Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: pWN6WYKIYsUtaPqAlGOr7gyS43yJAWzWul+upViXiSw=
Subject key identifier: A6:E3:24:B0:D5:BF:06:8B:BD:00:68:61:34:34:DA:1D:70:2C:64:EF
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019D9A74A83CFCB55E4E0519C26D3202B0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 128D
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: qvaj8VmZv9GoiqqOB2CXIR9I3J4YJqGEla6CmwGY81k=)
4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a8:3c:fc:b5:5e:4e:05:19:c2:6d:32:02:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=a6e324b0d5bf068bbd0068613434da1d702c64ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:1c:be:9e:31:bc:1e:b2:a6:74:3c:60:02:
96:7d:59:82:83:f2:ed:7c:ec:9d:cc:4f:c3:b5:af:
cb:29:35:1d:5d:4a:e1:12:e8:ca:2a:7a:6e:a8:a3:
b4:a3:25:5b:6a:cc:42:d7:49:50:0e:7d:d5:41:63:
36:ab:f0:da:f4:26:fa:b8:35:eb:44:b3:f8:ce:09:
98:57:a1:4f:29:15:d2:d6:bd:ae:bf:5f:08:98:f9:
23:65:ff:4b:21:8c:38:3e:d3:c6:5d:8f:f3:72:7a:
23:86:48:55:a0:9c:03:dc:3f:c7:26:b1:6c:10:35:
34:be:08:96:7b:19:42:56:0c:c7:66:71:7c:73:aa:
7c:87:a3:75:f3:e5:1b:fe:a1:80:15:e0:4f:0a:dc:
1f:89:db:92:e9:2e:6e:41:59:87:97:7f:28:55:31:
f7:ec:22:b6:49:99:77:ca:4f:af:c1:18:84:b6:f1:
72:a7:f7:6d:f6:02:13:f3:5e:64:bb:3e:2a:c2:34:
03:27:27:9d:c4:00:77:e1:ee:c7:29:72:8e:dc:aa:
1f:7b:3e:7e:12:5a:0a:60:48:64:5b:48:19:77:34:
1a:dc:aa:19:1c:ce:0c:c0:8c:a6:58:7a:bb:08:a9:
d3:54:39:30:12:e8:24:09:f5:6c:e3:b7:12:13:52:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:24:B0:D5:BF:06:8B:BD:00:68:61:34:34:DA:1D:70:2C:64:EF
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:5c:21:f8:e7:e4:00:b2:eb:df:7a:9f:b3:54:51:bc:8c:
69:e8:5e:bc:ee:d5:26:c2:7d:ae:dc:0a:e8:95:f8:2e:9c:d4:
39:b1:87:bd:98:46:21:d9:8b:21:6d:31:af:ad:9d:2f:26:47:
5f:17:6b:90:d3:ce:1d:17:a1:eb:84:e4:e3:11:e1:d0:28:7c:
51:7d:f6:2f:cb:e1:75:ea:20:8b:6d:b6:11:cb:fa:1e:0d:6b:
bd:39:75:8b:2f:cc:f4:12:ce:d0:43:37:ae:2e:59:1b:fe:5c:
57:84:2d:a9:e9:af:18:cf:9a:97:a3:f9:6d:1e:e1:6a:99:74:
85:74:6c:b5:5d:54:e7:89:f1:7f:2e:b0:3a:06:79:22:7e:5b:
ae:90:e7:7a:cd:9d:15:69:57:a7:2d:72:d5:a0:83:d5:dd:5d:
1a:1a:8a:fa:04:92:47:7f:fc:d3:b1:99:01:5c:ad:3c:e6:37:
4e:02:60:2f:b2:d0:7b:f4:e5:c0:c2:79:af:e1:5f:c3:42:d4:
14:af:1d:0e:96:09:3a:ab:67:b5:e5:10:e8:41:5d:9c:ff:f0:
34:34:05:e8:d2:8a:1c:76:b4:af:dd:7d:68:6e:44:bd:75:cc:
79:e5:db:f4:f8:79:76:91:4b:5e:49:fa:d9:08:fe:47:e8:46:
40:dc:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:23 2026 by rpki-client