:5b:e4:
3a:8d:58:50:84:27:6b:94:0f:01:d1:1d:fb:16:48:fd:c6:98:
ed:11:82:87:03:44:a2:c6:bc:ff:81:70:6a:ff:1d:0a:5b:60:
f2:15:67:50:67:0d:31:9e:3d:0f:3e:7e:e9:c2:eb:4b:27:e6:
ea:32:bd:2c:8c:43:2d:ba:ed:f6:0b:b4:16:21:83:79:45:14:
85:cc:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:00 2026 by rpki-client