Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: vMuUJNeS7n+VmjTGVu2JScsI4TgNR4INZVrxBjB5tYk=
Subject key identifier: 0F:5D:78:CE:78:6F:B9:17:62:65:B9:FB:53:6B:A6:29:9A:08:58:83
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01A0D83C040F7427CBC10FFBDF1D67681228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 17B0
Signing time: Fri 25 Sep 2026 11:03:26 +0000
Manifest this update: Fri 25 Sep 2026 11:03:26 +0000
Manifest next update: Sat 26 Sep 2026 11:03:26 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: leBhnIGZE5oaGUecoFYtoP7qZ48C0F+Peet550qkIGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:04:0f:74:27:cb:c1:0f:fb:df:1d:67:68:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Sep 25 11:03:26 2026 GMT
Not After : Sep 26 11:03:26 2026 GMT
Subject: CN=0f5d78ce786fb9176265b9fb536ba6299a085883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:f6:42:15:c6:35:0d:07:9d:ac:b0:8b:e0:
56:92:56:c4:cd:10:60:7f:9b:a6:6f:9d:c7:e5:e4:
6a:80:66:f0:86:94:32:0b:47:39:92:ce:c6:1b:0f:
83:a9:38:4a:78:c5:7a:ae:07:a9:5e:b2:ce:0a:c8:
27:a9:74:c9:14:1d:aa:a0:28:3c:9c:12:d3:fe:8f:
a8:79:d0:29:97:16:29:c2:91:0c:7e:a8:29:36:e6:
8c:23:fa:c3:b9:f0:8d:83:bd:d6:b9:e5:63:31:26:
04:ec:87:0f:c3:65:c1:f8:65:5f:54:5c:8c:0e:55:
35:16:83:80:26:20:4e:ca:2f:5b:a8:30:27:28:2e:
e2:e3:37:b7:6e:4a:af:a4:0e:5a:7d:5b:be:55:70:
6e:a1:27:dd:75:bf:b3:e0:5c:a5:5b:7d:aa:ec:36:
f7:f2:10:38:51:45:2e:0e:cc:f3:7a:0c:18:03:31:
f9:41:86:6f:f1:59:f2:da:0b:fd:91:b6:fd:45:4e:
22:7b:59:ed:7d:5f:39:fc:6f:0f:40:3f:c6:5a:f2:
02:a5:bf:b3:0b:ad:d4:c0:a6:4f:5b:cf:5e:c7:b6:
d4:64:97:89:f8:8c:a9:7b:36:a2:12:35:c4:cb:94:
f6:db:1b:ab:79:30:09:6b:94:8e:22:5d:02:3f:76:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:78:CE:78:6F:B9:17:62:65:B9:FB:53:6B:A6:29:9A:08:58:83
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:dc:c7:b4:e4:cb:4e:44:82:02:f0:0d:d2:37:8a:2f:51:71:
36:5e:5d:7b:d9:b5:51:12:cd:71:c8:ae:43:76:63:66:46:28:
91:ae:09:47:c5:bf:43:f5:3d:65:7d:a3:d4:bd:e1:2a:66:ab:
3c:56:26:a0:af:70:9c:2b:bf:73:ef:c4:75:81:f7:2f:0b:10:
3a:d6:8f:59:dd:16:23:39:e8:68:1e:9a:81:60:77:a2:3c:71:
7a:86:db:3e:94:db:67:b7:d9:0d:07:ec:97:f0:9b:ee:e1:49:
ce:56:a2:26:f8:52:a2:d6:3b:a6:2c:23:c8:93:a4:12:74:5b:
1c:3f:55:f4:79:ec:d7:68:7b:c4:77:28:9f:ff:bf:45:77:a7:
4a:14:45:ac:dc:6c:cb:5a:8f:14:44:9b:7c:65:73:16:34:f8:
3e:52:5a:12:31:01:7f:7f:ab:73:cb:4c:6a:03:66:68:08:51:
7e:81:b5:c3:e3:6b:6d:3e:a0:34:c2:9f:24:eb:17:a4:3d:9d:
2c:e2:b6:e3:60:a0:9b:2a:ef:f2:e0:87:89:da:bd:e2:15:d3:
5d:a6:5d:69:38:bf:f6:f5:ac:65:66:ee:1b:95:35:97:c5:5a:
04:42:6a:14:7c:19:17:75:b2:91:4b:df:7a:aa:23:b0:8a:55:
7b:d8:0f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPAQPdCfLwQ/73x1naBIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy
OTZjMzUwHhcNMjYwOTI1MTEwMzI2WhcNMjYwOTI2MTEwMzI2WjAzMTEwLwYDVQQD
EygwZjVkNzhjZTc4NmZiOTE3NjI2NWI5ZmI1MzZiYTYyOTlhMDg1ODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn172QhXGNQ0Hnaywi+BWklbEzRBg
f5umb53H5eRqgGbwhpQyC0c5ks7GGw+DqThKeMV6rgepXrLOCsgnqXTJFB2qoCg8
nBLT/o+oedAplxYpwpEMfqgpNuaMI/rDufCNg73WueVjMSYE7IcPw2XB+GVfVFyM
DlU1FoOAJiBOyi9bqDAnKC7i4ze3bkqvpA5afVu+VXBuoSfddb+z4FylW32q7Db3
8hA4UUUuDszzegwYAzH5QYZv8Vny2gv9kbb9RU4ie1ntfV85/G8PQD/GWvICpb+z
C63UwKZPW89ex7bUZJeJ+IypezaiEjXEy5T22xureTAJa5SOIl0CP3Z2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9deM54b7kXYmW5+1NrpimaCFiDMB8GA1UdIwQY
MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt
NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3
LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtzHtOTL
TkSCAvAN0jeKL1FxNl5de9m1URLNcciuQ3ZjZkYoka4JR8W/Q/U9ZX2j1L3hKmar
PFYmoK9wnCu/c+/EdYH3LwsQOtaPWd0WIznoaB6agWB3ojxxeobbPpTbZ7fZDQfs
l/Cb7uFJzlaiJvhSotY7piwjyJOkEnRbHD9V9Hns12h7xHcon/+/RXenShRFrNxs
y1qPFESbfGVzFjT4PlJaEjEBf3+rc8tMagNmaAhRfoG1w+NrbT6gNMKfJOsXpD2d
LOK242Cgmyrv8uCHidq94hXTXaZdaTi/9vWsZWbuG5U1l8VaBEJqFHwZF3WykUvf
eqojsIpVe9gP0g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:26:36 2026 by rpki-client