Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: pD8+8olaikTtY/pd1B3Bmg+HVfBWVsYwvuUioLPX2CM=
Subject key identifier: C2:B7:7B:7B:31:2C:24:92:10:E3:C9:45:7B:25:DD:AB:06:62:D0:BE
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019FAB2CC192B7D6AA799A8574001027E5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 00:01:04 +0000
Manifest this update: Wed 29 Jul 2026 00:01:04 +0000
Manifest next update: Thu 30 Jul 2026 00:01:04 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: GP1bq1wJNYWKLaNelSXN8sgMu3NNqBDJIWJvIuoFR8Y=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c1:92:b7:d6:aa:79:9a:85:74:00:10:27:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jul 29 00:01:04 2026 GMT
Not After : Jul 30 00:01:04 2026 GMT
Subject: CN=c2b77b7b312c249210e3c9457b25ddab0662d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:f3:96:1b:c2:35:80:9e:74:53:da:1a:5d:
84:ef:c1:57:8d:95:9d:80:eb:65:f7:0a:df:5f:11:
93:7a:ca:48:1c:b4:5f:bf:e7:06:5f:32:59:5d:55:
3d:cb:cb:f7:35:91:19:8a:18:f1:16:c2:da:1c:4b:
7c:4c:1b:bc:a7:8f:9c:80:6a:e3:6d:30:57:de:f4:
4b:91:b9:5d:ee:0f:65:42:2e:65:b7:fc:44:84:0a:
1c:e8:f8:94:c3:99:5e:aa:ed:96:cd:3d:2f:17:e5:
5c:1f:c6:b4:22:54:94:d4:b8:54:9a:a6:ac:b7:cf:
1e:18:f6:c7:45:f3:91:dd:cc:77:ef:37:53:9a:20:
b1:04:4a:8a:e4:c8:e4:a6:bb:35:ca:ce:f6:0d:ff:
77:c1:ec:37:02:d3:bd:d5:cc:04:86:e0:36:28:b4:
27:a5:22:c1:7f:93:9f:91:b4:1e:a7:ea:a3:97:53:
fe:ec:66:da:a8:be:e8:c6:dc:ab:15:23:03:fc:4d:
c0:f8:d9:10:03:5e:a8:8a:85:cd:07:55:cb:7e:7a:
fd:89:b4:1e:74:71:11:61:1f:10:1a:83:15:e7:58:
bb:30:e9:0e:07:2c:b8:05:e2:c2:3c:8a:a5:64:74:
ee:01:26:9f:87:82:0c:d8:3d:73:f6:be:03:62:22:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:7B:7B:31:2C:24:92:10:E3:C9:45:7B:25:DD:AB:06:62:D0:BE
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:b5:6a:9e:eb:19:68:9b:95:2e:d5:af:8d:c8:e5:28:b7:
af:46:a0:b2:39:45:6b:76:7d:60:69:15:3b:33:18:a9:b7:89:
17:a0:d4:34:a2:7e:55:26:c9:7b:ef:5a:5a:7c:3a:38:17:76:
c4:0f:55:63:6b:15:22:69:e8:94:84:5d:c9:6a:2e:05:3e:ec:
50:6b:ca:57:2f:fe:e5:24:37:15:8e:5b:2c:0b:d8:e2:ec:0b:
c1:c2:44:6d:12:5e:c5:c9:46:9d:d5:57:bf:48:34:a4:fa:3d:
b2:47:5d:e6:60:50:18:e2:d3:cc:97:ff:49:cd:f1:c2:24:7b:
4a:eb:13:ef:44:ee:81:17:87:a4:38:19:07:6c:52:14:ab:e8:
a5:82:27:9d:93:c1:dd:46:24:16:50:81:4e:3d:79:41:58:a0:
8e:af:d4:f3:e5:cd:7a:28:e2:a1:d0:84:1c:33:47:b2:ba:0a:
e7:68:7a:45:3a:ae:f8:a8:57:c5:e0:b6:da:21:c7:40:86:9d:
57:70:2c:c2:aa:6d:ad:5b:fb:a7:c2:fa:94:57:8f:ab:7b:bb:
f9:72:be:ed:81:c2:f3:4e:6e:82:60:8e:7c:04:92:58:3e:c2:
a2:58:32:cd:c0:d1:1e:a6:95:25:3d:ee:af:18:17:8c:72:00:
21:c8:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:15 2026 by rpki-client