Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: Qz5aAi2GZn4vwt1Bducpgdw1Qn3zsmsyGkBom04bQGA=
Subject key identifier: BE:A0:FD:AB:CA:9B:83:AF:C9:40:89:53:34:1C:E1:F5:AA:E8:59:34
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 01A0CAEB849B357B58897EB72A19A3FBA942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 21:00:27 +0000
Manifest this update: Tue 22 Sep 2026 21:00:27 +0000
Manifest next update: Wed 23 Sep 2026 21:00:27 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: UnqkCJbo+OZht+yteEB1z5d7iW8w50IpBxcstmU1Q4c=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:84:9b:35:7b:58:89:7e:b7:2a:19:a3:fb:a9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Sep 22 21:00:27 2026 GMT
Not After : Sep 23 21:00:27 2026 GMT
Subject: CN=bea0fdabca9b83afc9408953341ce1f5aae85934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:ad:5c:c2:8c:56:fa:78:ff:76:24:dd:93:
03:43:3a:01:0c:82:08:37:50:e0:5f:17:41:95:de:
8f:37:98:b2:14:30:49:24:fd:6f:06:2a:7b:0b:7d:
25:2b:ef:fa:f1:f3:9c:7f:f5:df:b4:b8:9f:56:4a:
a5:29:cf:4d:50:34:d0:41:52:7f:9a:34:d6:d6:01:
6f:b7:ef:89:d8:89:03:56:20:fa:40:8e:41:d2:97:
f9:26:0d:cc:14:f6:f2:ee:fd:54:2f:74:cf:7c:33:
cc:09:2f:49:df:ea:f2:1c:e6:9f:e7:6b:26:dd:46:
6d:ee:94:f8:1f:c3:53:8e:45:76:ab:5a:ad:d4:5a:
78:ce:8b:cb:14:7a:24:73:68:29:e3:a8:60:06:96:
8c:b2:b6:51:7f:ae:28:7a:46:e1:eb:c9:d4:a2:ca:
75:b6:ad:fb:98:66:10:3d:4e:55:21:5b:fa:1d:c1:
7d:41:ad:bf:bd:66:5f:55:5b:bc:c1:5a:bd:0a:3e:
51:28:a2:42:ff:5c:f1:15:3e:66:c4:d7:4b:17:76:
bc:6b:49:37:4a:4c:79:a4:b7:71:89:c7:4d:ca:7a:
68:58:fb:2a:09:6f:02:1a:84:04:09:a3:d5:4d:4f:
e5:a0:0b:a1:f5:6f:b2:6a:5a:3d:dc:30:d7:86:6c:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:FD:AB:CA:9B:83:AF:C9:40:89:53:34:1C:E1:F5:AA:E8:59:34
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:20:d7:c6:9d:a3:88:7a:a2:9f:36:55:f3:0a:a9:33:0d:
5d:6a:43:cf:75:77:55:89:54:d1:39:cf:90:63:d7:0c:7a:19:
c1:43:8b:31:26:a6:5f:ac:2d:09:12:d3:09:3b:da:a3:24:76:
8e:eb:d6:c7:3c:0c:33:fa:1a:4c:b9:cb:39:f2:b1:fd:6a:57:
5d:83:91:d1:a4:d7:26:27:2d:2d:5b:0c:b7:43:e3:66:c6:47:
31:3e:67:4e:c6:97:17:10:d1:20:5c:aa:9a:30:06:5b:4b:23:
8b:ac:25:82:0b:1f:c8:69:c3:75:61:a7:24:1a:da:ee:36:a8:
5d:0c:3a:01:dc:1c:53:e9:74:2f:3e:cb:83:86:b2:0c:63:08:
db:af:9b:a1:99:bf:bd:8c:b9:70:39:34:e3:ef:b8:f2:8b:53:
1d:c8:fb:35:a5:67:f3:8f:bd:50:ec:9e:96:7e:fd:17:cb:c4:
a0:d1:24:e7:cc:4d:90:5e:40:44:90:01:09:c0:c1:c0:cf:c1:
e7:a7:33:ba:cd:40:02:3d:58:60:0e:c8:d1:9f:2d:35:07:3f:
ef:b6:7b:be:32:31:94:96:cb:42:7d:dd:88:1f:e8:56:75:1e:
2f:40:b2:e5:f3:bb:56:41:35:83:2c:2c:eb:78:bf:3e:68:08:
65:69:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:32:55 2026 by rpki-client