Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: K5rCP00bNE6cyNcZf6q3VMwM8Yc7TZvngDk/pVuwCbY=
Subject key identifier: E7:D4:E3:6E:E9:ED:14:86:93:DC:30:4B:22:53:EB:64:3F:BC:98:FE
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019D2627F6ADA9DFAC6FD176F7BA56FC4CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 06D5
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: 4ludKGALaP6mIcKS/X78fkBqyFF7lcoJ4gMLkqQDeE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f6:ad:a9:df:ac:6f:d1:76:f7:ba:56:fc:4c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=e7d4e36ee9ed148693dc304b2253eb643fbc98fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:2e:81:27:d9:08:6c:1f:e2:b6:0d:79:4b:
06:46:97:73:f6:48:f7:04:71:f6:35:79:73:a3:0a:
3c:fe:26:66:d0:d3:39:fc:8c:de:b9:c5:23:17:52:
86:c5:bc:08:56:16:71:1d:98:07:5f:1e:93:a3:f2:
d0:32:b6:de:4e:b6:9b:de:91:95:3a:9e:cc:24:11:
82:1f:e3:5c:d3:a0:ee:4d:9f:45:aa:a7:f7:5e:e7:
f4:54:82:2b:12:20:ab:b7:76:b5:cd:d3:0f:02:af:
20:31:50:c6:8a:cd:05:4b:8f:e9:99:7f:e0:6b:90:
91:0d:2f:28:b9:59:50:3d:e9:c1:49:c0:bf:aa:c7:
d8:d5:54:28:99:8b:4a:6d:72:00:83:f6:74:13:77:
13:fb:15:4b:9d:94:91:ab:6f:fe:cf:6c:cc:17:e0:
64:f5:90:4c:60:cc:fe:bd:85:fb:74:30:d4:fa:20:
64:a2:82:df:c6:bd:3c:71:bf:a9:66:aa:83:93:7f:
67:32:0a:dd:dc:39:35:ea:c7:af:76:7d:5f:c1:a5:
8e:7d:6b:a0:15:2c:f5:50:44:c4:f8:43:6c:54:3f:
34:a4:b8:2d:2a:b7:1e:4b:94:d9:c9:a6:b2:00:12:
4f:ff:94:63:f2:67:a8:8b:ee:05:eb:63:6c:18:73:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:E3:6E:E9:ED:14:86:93:DC:30:4B:22:53:EB:64:3F:BC:98:FE
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:e5:5c:05:ab:79:61:b1:5e:72:b1:76:fd:3d:6b:e3:2f:
2c:fe:5a:77:f9:db:5d:00:b0:63:e4:9b:5b:d9:5c:97:31:20:
63:3e:65:e1:f5:17:a2:47:e9:03:ad:2b:08:32:dc:a5:3a:a7:
57:ef:ff:83:a7:4d:69:13:96:c5:d5:94:6e:9f:1e:33:40:5a:
cd:68:f2:57:b9:9a:85:cf:cd:dd:e6:82:db:c9:a9:49:f9:0d:
f4:93:b2:29:37:bd:fc:2a:ca:97:cf:08:c0:d2:3b:68:de:8f:
4f:82:d7:e8:82:a0:69:d5:58:f1:5d:f6:9b:68:9a:aa:29:1e:
a6:d4:fe:d8:e2:ad:ee:3d:a3:26:42:7c:83:0b:40:41:f4:b9:
2c:5c:1f:47:27:6d:55:22:53:bc:f4:2d:9e:f6:ef:f5:e4:f8:
bb:b0:55:a0:7e:3e:5e:ba:15:10:5a:d9:61:2c:47:13:15:9b:
75:a7:f8:8e:4e:ad:33:38:10:21:52:cb:1a:62:a4:14:93:d7:
d5:4c:a9:5f:29:f8:09:b9:02:51:b5:83:b7:cd:dc:b2:69:47:
2e:a3:83:d5:50:b0:d0:01:8f:c6:d4:9f:92:71:de:3e:6b:77:
b8:99:99:2b:b1:96:a7:98:57:5e:80:0f:c6:8b:52:17:d8:11:
2d:9c:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:55 2026 by rpki-client