Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: P5dfGbijE8gxnaIuYkvSb/G9bOtsAna/yIU1N+soZbY=
Subject key identifier: B3:AC:0E:AE:A6:4C:A3:FD:77:BA:9B:D2:9B:65:3C:84:68:2D:98:6C
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019D9A06CAEE47C33944018F90661B3A004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:29 +0000
Manifest this update: Fri 17 Apr 2026 06:00:29 +0000
Manifest next update: Sat 18 Apr 2026 06:00:29 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: CYmSAsDdWP5H/PZA6foABMswGAn6RzcntagIDTJU0rU=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ca:ee:47:c3:39:44:01:8f:90:66:1b:3a:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Apr 17 06:00:29 2026 GMT
Not After : Apr 18 06:00:29 2026 GMT
Subject: CN=b3ac0eaea64ca3fd77ba9bd29b653c84682d986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:1c:68:93:b8:d3:02:38:c4:a9:76:91:9e:
55:69:10:d5:b9:ca:0c:09:fa:56:d8:f3:2d:0f:11:
66:6e:70:6e:8a:6c:82:33:01:35:6c:aa:77:54:2b:
2f:9e:a1:89:d4:aa:be:b3:83:8c:2e:89:a5:1f:87:
89:03:9b:e0:92:e8:fc:bd:8d:50:95:bf:90:ad:8f:
4c:d3:7a:0c:cd:95:63:44:41:6c:e9:3a:c5:18:71:
07:1a:e3:43:d6:5e:e7:32:d0:d3:cc:6d:6a:a7:12:
45:c6:eb:e8:1b:39:5e:89:72:0d:6f:4d:d4:82:45:
89:02:4a:6d:4a:d7:75:df:39:e7:3b:db:9e:88:aa:
8e:f8:61:31:93:ee:07:e3:ae:43:82:b0:4c:30:50:
8f:05:c6:20:ab:0e:ad:21:2b:f1:d5:f7:c7:5b:5a:
55:48:ea:f0:58:3e:5b:0a:a5:76:3b:16:9c:38:1f:
db:20:d9:ad:c3:f6:e2:b7:c7:c2:35:31:87:63:9d:
2c:91:5b:da:47:7f:f5:03:bc:3c:92:c4:db:fe:f2:
fc:ba:44:cc:29:7f:7a:96:c3:72:22:89:38:16:6c:
ce:45:07:42:45:aa:d4:9f:f3:63:ff:14:13:24:60:
dc:a0:91:69:7e:1a:6b:1c:73:d0:cb:a2:22:1d:1f:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:0E:AE:A6:4C:A3:FD:77:BA:9B:D2:9B:65:3C:84:68:2D:98:6C
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:71:31:d1:af:b4:53:87:4d:42:e2:9c:55:1f:3e:5e:3a:0b:
da:05:8a:3a:a7:d6:4a:d9:a7:da:bf:bf:1b:8b:97:2a:69:8d:
9a:d1:b8:b8:00:57:4b:92:c0:4e:78:c3:6f:75:b8:fd:23:d5:
67:c6:3d:f0:d8:9a:1f:86:11:47:1b:0a:8d:ec:d2:9b:1c:e8:
5b:55:6d:2c:34:7e:7b:5a:02:5a:25:e0:9c:d0:d9:4f:3b:69:
be:8f:55:c0:0f:25:42:01:61:4f:44:b8:bc:7b:8c:2a:8e:f6:
36:f4:75:ee:57:53:71:b2:1c:ff:be:76:51:0d:b5:67:02:aa:
9f:fc:3e:6d:a4:cf:03:f2:24:ef:0b:bd:e8:89:b6:83:ec:ae:
7e:0d:5d:c9:d1:07:1e:07:11:6c:43:17:6e:7d:a7:a1:18:c6:
c6:7e:97:1d:d0:49:bc:fa:aa:da:8f:00:8f:49:fd:b9:47:d0:
e4:5a:ff:7d:0b:02:c4:33:ad:b8:79:c5:3b:bd:06:8d:82:35:
e8:f5:91:8a:2e:5d:3f:d5:68:73:d6:33:a9:55:d9:12:89:09:
a1:21:ea:90:ed:a7:f0:94:63:7b:45:a1:17:ca:c1:ba:d5:ac:
b1:a8:14:a4:a6:08:0c:88:f6:1b:26:47:35:1d:90:93:64:e9:
76:30:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:02 2026 by rpki-client