Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: oZRnKRF1nwLQvIvuB0gX8/1bKAmGrS4ii6o5u4UHFZU=
Subject key identifier: D3:FE:BB:39:D7:D9:38:21:F7:25:D0:A3:28:A2:D4:99:13:BD:13:CF
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019CACEB78CD4BD71DEC60E6EAED4C144E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:38 +0000
Manifest this update: Mon 02 Mar 2026 05:00:38 +0000
Manifest next update: Tue 03 Mar 2026 05:00:38 +0000
Files and hashes: 1: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: 4EPvPx9XYAwfZ73uBvYzrNRbtiZSZkY7nJSJ0ION9zM=)
2: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (hash: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:78:cd:4b:d7:1d:ec:60:e6:ea:ed:4c:14:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Mar 2 05:00:38 2026 GMT
Not After : Mar 3 05:00:38 2026 GMT
Subject: CN=d3febb39d7d93821f725d0a328a2d49913bd13cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:d5:07:27:91:9e:eb:35:87:8e:46:f3:19:
02:d9:c1:63:fc:18:cf:9f:11:97:ca:29:e5:1b:0a:
4d:8e:8e:c1:a6:e8:66:b0:c7:96:1f:81:dc:45:c5:
8a:db:b5:7b:57:7a:03:61:1e:a5:8d:e4:68:4a:1b:
82:25:28:9b:18:5d:47:bf:c6:bd:b2:66:3e:b5:be:
d9:75:d6:ac:62:72:6f:e9:5c:b5:53:ee:79:6e:97:
d3:71:eb:e3:23:81:eb:d1:03:5d:94:a0:b3:b1:51:
da:4f:5b:b0:75:e4:86:b1:c9:f3:08:fa:50:1f:98:
a1:cf:e0:94:22:2f:d0:67:6e:5e:9c:e5:83:9c:21:
59:dc:d6:a9:e1:f1:bc:f8:9b:0d:11:4b:5e:8b:45:
06:10:93:81:31:99:16:f5:ee:1a:6b:81:12:71:62:
45:48:e1:9a:cf:85:15:6e:18:7e:0d:2b:cd:21:a5:
46:f0:86:7c:23:27:2b:b4:9c:83:9a:3c:cf:56:21:
4b:af:a2:27:04:95:68:8b:09:02:9e:95:e0:57:2a:
43:75:8a:16:e1:c8:63:31:4a:7e:d8:e5:b6:f7:72:
b3:d3:e8:f8:3f:e5:30:2e:6d:ea:63:02:0c:4d:fc:
8a:b4:7a:d4:51:2a:bc:b8:a6:70:3a:7e:21:fc:ad:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:BB:39:D7:D9:38:21:F7:25:D0:A3:28:A2:D4:99:13:BD:13:CF
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f6:ab:2f:9c:c2:d9:6b:0c:c5:2d:ad:bc:5b:25:97:ed:1b:
62:ad:28:c7:6f:61:65:40:27:74:9f:bd:0f:96:a9:7a:68:66:
6b:87:fd:b1:71:28:d5:5f:bf:62:28:15:7a:6e:23:6e:83:e3:
c6:d0:b9:95:1f:99:65:b0:fd:2d:9f:7e:2b:4e:fb:09:d5:90:
a0:95:fd:bb:eb:c3:67:b0:64:fe:59:74:9a:b7:57:97:c4:91:
e1:2d:74:29:82:aa:1c:7a:39:2b:58:47:85:25:5d:27:2a:39:
e9:72:7b:d5:5e:51:81:62:b7:6b:a4:03:f0:16:da:41:5f:3e:
cf:03:56:1e:0e:11:06:8a:1b:96:8e:97:4c:a6:38:a2:f7:d7:
73:53:6b:5b:29:62:e0:b6:b9:56:53:fd:9c:e5:2d:de:13:73:
2a:ef:37:43:7d:f9:21:4c:3b:5a:9c:ee:10:f2:fc:94:c1:6f:
9d:3a:06:a2:de:e3:a5:c2:eb:ff:a4:c5:40:9f:b7:ad:fa:58:
d2:b2:17:c9:f6:00:37:17:20:70:bb:a6:48:25:e1:21:bd:29:
65:43:2d:42:1b:70:82:92:d4:83:c6:21:6a:f9:8c:b8:60:c4:
96:3f:44:af:d0:85:b5:03:97:11:bf:0e:71:5b:16:9e:74:fd:
74:fd:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:22 2026 by rpki-client