Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: xjdlbzADb1nb+F2Hv4vTP+i1GKOHZE+aXvsbQSzmdqE=
Subject key identifier: E3:6A:71:67:58:78:97:02:DD:C1:24:7C:71:6D:3E:2B:3B:E9:B1:F0
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019FAAF5A99FFD70D0859CFEF4257781B869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1714
Signing time: Tue 28 Jul 2026 23:00:54 +0000
Manifest this update: Tue 28 Jul 2026 23:00:54 +0000
Manifest next update: Wed 29 Jul 2026 23:00:54 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: AbG6N74hOSF2b47XR3vpT+iKtUdtuhBgdfaSeUCSPuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:a9:9f:fd:70:d0:85:9c:fe:f4:25:77:81:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jul 28 23:00:54 2026 GMT
Not After : Jul 29 23:00:54 2026 GMT
Subject: CN=e36a716758789702ddc1247c716d3e2b3be9b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:0d:7c:95:17:0f:b1:ce:2f:1d:7e:46:7c:
af:cd:39:0e:95:0a:d4:35:84:f7:aa:fb:b9:42:c1:
99:f3:c5:f8:d7:50:ed:a9:3d:7b:e5:fe:e5:5d:c8:
a5:f3:58:55:c0:1e:5b:d1:a2:20:d2:d6:f5:f6:4e:
9b:11:c9:39:c0:b6:e9:2d:82:04:f6:b4:e4:7b:12:
3e:7a:cb:a8:80:22:d1:01:4e:e4:83:ae:53:63:e4:
2d:12:61:ec:32:5e:88:50:27:75:21:fc:3c:93:88:
d3:a3:b6:67:ee:7d:b0:90:cc:ac:9f:1b:b3:56:79:
5f:75:7f:f3:a8:0a:58:93:4e:48:64:8a:05:65:44:
53:d9:79:c2:aa:94:dc:43:52:62:d7:49:42:bc:3d:
a8:57:c8:cc:db:d3:99:85:a0:9b:7d:97:1f:9b:f9:
80:67:ab:34:0b:c7:0b:73:53:b3:5f:e4:ac:78:3f:
b6:34:88:75:7d:36:36:fe:f6:5d:f7:88:48:de:96:
e8:b4:86:e4:02:26:5a:8c:9f:76:ef:be:de:a6:91:
8d:f0:34:92:a1:83:dd:ba:f5:f7:3d:8a:5c:80:28:
62:59:4f:45:1c:6e:73:d8:d6:7f:ee:75:cf:9b:78:
f5:a5:32:00:f0:e9:01:3b:5b:10:16:5f:80:52:be:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:71:67:58:78:97:02:DD:C1:24:7C:71:6D:3E:2B:3B:E9:B1:F0
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ad:12:4d:9d:35:86:a8:14:af:1e:a7:b7:80:f5:a3:ef:b5:
d1:79:94:e3:2e:ec:ef:9c:25:26:89:14:e0:84:22:55:45:9b:
d9:ed:d8:54:c6:67:93:1e:22:13:0d:7a:21:49:00:38:98:9b:
fc:1a:dd:1a:73:f0:56:6c:fc:d2:ff:22:a3:48:e9:2c:a4:50:
0b:b5:0a:e2:47:85:8b:3d:3f:e3:c5:b0:59:b3:ba:69:82:0d:
87:c8:a3:07:06:f8:2d:8a:de:e5:d4:7a:40:28:48:55:96:41:
60:1b:26:51:b1:2d:b7:5d:fb:5e:cd:05:df:2d:fa:82:f0:76:
4b:40:5e:6c:65:e1:a2:e9:6c:5b:92:ee:4d:d8:27:58:fb:11:
96:74:da:13:2e:f3:b7:4c:f6:8b:03:b6:c9:3c:3f:d5:65:d2:
6e:b8:fc:ef:0f:59:2c:a2:0d:70:c6:2d:71:02:05:dd:f7:0b:
0e:61:ae:be:08:4b:0a:a7:d5:f1:e8:bb:ef:78:63:b1:c4:dc:
a8:1b:24:fe:da:dc:75:9c:99:d4:11:23:24:4c:b4:23:b5:f3:
69:56:b5:45:0b:1e:c2:b2:f1:7b:c0:8a:62:0c:47:e9:fb:d0:
b1:5a:66:8f:ef:eb:60:3c:6a:b9:6a:c2:6a:ec:59:16:c4:28:
08:b4:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:39:43 2026 by rpki-client