Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: eg2cGyZUCMsSPNSvkmm2zNjQs9BNRNFnzAYd4xth9w8=
Subject key identifier: 00:9D:15:44:91:27:BE:C3:BC:B5:B2:F2:F0:0B:47:B8:91:26:E2:A1
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019CAC7E13EF4D2052F318758A528868D506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: brYNpHYrGm08V0qehNvkha21qICBgiYJeXcCdEmHbTI=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:13:ef:4d:20:52:f3:18:75:8a:52:88:68:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=009d15449127bec3bcb5b2f2f00b47b89126e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:42:9f:51:43:d4:45:36:5f:2d:73:60:ea:
7b:eb:fc:35:35:c9:52:90:4d:53:ae:79:c2:bb:43:
33:68:ff:87:1e:c3:fd:b0:44:6b:33:72:37:62:86:
23:42:37:39:ae:df:5c:49:0a:39:d9:09:29:48:92:
a9:1a:3d:a2:64:c0:c9:83:ed:5b:d4:5b:e2:82:93:
b5:22:03:87:7d:81:67:47:fc:09:a8:03:bd:06:d4:
2c:20:3b:ef:be:bb:e8:1d:11:87:4e:ec:17:e1:bb:
cb:fa:7a:a2:29:d7:a2:21:6c:28:5b:e9:81:33:96:
3e:91:0e:12:76:58:3b:a7:a6:3f:92:6c:39:28:4a:
18:36:3d:47:1e:ea:44:d2:a9:55:af:ce:af:fc:58:
f2:06:75:97:d1:17:9c:6c:69:7d:4b:0e:c3:5f:17:
2f:cc:d6:51:cf:aa:71:1b:58:bb:aa:e8:10:f4:d3:
5f:87:2f:de:30:de:17:65:d0:a4:0e:9e:8a:88:75:
cc:02:7e:07:9e:ed:10:60:a2:d8:1a:0b:9f:0f:a4:
48:fc:a4:e2:26:e7:83:7d:85:df:94:d7:7e:33:9c:
c0:c9:8a:31:11:6b:7e:12:4d:c3:2c:b4:da:a4:c9:
cf:91:4a:b0:42:2f:40:5b:5e:92:da:0b:44:2c:13:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:15:44:91:27:BE:C3:BC:B5:B2:F2:F0:0B:47:B8:91:26:E2:A1
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:d1:50:0e:de:24:1c:d8:a6:4a:0a:de:4c:2d:1d:12:07:
a6:a9:68:1b:67:f8:25:4e:6b:58:fa:a2:37:58:4f:7e:73:23:
c8:ee:f2:72:68:02:ff:0c:c5:8f:f6:0a:66:eb:00:14:46:88:
48:a5:3b:89:25:1f:c2:a7:6f:ed:2d:cd:60:6b:a6:49:93:e7:
f3:34:6f:de:dd:88:01:83:23:e4:f1:b7:69:5b:28:fa:af:82:
01:4f:f3:6e:a5:55:02:15:63:b2:ed:be:f0:ca:1b:b8:79:6d:
17:6d:d6:c1:ae:76:0c:f6:6b:be:0e:13:d9:47:73:4f:6a:69:
62:24:bb:a1:9c:f7:00:f2:db:ae:e9:0a:57:09:e0:3b:00:60:
d0:28:76:a2:7e:b5:66:d4:db:a8:5b:8f:e7:08:a0:42:9b:76:
0e:72:d9:77:03:fb:53:4e:41:8d:ee:3d:ad:d8:f5:9f:37:ac:
5c:da:23:94:15:74:9c:f1:3b:6a:11:85:24:ff:02:0b:51:3f:
d6:56:fb:0f:c4:fb:cb:b6:e5:bc:43:3d:93:91:f4:64:aa:e3:
f6:d4:e8:d2:0a:74:b8:1f:29:24:30:45:0e:cf:70:cb:c1:12:
5c:c6:32:97:af:63:39:49:3a:74:8c:57:b6:28:1d:05:26:68:
c8:73:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:26 2026 by rpki-client