Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: XFnpTmi+4SZ8umNCuMDQVl40iTcxstTRyaUODnTrzcE=
Subject key identifier: A4:8E:A4:FD:BB:C0:BE:9C:E5:29:C7:4E:C2:2A:71:4F:4E:9B:5F:9C
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019CAAFD8A11F21A98F8810A79F251DF1948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 1211
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: 48YkgP6VK3kHFhtE8ITO8EsJpYqAsPj6chjgfyKm7BE=)
4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8a:11:f2:1a:98:f8:81:0a:79:f2:51:df:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=a48ea4fdbbc0be9ce529c74ec22a714f4e9b5f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:dd:40:b1:10:87:b2:e5:6e:d0:cc:1b:5d:
9d:2c:db:ed:19:47:54:31:58:63:1b:94:36:a9:ee:
44:0d:f2:08:0e:19:8c:42:e3:96:d3:ce:10:6d:e7:
4d:1e:2c:37:e0:c3:32:73:18:01:05:1f:99:39:05:
de:99:01:5a:13:6a:70:52:19:8e:04:16:df:f9:d3:
c3:8e:08:f4:78:de:91:21:db:c0:a7:93:88:28:89:
4c:4f:f9:0a:d2:79:ae:93:a8:e0:01:f5:5c:2d:9f:
03:34:50:14:29:3a:9a:5f:ae:14:2c:8d:25:4d:46:
25:01:b8:47:5a:b3:d8:fb:87:eb:67:55:62:41:95:
4c:08:ad:dc:64:e2:a0:db:10:14:fe:ff:ef:77:2f:
33:d1:9e:17:56:25:52:b5:c3:74:23:ba:96:91:8b:
b4:59:07:6e:cf:10:79:b0:2b:70:87:e8:f8:eb:c0:
b5:8e:af:03:bb:33:f7:fd:66:38:05:92:20:39:ac:
c8:0d:c4:6c:17:84:7f:ec:2d:20:69:3f:27:89:fe:
41:dd:36:b6:90:76:2a:1b:9b:f4:21:c8:ca:9f:52:
b1:bb:2d:bc:6e:f4:ba:6c:72:91:f6:01:5e:7c:21:
2a:e9:c6:9a:75:68:cf:d9:21:32:d2:64:09:e8:76:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:A4:FD:BB:C0:BE:9C:E5:29:C7:4E:C2:2A:71:4F:4E:9B:5F:9C
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:34:87:11:90:32:1c:26:6c:e5:f0:1c:1c:54:8d:59:fa:a9:
ab:b2:fa:f1:52:7b:c4:6f:d4:27:a1:52:dc:20:67:58:b3:aa:
50:e7:b7:e4:ba:7c:b8:f7:9d:99:e0:67:52:2c:d6:de:2b:22:
b0:16:b2:05:dc:ca:9f:f1:0d:10:22:c0:a6:f5:f4:a7:aa:64:
2b:c2:56:a4:2e:5f:f6:ce:ca:7d:99:3c:53:27:e8:96:0c:fd:
a9:b3:22:53:d0:9a:9c:6a:5e:cf:26:43:7b:2d:5e:6e:a5:35:
30:54:26:3a:0b:97:b7:21:6d:c9:c2:3f:29:a3:2a:ec:e2:b6:
e7:c6:04:47:f1:d9:8c:20:89:11:ed:31:79:cb:7d:94:10:4c:
06:93:9b:07:61:d5:7f:a9:28:b4:79:f9:73:4a:1e:d4:f7:8a:
35:e3:d1:ca:2a:09:af:85:d2:8f:27:44:a2:ff:5e:2e:2e:ed:
4c:f2:7a:5a:b5:34:46:d5:75:21:33:fa:f7:b3:f3:08:8e:e9:
dd:f9:17:6d:94:ec:71:9c:6e:8d:8d:d0:b0:d7:52:6f:79:3a:
58:61:45:41:3e:3b:50:50:32:37:9c:72:5f:f6:dd:e8:df:29:
df:bd:5b:b5:30:fd:70:41:4d:66:56:43:5e:12:a1:1d:fb:ef:
14:e7:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:04 2026 by rpki-client