Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: HY2SbuGcmGavdCnqWhELymk0dxRBOFFwBosBDZNWW+w=
Subject key identifier: 66:0F:66:FA:3B:30:24:1E:85:BB:EF:6F:2D:81:22:5A:2C:75:57:28
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019D984FB8EADE0F8AC29DB92023F1497650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 065B
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: Q56bMKjIY+su5n4gVmiP6SJ0oc6UsXSWxSYaVCd/Epo=)
2: ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa (hash: pPHicEIizRCimEFs1IEl8Pv0RkfkVNW4hyUZC1BFM4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b8:ea:de:0f:8a:c2:9d:b9:20:23:f1:49:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=660f66fa3b30241e85bbef6f2d81225a2c755728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:bb:20:5b:35:76:0c:eb:c3:ea:99:77:6f:
d9:28:97:6e:f0:96:3c:92:2e:cf:2a:7d:11:98:dc:
c2:a5:82:57:c1:47:fd:1e:4a:97:4b:ce:a2:e5:42:
94:15:91:05:f4:71:fd:a0:4b:f7:e0:f5:e6:13:9e:
80:a6:dd:2d:66:91:87:0d:1f:cb:26:ec:d8:21:f7:
ff:90:50:84:78:8a:fd:ae:f4:ef:cc:d0:dd:95:97:
5f:7b:fe:de:f9:86:ed:57:dc:c2:a1:46:b6:49:22:
9a:8b:23:70:20:75:d5:b6:0f:e7:e5:1b:6c:05:15:
6a:9a:14:5e:ad:23:a7:e0:bb:63:d4:08:18:95:64:
93:f5:44:5d:b2:cb:f7:3d:d5:71:95:60:9f:0e:67:
4e:01:8f:dc:77:bf:13:05:00:ee:e1:e2:70:df:2a:
c1:75:3d:90:78:14:3e:b6:4e:2a:71:51:41:62:a2:
4f:dc:85:45:09:67:51:d7:ce:91:cf:36:73:f0:52:
92:1d:8f:56:14:97:13:99:c8:62:aa:79:b8:52:61:
df:38:b2:a8:38:64:4f:3f:63:f8:3f:4f:b3:5c:22:
1e:32:68:54:86:fe:61:bd:79:e6:f0:12:56:42:ae:
f0:e2:0f:f8:c4:a3:4e:79:f4:81:ec:ec:b8:d1:b6:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:66:FA:3B:30:24:1E:85:BB:EF:6F:2D:81:22:5A:2C:75:57:28
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f3:70:7a:3d:65:b5:74:93:00:de:a2:15:d0:58:71:ba:33:
e9:cd:4b:04:fd:69:c5:ba:57:d1:85:c4:56:3e:38:ab:4c:de:
26:f2:39:af:0f:d0:4f:eb:0b:b6:0d:8d:f7:31:53:ab:bd:57:
36:02:9f:aa:c2:f0:7c:56:93:30:1e:3f:a5:09:54:64:2a:b5:
bd:42:08:9b:8d:12:64:6e:73:72:7b:05:a8:9c:c6:b2:5d:ec:
1d:8e:ed:e8:8d:29:b5:c6:70:a5:96:c5:71:9f:3c:8e:a3:5f:
5d:0f:c1:a5:7c:4d:25:70:e9:dc:75:24:c8:b8:9a:a8:c0:90:
23:31:6e:54:b4:45:91:f0:d9:97:46:a0:88:fc:b3:b1:b7:6d:
19:73:8f:3d:c9:74:95:9e:aa:78:1c:2b:92:98:a8:5c:d8:81:
9b:ca:dc:96:1a:e0:94:7d:4b:e2:e6:cc:29:2f:b5:15:68:56:
c2:cc:ec:c0:90:0a:50:8a:a4:81:22:c6:72:45:b6:cd:06:87:
07:46:27:39:23:57:92:f9:d9:f3:03:8a:24:28:98:aa:23:60:
75:b1:0c:2a:47:7e:1e:06:7a:a7:75:26:f1:1c:50:10:76:5d:
63:93:ac:08:78:5c:19:61:fb:de:b8:be:91:2e:9c:b3:c9:a8:
84:be:74:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT7jq3g+Kwp25ICPxSXZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2
ZDkzNTUwHhcNMjYwNDE2MjIwMDU0WhcNMjYwNDE3MjIwMDU0WjAzMTEwLwYDVQQD
Eyg2NjBmNjZmYTNiMzAyNDFlODViYmVmNmYyZDgxMjI1YTJjNzU1NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRC7IFs1dgzrw+qZd2/ZKJdu8JY8
ki7PKn0RmNzCpYJXwUf9HkqXS86i5UKUFZEF9HH9oEv34PXmE56Apt0tZpGHDR/L
JuzYIff/kFCEeIr9rvTvzNDdlZdfe/7e+YbtV9zCoUa2SSKaiyNwIHXVtg/n5Rts
BRVqmhRerSOn4Ltj1AgYlWST9URdssv3PdVxlWCfDmdOAY/cd78TBQDu4eJw3yrB
dT2QeBQ+tk4qcVFBYqJP3IVFCWdR186RzzZz8FKSHY9WFJcTmchiqnm4UmHfOLKo
OGRPP2P4P0+zXCIeMmhUhv5hvXnm8BJWQq7w4g/4xKNOefSB7Oy40bavIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYPZvo7MCQehbvvby2BIlosdVcoMB8GA1UdIwQY
MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt
ZmQzZmQxODAzMjk0LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0
LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPNwej1l
tXSTAN6iFdBYcboz6c1LBP1pxbpX0YXEVj44q0zeJvI5rw/QT+sLtg2N9zFTq71X
NgKfqsLwfFaTMB4/pQlUZCq1vUIIm40SZG5zcnsFqJzGsl3sHY7t6I0ptcZwpZbF
cZ88jqNfXQ/BpXxNJXDp3HUkyLiaqMCQIzFuVLRFkfDZl0agiPyzsbdtGXOPPcl0
lZ6qeBwrkpioXNiBm8rclhrglH1L4ubMKS+1FWhWwszswJAKUIqkgSLGckW2zQaH
B0YnOSNXkvnZ8wOKJCiYqiNgdbEMKkd+HgZ6p3Um8RxQEHZdY5OsCHhcGWH73ri+
kS6cs8mohL50AA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:56 2026 by rpki-client