Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: UjFuKwe0YRlsi0GERfhrJ3NaAKb8qJOCA2Qbw8+a7tE=
Subject key identifier: 5D:EA:85:55:23:5D:BF:39:DC:97:79:92:9E:4D:AA:69:33:16:30:70
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019DA2D2DEE8EB6AD258109D3A4726EEAED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0E71
Signing time: Sat 18 Apr 2026 23:00:21 +0000
Manifest this update: Sat 18 Apr 2026 23:00:21 +0000
Manifest next update: Sun 19 Apr 2026 23:00:21 +0000
Files and hashes: 1: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: z3qy5ktZw2ORXA5jYYdYRGWuNhm4wXss8fz5eWCG0fA=)
2: z4L6AD3m-R2tfOhJaueCbCo3ru0.roa (hash: 0ubsZGhqaNgq/MTbY8mEdyeAa24CrlFwOd2MlfZ80j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d2:de:e8:eb:6a:d2:58:10:9d:3a:47:26:ee:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Apr 18 23:00:21 2026 GMT
Not After : Apr 19 23:00:21 2026 GMT
Subject: CN=5dea8555235dbf39dc9779929e4daa6933163070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:e6:de:9f:84:71:1e:0a:7a:01:8f:a6:e2:
8e:f8:50:74:26:4f:79:33:b0:75:30:89:2f:4b:8c:
f0:b3:86:ea:df:59:d7:43:3b:2d:c9:e9:8e:b4:0c:
84:a3:51:65:4e:75:d2:5c:a5:b1:6e:4c:5b:27:6d:
af:29:17:9d:f8:94:0c:70:07:08:fd:21:fd:c0:6e:
24:c0:4f:64:0e:9a:26:93:33:aa:c3:2d:fa:77:57:
11:e1:b7:4d:b0:0f:a2:d5:02:1a:1f:66:11:b9:4c:
9f:cd:0e:f8:cf:7b:92:8b:4c:5b:fb:d6:0c:5a:81:
df:c9:35:3d:e2:8f:b6:7f:a9:21:4f:7a:32:3c:bb:
27:26:e9:da:7e:00:99:6d:06:f3:33:23:7b:e5:ef:
a8:fa:36:48:2c:85:8a:21:9f:07:b4:61:05:ba:ff:
5d:72:d1:16:34:a0:60:44:2a:5c:6b:12:55:4a:9d:
5a:86:52:91:29:b6:02:61:60:78:f0:ed:cc:4a:dc:
f6:ef:9e:e2:5b:55:7f:ed:99:a3:c6:d5:ad:1f:2f:
3f:60:2f:1b:5a:58:35:79:c5:01:12:77:d7:1e:73:
22:18:f7:9a:ce:3e:1b:60:52:51:5f:50:9b:ae:d2:
c3:4b:12:fe:f7:54:6c:91:8a:a6:a5:b8:f7:54:9b:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:85:55:23:5D:BF:39:DC:97:79:92:9E:4D:AA:69:33:16:30:70
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:46:ed:55:6b:53:71:11:36:12:c1:23:a1:9d:e7:bf:ec:5c:
81:0c:2c:f5:1d:80:51:61:a1:3a:8e:be:ae:8b:8b:98:a8:25:
d9:4e:31:79:99:b0:50:3c:e6:aa:4c:04:51:c6:94:a5:fb:f2:
72:d5:94:2e:c2:da:e2:89:1c:1b:32:31:c4:ee:f5:a7:f8:c5:
8c:69:21:0d:5a:be:15:16:6a:c6:b6:fb:30:63:b2:12:af:6d:
6d:0c:7e:dd:13:22:13:ff:c1:a4:e0:93:b8:64:e8:ad:69:7f:
c3:d7:23:ab:3e:9b:2b:54:c1:a7:39:8f:ff:02:c1:1b:b3:4b:
f4:1c:9f:69:a2:7e:c1:bb:01:ab:52:10:9c:96:22:da:7d:19:
ff:bc:be:12:63:ce:22:a2:30:03:66:3a:f8:5e:20:c1:30:ad:
f0:5a:13:58:17:e8:e2:4a:7b:f3:72:3a:a3:3a:45:10:7e:ec:
43:29:04:13:3b:9e:f9:be:02:8a:22:b7:c6:66:3c:91:f5:57:
2d:0f:3c:5a:b2:02:f1:de:4c:91:35:3d:23:f7:86:f0:97:b5:
7d:c9:51:cb:02:a3:f0:ab:a3:0c:c1:9c:6b:71:65:9f:3a:99:
1a:97:e5:c8:27:bf:01:b4:06:81:07:2a:a6:35:4d:34:62:d2:
00:08:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:07 2026 by rpki-client