Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: 1fkDJtffvO8ETw6Vbj2V0NNslO93UA3k2cCN5DyzX7g=
Subject key identifier: 81:4B:70:10:CE:9B:80:5B:A8:47:E0:F9:2A:00:13:67:82:95:65:A0
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019E1D598D7AC308FFD0C9B01428F78C85FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0755
Signing time: Tue 12 May 2026 18:01:08 +0000
Manifest this update: Tue 12 May 2026 18:01:08 +0000
Manifest next update: Wed 13 May 2026 18:01:08 +0000
Files and hashes: 1: BReOo98IY0bkc4Zd1ThUM5GPXeI.roa (hash: UddnfSjHvfzz7O5p2bOPPSYGFo2s16YIBkdTNHh1wSw=)
2: E2fwjMX7q6ipgL4_me8vcu5Mdtw.asa (hash: RcZqouMArE4Yz4qB4/AtaCjFA/VWKl6qqyfw3lzeynU=)
3: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: JTn0dSwI4YSJRL1M+5lM5RGwd7kyMs6qK+mafp6jsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:8d:7a:c3:08:ff:d0:c9:b0:14:28:f7:8c:85:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: May 12 18:01:08 2026 GMT
Not After : May 13 18:01:08 2026 GMT
Subject: CN=814b7010ce9b805ba847e0f92a001367829565a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:46:62:64:23:65:dd:13:86:5e:b1:46:49:
46:d7:b2:3b:39:16:07:67:99:6c:d9:77:25:ac:eb:
1f:e8:ea:64:4b:b4:34:39:07:35:e7:62:62:8f:92:
27:07:49:07:b4:18:7a:54:44:2b:f2:4b:13:17:1c:
6e:e1:af:00:76:75:25:19:1a:db:c3:05:76:1c:24:
5d:19:f6:75:26:74:92:3c:f2:f8:8e:a2:c8:c3:a8:
ae:7f:0e:9c:be:3e:df:a5:1c:ba:f7:fc:2f:5f:ae:
a8:e0:92:86:53:87:b9:5b:c8:89:ad:b8:6c:ec:ea:
28:6b:c8:30:94:df:89:d3:7c:39:56:2a:1c:b2:f9:
23:71:c6:34:5b:59:4b:a6:04:de:05:1c:f2:ab:79:
7f:3a:33:b3:c9:df:41:c8:1b:48:67:40:53:02:14:
c5:db:ca:77:a6:0c:c6:31:b6:97:5d:f7:5f:16:76:
9d:3c:80:7d:39:bc:20:8a:54:79:76:bb:a8:73:99:
e7:36:56:68:b2:9b:d1:38:f9:f5:bf:1e:64:8b:34:
18:6c:5e:ce:ee:f8:40:f0:c6:31:26:23:1a:b9:79:
46:7a:ff:a9:29:cf:70:22:eb:14:30:89:c5:bb:20:
e8:71:b5:ca:21:9e:41:08:3c:4a:cb:f4:dc:70:10:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4B:70:10:CE:9B:80:5B:A8:47:E0:F9:2A:00:13:67:82:95:65:A0
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:62:ed:dc:dd:03:45:82:e6:4d:ec:f1:8a:ce:2e:a1:8e:27:
58:cc:c7:1d:d1:94:5a:5e:d0:f4:01:2b:5c:cf:b8:ac:95:c4:
23:91:10:4e:c9:5e:9a:4f:26:35:6a:b2:82:38:ff:94:a3:7b:
02:05:b1:60:b8:d0:a7:b4:cd:b0:20:fc:5c:d6:bc:db:ab:2a:
a8:86:7c:80:82:5d:70:c8:b8:7c:e2:4b:55:76:25:bc:5b:eb:
ee:19:9c:9e:09:8d:0b:f9:48:cd:99:eb:75:8b:06:93:37:6c:
9d:15:dc:ab:d7:73:91:df:41:fd:1d:93:5e:41:b3:b0:3b:f5:
a0:2c:a6:26:0e:cc:b7:90:01:50:cc:0b:1c:ef:87:fa:58:3b:
79:7b:36:d1:98:1a:ce:df:53:82:08:b4:e2:aa:b8:05:77:d7:
0c:38:e6:b4:59:49:da:60:e2:f5:25:5a:a0:ea:4e:36:26:8c:
4a:ad:89:1b:d6:0d:c1:f7:7d:f8:8b:96:18:a8:8d:42:e7:bf:
1c:3a:7d:59:a3:1e:e1:42:38:d2:83:b7:4e:ff:c8:f4:de:57:
3f:b6:1f:49:4c:50:4f:8d:10:d8:19:a4:a2:78:55:03:d7:7e:
c0:2a:e6:7e:3c:80:8f:0a:f3:45:bc:23:18:50:21:ae:4b:d8:
27:e2:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:16 2026 by rpki-client