Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: wYF9RxcppOrIs+p4KhYBTgi6zTYA2IFvM3QAYi5rwVA=
Subject key identifier: 65:42:DF:4D:D0:59:21:54:4F:D5:3B:C5:B0:96:CE:F1:52:BB:5A:D0
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019CABA2498907449EE172CD8E37852C2CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0DF1
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: Ti6HbKvsMjy31ltVU0JGwhoHIUfbR3zNVExfvpNQDD4=)
2: z4L6AD3m-R2tfOhJaueCbCo3ru0.roa (hash: 0ubsZGhqaNgq/MTbY8mEdyeAa24CrlFwOd2MlfZ80j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:49:89:07:44:9e:e1:72:cd:8e:37:85:2c:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=6542df4dd05921544fd53bc5b096cef152bb5ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:cb:08:05:4b:58:31:90:ff:fe:b1:ca:80:
f7:02:12:c9:e8:5e:a5:64:a7:41:1d:4e:55:91:cf:
89:af:2a:5e:9c:45:b2:81:ae:83:df:cf:e5:03:2a:
2a:7c:d4:58:47:0d:88:2e:99:2a:c8:c0:a2:c7:34:
13:83:fd:26:5c:86:94:13:9d:20:14:75:8d:a8:9a:
92:e3:9a:2c:e0:c0:48:a8:46:17:41:d3:aa:84:2f:
c4:10:c0:03:5d:99:6e:4c:ca:b5:76:8c:5b:8d:21:
0d:58:92:3f:ed:f7:b2:48:69:6a:de:59:22:e7:cc:
39:77:a4:d6:a6:5c:e0:03:67:9d:e1:21:96:41:ee:
18:bb:d0:ee:71:7f:28:16:ed:9f:dd:78:16:8c:07:
63:5a:c2:fb:ee:2e:ef:cc:21:80:f9:59:1d:d1:35:
c6:4b:6b:69:4d:01:ac:2f:bf:72:d1:b3:0b:b9:14:
ec:5a:d1:0b:00:58:d0:89:c3:95:5f:33:22:5d:f9:
79:8c:80:b4:74:5c:d2:81:9a:e7:39:ae:f9:07:16:
b4:78:62:05:20:a2:be:82:c0:37:f5:64:eb:ab:33:
75:2d:97:7f:34:79:17:7b:93:20:5a:ce:c4:94:b3:
cf:9f:aa:5c:7d:6b:0f:5b:b1:db:4b:1b:fc:01:89:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:DF:4D:D0:59:21:54:4F:D5:3B:C5:B0:96:CE:F1:52:BB:5A:D0
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:23:4f:27:6d:60:ee:43:47:56:68:3f:e6:2a:d9:98:fb:
c9:db:3c:56:ff:d3:9b:6d:ed:70:ed:c9:2e:c3:88:71:53:de:
f8:e5:fb:6b:28:bd:98:6f:3b:e1:0d:7e:21:25:e3:fb:de:e4:
a5:53:74:a8:39:e1:de:69:93:18:fc:f0:59:15:56:29:ac:f3:
2a:a2:9b:65:38:cb:c3:e2:d1:90:39:0e:61:0e:9b:55:40:ec:
8a:b5:74:a6:6c:ba:89:fa:68:d1:d0:bd:4b:61:0a:cc:be:3b:
3a:65:e9:17:02:e7:6a:f1:ea:5c:1a:e2:20:70:9b:9a:ff:6e:
c3:77:be:f0:0c:5d:a4:e7:20:d3:a3:59:1d:bb:64:1a:cf:9c:
5c:30:1a:e7:04:ba:47:90:90:87:aa:12:09:f6:d6:94:e7:cb:
c8:c3:f0:a0:c6:9f:31:50:07:6d:3d:ee:59:0a:5c:f2:5d:eb:
e3:05:4e:6e:b6:be:f5:11:9e:f6:d3:37:03:e7:4c:f3:c7:ac:
a6:2e:8d:75:79:33:19:c7:20:1f:e5:53:b1:f5:33:fb:8a:40:
26:6a:55:77:be:3e:12:b4:4b:55:6c:25:ef:59:7a:c1:0a:af:
a7:85:93:e4:1e:cf:8d:24:94:2d:27:0c:85:cb:69:f7:ba:ff:
ae:e9:32:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrokmJB0Se4XLNjjeFLCysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDY0MmZkNGUzNTU5NWI1ZmQ0NThhNDNhM2FjYWM4Yjkx
Mzk1Y2UwHhcNMjYwMzAxMjMwMTA1WhcNMjYwMzAyMjMwMTA1WjAzMTEwLwYDVQQD
Eyg2NTQyZGY0ZGQwNTkyMTU0NGZkNTNiYzViMDk2Y2VmMTUyYmI1YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/rLCAVLWDGQ//6xyoD3AhLJ6F6l
ZKdBHU5Vkc+JrypenEWyga6D38/lAyoqfNRYRw2ILpkqyMCixzQTg/0mXIaUE50g
FHWNqJqS45os4MBIqEYXQdOqhC/EEMADXZluTMq1doxbjSENWJI/7feySGlq3lki
58w5d6TWplzgA2ed4SGWQe4Yu9DucX8oFu2f3XgWjAdjWsL77i7vzCGA+Vkd0TXG
S2tpTQGsL79y0bMLuRTsWtELAFjQicOVXzMiXfl5jIC0dFzSgZrnOa75Bxa0eGIF
IKK+gsA39WTrqzN1LZd/NHkXe5MgWs7ElLPPn6pcfWsPW7HbSxv8AYm7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVC303QWSFUT9U7xbCWzvFSu1rQMB8GA1UdIwQY
MBaAFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0Yjgt
YjcyNzNjOGUzMDIzLzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0YjgtYjcyNzNjOGUzMDIz
LzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWUjTydt
YO5DR1ZoP+Yq2Zj7yds8Vv/Tm23tcO3JLsOIcVPe+OX7ayi9mG874Q1+ISXj+97k
pVN0qDnh3mmTGPzwWRVWKazzKqKbZTjLw+LRkDkOYQ6bVUDsirV0pmy6ifpo0dC9
S2EKzL47OmXpFwLnavHqXBriIHCbmv9uw3e+8AxdpOcg06NZHbtkGs+cXDAa5wS6
R5CQh6oSCfbWlOfLyMPwoMafMVAHbT3uWQpc8l3r4wVObra+9RGe9tM3A+dM88es
pi6NdXkzGccgH+VTsfUz+4pAJmpVd74+ErRLVWwl71l6wQqvp4WT5B7PjSSULScM
hctp97r/rukyIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:55 2026 by rpki-client