Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: N7RDloLIE2WOYsfEyeb20MUcIVE3xgbIhioxHiDzh8A=
Subject key identifier: 82:53:91:F5:77:F4:F8:B0:67:F2:1A:80:11:76:FB:D0:26:79:5C:55
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019CAA590626AF2842A89B656C7E124E402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1586
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: wmuOSMnvG52co5gkE2zcXLQAM8QMQXcfeb5coZD1ixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:06:26:af:28:42:a8:9b:65:6c:7e:12:4e:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=825391f577f4f8b067f21a801176fbd026795c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:d1:d8:75:5f:52:9d:1d:30:64:1a:2b:df:
9f:b2:18:ad:33:25:9a:2e:aa:6e:22:f2:10:7c:16:
b3:73:36:cb:8b:81:72:11:9b:e1:9b:18:1d:89:4a:
5f:b9:fe:36:bf:68:44:79:7e:4a:e2:f6:3d:66:a4:
52:6d:08:61:1c:21:4c:3e:37:e4:5e:1f:4b:14:32:
8d:9e:7b:4e:04:53:55:d2:fc:67:3b:7d:30:9b:f1:
e5:f4:a4:2d:8d:03:9b:a4:92:50:6b:71:b7:b8:04:
9c:78:ea:91:07:ea:53:ce:a8:c2:24:9d:7e:30:0a:
a7:a1:33:3b:1e:f9:ff:84:75:45:99:f6:19:42:f6:
c9:52:01:bd:8d:0b:35:4e:dc:1f:42:cc:7c:84:8d:
c8:d0:c7:7b:2f:ba:ac:fc:7a:3d:d5:3b:dd:0c:57:
27:2b:d6:00:aa:ac:5d:7e:b1:6f:e4:2a:bd:92:10:
6d:4e:c6:88:1e:fb:2e:cb:8a:b8:1d:5f:c0:3e:fa:
0d:0e:25:a1:ea:b3:a4:a4:a6:3b:2a:7d:d1:37:63:
36:c5:7d:a8:59:ff:69:36:ae:69:ab:e1:3f:59:a0:
b1:b0:ba:c2:2a:30:df:83:77:90:09:a9:c3:67:31:
19:c8:36:59:f2:dc:a6:6b:be:0d:24:7d:cf:28:04:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:91:F5:77:F4:F8:B0:67:F2:1A:80:11:76:FB:D0:26:79:5C:55
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:28:bb:57:a9:78:bd:7e:ec:1b:b4:8c:00:5f:30:47:e7:54:
a9:f9:4a:6f:d2:5f:50:f1:18:5a:3d:72:5d:ee:51:ef:da:16:
af:69:04:0c:d0:b2:79:a1:cd:aa:3f:6f:c5:29:b8:ef:27:1f:
14:9d:b4:53:bd:32:92:50:0a:d5:b2:e3:ae:ea:67:f5:65:3d:
32:9e:56:16:0a:fb:4c:d8:7a:1e:0d:12:48:0b:ae:7c:fe:39:
dd:14:2f:32:f9:e1:33:28:ec:f4:53:d8:12:ef:32:7f:86:18:
d5:d0:c5:86:b2:8f:3a:36:ed:b6:cd:17:12:0d:86:19:f4:63:
e8:0a:89:f5:d7:49:07:11:21:23:ce:b2:74:98:23:37:1f:61:
7c:0f:52:8c:9f:47:6c:6a:f6:38:e8:bf:a2:ed:5d:4d:e5:f6:
95:ca:ea:e2:34:a8:46:f0:e6:e4:2e:03:7e:70:c0:2a:d6:8a:
50:dc:d5:f0:27:1b:92:58:bb:f9:e0:0f:83:14:aa:fd:77:6e:
2b:07:4c:e7:4e:17:bc:98:ca:dd:35:1d:de:01:56:d5:12:4a:
82:9c:ac:88:83:68:41:32:4e:cc:1d:1c:52:5c:84:4b:5d:b1:
0a:f1:61:5e:90:5c:9a:c1:70:de:6e:07:65:42:2e:38:42:6c:
17:1b:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:40 2026 by rpki-client