Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: g7y1RpxyC5QooO4j6zebUy4/6KMN6Sm1b962UDT7VA4=
Subject key identifier: 61:C5:F6:55:96:A0:BB:2B:2C:03:01:DF:05:11:48:23:3D:8F:BB:AE
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 019D2771E3DC00CF9221A38D6F6397DF0996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 1846
Signing time: Thu 26 Mar 2026 00:01:08 +0000
Manifest this update: Thu 26 Mar 2026 00:01:08 +0000
Manifest next update: Fri 27 Mar 2026 00:01:08 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: iR5FoZ6ibl+VfxY+GvgFZ013vhmD9USzS5+wkLIcrEg=)
2: YgtG-eXPQuYp4oVS-PRtPNrxxe4.roa (hash: RWCfa29kamid4Jj9pOqOGZ7EXsOuYoZh2w0x+4VeWGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e3:dc:00:cf:92:21:a3:8d:6f:63:97:df:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Mar 26 00:01:08 2026 GMT
Not After : Mar 27 00:01:08 2026 GMT
Subject: CN=61c5f65596a0bb2b2c0301df051148233d8fbbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:4d:1f:59:6f:02:3e:c4:ee:e1:2e:8b:30:
7d:14:0a:15:eb:48:ed:e6:38:97:c5:b0:26:55:73:
72:ef:b0:f7:99:e7:eb:d3:5b:84:50:f5:c7:50:3c:
04:95:1d:d7:c2:34:d4:e2:83:5e:43:f2:ee:9e:8d:
06:da:66:68:86:10:fa:67:cd:90:6e:3b:20:4f:86:
b8:93:5a:47:33:39:04:55:b6:5f:66:f4:28:c4:4c:
b6:d8:b9:33:97:2e:9c:b0:26:4a:79:49:08:4c:60:
2e:f6:09:b0:63:02:10:17:e9:51:df:4d:94:c0:0e:
67:22:57:db:32:b8:09:57:44:be:e2:96:4c:f3:b0:
70:38:5d:72:55:af:dc:74:ba:9c:1d:72:ec:7e:c5:
61:6e:dc:e7:24:07:65:e6:60:4e:ef:13:4d:26:54:
c0:40:3f:b3:45:c0:18:c4:0f:8e:6b:11:d0:ad:d9:
91:31:31:96:08:c6:f4:e9:59:39:be:99:c3:c4:f4:
e7:87:6d:9d:1e:d7:a2:ce:18:4f:48:af:c4:77:64:
46:0f:3c:da:ac:f6:d7:57:bf:0a:07:75:ce:1a:a2:
6d:62:7d:81:cd:a8:c8:85:28:ba:38:63:62:4f:ea:
9d:fb:04:60:d2:69:1f:9d:63:3e:cc:7f:21:09:25:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:F6:55:96:A0:BB:2B:2C:03:01:DF:05:11:48:23:3D:8F:BB:AE
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:35:92:cc:0a:49:1f:b0:81:11:ee:bb:d2:2c:79:4b:e1:16:
b3:16:bb:86:3c:63:4d:a2:6d:0a:ed:df:8b:47:99:5a:4d:f2:
23:8f:7c:8a:1f:04:87:44:58:41:d5:1e:a5:d4:fd:45:ff:9e:
27:1e:db:21:01:8f:9a:a0:07:ef:93:cc:3e:4e:94:ec:81:af:
88:f1:6a:f2:52:88:b1:e8:2d:e4:81:ce:75:10:59:9b:1f:d9:
a0:7b:b1:a6:dd:52:05:0d:a3:bb:59:19:fc:ce:8b:c2:13:c8:
45:18:e4:7a:4a:28:fc:0f:0a:8c:4e:3a:69:08:6f:de:53:4f:
52:0b:e3:e4:3f:cd:c8:e9:94:63:7b:5a:c0:e9:fc:7c:2b:13:
55:bf:54:a2:f0:56:d7:4d:39:46:a9:73:ea:77:5d:aa:68:98:
c8:f6:9b:4c:7d:a1:74:ee:26:0e:61:4b:1b:18:93:6b:42:37:
14:ca:8d:6a:53:bc:f3:39:6e:19:0b:6c:88:c3:7a:ce:8c:54:
f1:44:7c:44:35:31:7d:33:93:49:f6:1e:7d:61:14:d2:62:af:
9e:4e:1a:7d:30:9e:8c:02:32:4b:cb:20:66:81:c5:f8:cc:23:
05:ef:62:99:bc:5a:31:98:12:0c:63:5b:d0:35:4a:80:99:51:
33:9b:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:43 2026 by rpki-client