Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: dJRSOfcIpUBRe/SsERVCIHmc1Couvf3pjt2bEtctiUc=
Subject key identifier: B4:77:09:FE:14:B4:2B:E7:F1:E8:D6:2A:8D:6A:1A:3D:0B:40:0E:A0
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019D9A74A8AB70DAC9CB02D6D0FE3506C232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: yzKh/1CF2zlWeqz8d8R1fDErIVA4lSh+lrc9ybRVkWY=)
2: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (hash: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a8:ab:70:da:c9:cb:02:d6:d0:fe:35:06:c2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=b47709fe14b42be7f1e8d62a8d6a1a3d0b400ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:52:f5:9b:15:7e:44:03:01:ad:e5:15:cf:
7a:35:d5:c0:28:a8:77:77:2f:71:9f:2b:76:ee:eb:
c1:6b:60:85:e0:77:fe:d5:ba:38:69:1a:03:b8:27:
81:38:ae:68:83:7a:5b:e6:24:76:a0:d8:74:f4:4a:
c7:ef:e5:3b:60:4b:06:26:e2:70:9c:b0:01:64:d9:
fb:df:d2:17:2a:e9:af:54:6a:43:04:ae:5e:33:64:
ff:ed:fb:49:89:4f:9a:2b:a3:35:c3:2e:01:48:5e:
24:68:60:22:90:8d:3d:df:8a:0a:99:aa:e4:d4:22:
16:62:1e:c5:e5:34:ed:ff:78:94:9b:6f:b2:32:74:
5f:5a:67:ab:bb:b9:aa:10:a8:8d:5e:5d:31:62:0f:
af:b5:59:10:13:ee:2c:de:58:b8:16:d0:e8:6e:ef:
f5:f1:f5:b7:25:61:43:5e:b8:e8:76:4a:18:01:5b:
e1:83:50:48:88:07:6f:8e:30:17:71:21:83:2f:ac:
d2:3a:a0:02:db:39:7e:18:02:0a:6a:c0:8b:e8:fd:
d2:e6:be:61:f0:f6:ef:bb:d7:02:87:13:75:bf:ce:
bd:b2:dd:44:42:45:80:08:a8:f1:b0:6c:fe:da:83:
4e:d9:ce:71:63:1d:e9:2d:9d:21:49:68:6f:13:26:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:09:FE:14:B4:2B:E7:F1:E8:D6:2A:8D:6A:1A:3D:0B:40:0E:A0
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:27:47:e4:25:fc:ff:5d:16:e4:f7:f1:7b:96:a4:d5:0d:b6:
75:07:b6:f2:6d:42:a6:8d:aa:02:1a:2a:aa:e9:20:2c:dc:98:
7d:13:32:a4:e4:f7:b6:b6:c1:bc:96:72:da:ae:b2:de:5d:20:
2d:92:3e:bf:fc:ee:d8:cf:d4:39:ad:c0:58:e5:04:44:de:68:
90:67:ac:a2:41:71:e1:22:cf:18:ff:0b:53:98:39:9b:45:a8:
24:b6:94:e0:a7:df:ad:68:cc:a0:b1:cc:8a:ba:27:f3:e5:b6:
0d:33:88:c5:c7:e7:8e:de:ba:57:f8:cf:b3:9f:76:8d:de:a4:
ad:55:b9:d8:61:9f:0b:f0:2e:49:44:40:51:4a:61:fa:84:3b:
fe:8e:21:a9:16:dd:5d:dc:53:23:e4:8d:65:8a:e6:c1:7a:26:
29:bb:d3:b7:6e:28:4d:7c:91:b5:d6:ec:a1:af:46:94:7d:e5:
d9:c6:07:5e:9b:cf:22:50:16:30:86:d7:58:b8:b7:ea:c8:12:
a0:20:61:2d:fe:0e:02:6c:40:7c:66:99:5b:86:71:e5:e0:97:
fd:46:86:01:ea:20:2d:56:cb:de:e2:74:e8:02:be:89:97:1f:
ce:9b:07:0c:67:18:df:c7:4e:50:81:80:40:63:e1:7f:87:1e:
f5:41:89:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKircNrJywLW0P41BsIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj
Mzc5ZjcwHhcNMjYwNDE3MDgwMDI5WhcNMjYwNDE4MDgwMDI5WjAzMTEwLwYDVQQD
EyhiNDc3MDlmZTE0YjQyYmU3ZjFlOGQ2MmE4ZDZhMWEzZDBiNDAwZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzVS9ZsVfkQDAa3lFc96NdXAKKh3
dy9xnyt27uvBa2CF4Hf+1bo4aRoDuCeBOK5og3pb5iR2oNh09ErH7+U7YEsGJuJw
nLABZNn739IXKumvVGpDBK5eM2T/7ftJiU+aK6M1wy4BSF4kaGAikI0934oKmark
1CIWYh7F5TTt/3iUm2+yMnRfWmeru7mqEKiNXl0xYg+vtVkQE+4s3li4FtDobu/1
8fW3JWFDXrjodkoYAVvhg1BIiAdvjjAXcSGDL6zSOqAC2zl+GAIKasCL6P3S5r5h
8Pbvu9cChxN1v869st1EQkWACKjxsGz+2oNO2c5xYx3pLZ0hSWhvEyZnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLR3Cf4UtCvn8ejWKo1qGj0LQA6gMB8GA1UdIwQY
MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt
M2ZmOTI2MDg1NTI3LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3
LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwydH5CX8
/10W5Pfxe5ak1Q22dQe28m1Cpo2qAhoqqukgLNyYfRMypOT3trbBvJZy2q6y3l0g
LZI+v/zu2M/UOa3AWOUERN5okGesokFx4SLPGP8LU5g5m0WoJLaU4KffrWjMoLHM
iron8+W2DTOIxcfnjt66V/jPs592jd6krVW52GGfC/AuSURAUUph+oQ7/o4hqRbd
XdxTI+SNZYrmwXomKbvTt24oTXyRtdbsoa9GlH3l2cYHXpvPIlAWMIbXWLi36sgS
oCBhLf4OAmxAfGaZW4Zx5eCX/UaGAeogLVbL3uJ06AK+iZcfzpsHDGcY38dOUIGA
QGPhf4ce9UGJLA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:47 2026 by rpki-client