Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: Lc6OSx0h4014/hjNjRWaXqB7UHmdViTpz6BKAfJiaSA=
Subject key identifier: D0:26:21:97:88:D4:60:EA:6E:25:6F:9A:92:BF:C7:AB:E4:16:41:DE
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019D326305914D195C270C9FECC6CA3BF064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 03:00:43 +0000
Manifest this update: Sat 28 Mar 2026 03:00:43 +0000
Manifest next update: Sun 29 Mar 2026 03:00:43 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: /jhVUcjYudv+Ov6jWtATZI0vHU4HRk786y9/z1MQapo=)
2: _wICQn4-i4QzdIbhvMtwO6EwP8c.roa (hash: YrDt1Sh4fa2C8YaTwYl+f2XsqsBE5fk+QKt7Ei8e928=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:05:91:4d:19:5c:27:0c:9f:ec:c6:ca:3b:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Mar 28 03:00:43 2026 GMT
Not After : Mar 29 03:00:43 2026 GMT
Subject: CN=d026219788d460ea6e256f9a92bfc7abe41641de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:29:83:39:f9:30:36:43:d2:2f:ff:5d:57:
70:06:ce:47:05:d3:54:00:8d:c6:e0:7d:2b:b1:07:
e4:1a:76:cd:30:1c:df:b2:16:f6:ee:ae:54:ca:61:
9e:bc:48:35:e6:1e:9f:8f:45:22:84:d7:48:52:07:
3b:52:43:44:f8:a3:9f:cc:16:c2:a8:96:bb:2d:1d:
1a:79:d2:10:d0:ea:e3:45:b0:2d:1f:8c:2d:ef:6e:
d0:61:ee:9f:6e:14:e0:3b:43:4f:bd:86:cf:ea:30:
cf:c4:ce:95:3f:d1:88:a5:8a:24:94:48:13:a0:01:
3d:c0:4d:df:5e:98:2f:d6:20:6d:e8:f2:c5:c2:57:
f8:b1:0a:5a:b3:36:21:ac:7f:02:3f:34:ba:76:a4:
13:15:3f:dd:64:5f:0d:8f:f9:c5:00:b6:b7:d9:6f:
15:c4:2b:13:68:36:1b:ae:d4:49:74:c6:c4:88:26:
84:07:ad:ef:4c:6c:c3:9e:15:38:9b:16:91:c0:c1:
a9:d8:27:45:db:d4:48:4a:96:55:bb:c4:e3:45:94:
91:22:34:db:8f:f6:c9:c2:da:c0:59:69:58:e5:d0:
67:00:65:96:89:3f:5b:a7:18:45:4e:e7:3e:f3:b0:
6f:64:50:e8:25:8b:80:a9:b4:49:df:99:6e:bc:3d:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:21:97:88:D4:60:EA:6E:25:6F:9A:92:BF:C7:AB:E4:16:41:DE
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:1d:cb:96:aa:59:57:0a:b5:77:d4:56:29:20:60:27:e6:
b7:27:57:e6:ee:84:cf:7f:17:08:0b:a5:f8:48:f3:be:15:c3:
e0:cc:3e:34:05:1e:a0:06:0f:f7:8b:76:ca:14:96:cf:a6:01:
e0:70:f4:11:e9:8f:b6:34:0d:4c:c2:38:51:f0:4e:f0:2f:b0:
07:35:3d:bb:b4:93:d4:db:a4:b6:b0:df:00:b9:fe:49:80:4c:
e7:c1:ac:76:95:11:49:20:25:bc:0c:7f:9e:63:83:2b:75:0f:
cc:de:db:e4:dd:91:e9:a3:8d:54:00:0d:02:60:9b:db:c1:6e:
57:be:fa:cf:d1:82:87:52:ca:4d:06:d0:82:c7:db:bc:9e:0b:
52:6e:88:73:82:35:bc:2b:33:23:70:e3:b2:97:4d:91:02:8f:
ff:53:e7:0a:a5:fe:e5:4a:e7:c1:13:f2:79:8e:1b:4c:a5:38:
73:92:9a:eb:a3:70:94:8f:42:4c:33:10:e6:b3:18:2a:0b:2a:
65:d7:0b:bb:24:08:fe:c9:dc:5c:27:b3:80:2d:a1:89:30:1e:
7f:6a:49:d1:bc:2d:16:96:68:ba:b9:d7:8d:98:96:1d:7a:bd:
c6:1a:d7:4c:6f:b3:58:e1:3f:3c:b6:f6:bc:93:90:53:2e:9c:
d0:ad:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:58 2026 by rpki-client