Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: moNljiDk4OWr5EnLNZsBqB+H+jg5MYRJg4oixTAq+rc=
Subject key identifier: E6:CC:D3:F1:B1:51:3F:A5:91:C1:71:44:1B:6D:96:17:D7:A1:A3:05
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019D9BBE1D4D86C5257F6B458562A8DE6FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1603
Signing time: Fri 17 Apr 2026 14:00:20 +0000
Manifest this update: Fri 17 Apr 2026 14:00:20 +0000
Manifest next update: Sat 18 Apr 2026 14:00:20 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: TXOmVdqkNAkbqjwKYDo3brt43Jxg+2ZfUlVlul3gujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:1d:4d:86:c5:25:7f:6b:45:85:62:a8:de:6f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Apr 17 14:00:20 2026 GMT
Not After : Apr 18 14:00:20 2026 GMT
Subject: CN=e6ccd3f1b1513fa591c171441b6d9617d7a1a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:2c:49:a2:ed:1c:c1:17:22:02:39:c0:90:
ce:8e:ee:6c:ac:5d:f0:c9:ef:2e:e4:cd:bc:66:96:
0b:36:c6:ef:81:45:f8:09:8c:af:5a:2a:34:1c:a5:
34:14:f6:de:2f:86:b3:8a:5b:8a:ed:44:68:49:49:
09:56:ea:81:0f:39:0f:cd:7c:cf:a6:84:9d:3d:d7:
84:cd:0d:92:92:09:22:9a:2d:8d:fc:e3:f8:1a:a7:
86:47:fb:16:d7:32:e9:57:f1:2a:bd:47:2d:e8:fd:
35:1b:96:b5:b9:1d:0c:28:79:cd:da:d0:a2:2e:1c:
44:29:17:eb:54:f2:e3:c6:52:15:9b:f7:6c:b9:51:
d7:67:86:5c:c1:72:fb:6d:3c:7a:7a:2d:87:8d:29:
47:95:26:cc:2d:f5:0c:77:4e:90:63:3e:df:a1:9f:
3d:d4:de:11:2c:a1:87:b7:41:04:74:23:97:10:b1:
bb:85:ae:ca:e5:74:57:ed:c9:b1:41:f1:9e:67:5c:
b0:31:64:25:fb:1c:7d:d4:ad:e8:44:cd:f9:ad:59:
59:dc:22:7e:f0:0c:3a:84:3b:24:01:09:e6:ea:33:
9e:45:ee:89:f8:82:3d:2b:02:96:0a:7e:93:33:bc:
e5:57:8a:d1:73:58:f1:7f:ac:ee:d0:4b:1e:37:90:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CC:D3:F1:B1:51:3F:A5:91:C1:71:44:1B:6D:96:17:D7:A1:A3:05
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:0b:39:ce:e8:9f:73:70:3f:fb:c3:e1:e5:97:3c:ad:d0:
30:91:32:17:c6:5b:fa:a4:e2:75:d0:70:e5:62:c2:ee:3a:d9:
88:af:1e:92:7f:49:fd:67:ce:b1:7a:8c:f7:e2:81:31:a4:a4:
ee:18:9e:4e:07:54:e7:65:af:e1:1d:77:f9:1c:2b:ed:b5:c4:
71:65:94:df:e5:e6:a9:7f:5c:0e:cb:6e:a7:03:25:19:21:20:
c3:c3:17:75:05:ec:03:77:32:49:dc:66:72:5a:d1:16:22:96:
8d:df:09:fc:80:ba:8d:e7:ab:d4:a0:2c:91:98:a2:30:06:c2:
bb:0e:b4:eb:0b:0e:28:01:24:90:53:7a:02:3b:da:63:19:b1:
d4:ae:8f:50:47:d3:35:d5:0f:da:c6:a1:81:c7:fa:50:3d:45:
de:a0:4b:4c:47:b5:8d:00:b2:96:6a:f0:31:eb:03:ab:6d:bb:
26:78:13:b5:47:c8:91:02:37:75:e8:e8:f5:56:30:eb:3c:2d:
d7:34:3a:ce:65:b4:29:30:54:5a:74:e1:30:20:c4:2a:89:3f:
40:76:a3:5d:b4:73:06:13:4a:f7:19:e7:6c:9e:08:1a:01:6a:
da:11:9d:95:85:03:ab:4b:c4:3c:5b:5d:93:1d:04:1e:77:8a:
e2:8b:ed:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvh1NhsUlf2tFhWKo3m/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy
OTZjMzUwHhcNMjYwNDE3MTQwMDIwWhcNMjYwNDE4MTQwMDIwWjAzMTEwLwYDVQQD
EyhlNmNjZDNmMWIxNTEzZmE1OTFjMTcxNDQxYjZkOTYxN2Q3YTFhMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzcsSaLtHMEXIgI5wJDOju5srF3w
ye8u5M28ZpYLNsbvgUX4CYyvWio0HKU0FPbeL4aziluK7URoSUkJVuqBDzkPzXzP
poSdPdeEzQ2Skgkimi2N/OP4GqeGR/sW1zLpV/EqvUct6P01G5a1uR0MKHnN2tCi
LhxEKRfrVPLjxlIVm/dsuVHXZ4ZcwXL7bTx6ei2HjSlHlSbMLfUMd06QYz7foZ89
1N4RLKGHt0EEdCOXELG7ha7K5XRX7cmxQfGeZ1ywMWQl+xx91K3oRM35rVlZ3CJ+
8Aw6hDskAQnm6jOeRe6J+II9KwKWCn6TM7zlV4rRc1jxf6zu0EseN5AL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObM0/GxUT+lkcFxRBttlhfXoaMFMB8GA1UdIwQY
MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt
NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3
LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2sLOc7o
n3NwP/vD4eWXPK3QMJEyF8Zb+qTiddBw5WLC7jrZiK8ekn9J/WfOsXqM9+KBMaSk
7hieTgdU52Wv4R13+Rwr7bXEcWWU3+XmqX9cDstupwMlGSEgw8MXdQXsA3cySdxm
clrRFiKWjd8J/IC6jeer1KAskZiiMAbCuw606wsOKAEkkFN6AjvaYxmx1K6PUEfT
NdUP2sahgcf6UD1F3qBLTEe1jQCylmrwMesDq227JngTtUfIkQI3dejo9VYw6zwt
1zQ6zmW0KTBUWnThMCDEKok/QHajXbRzBhNK9xnnbJ4IGgFq2hGdlYUDq0vEPFtd
kx0EHneK4ovtcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:59 2026 by rpki-client