Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: Lvt2BE0Kdt/5SLBH6HrFbHENSNYmwRDXZAhgRcVp/2E=
Subject key identifier: D1:31:A5:CB:49:C1:21:C6:94:B2:35:E1:70:D4:6F:35:FD:AA:95:DF
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019D288486EE1D0047390D48A8A031728BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 1252
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: 1-aPdr6dU1tqNeAkf52shE7slUeA.roa (hash: JbT28NphF+rnovgojUHa7Wc0zaQouxmqw46yItqfG34=)
2: 6w_-NsXCxN2AkytB9MIpqZqIhZs.roa (hash: SahjcRKOhQt6ghlx1MLtNoDHrh5dq7me2wcVsE2YXb4=)
3: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: kPTEywouiDNzR0470ek9tiK16yo5RXdYj7ejuMR7o38=)
4: H44y2zA0tcvx1fXZ0G5OQ43KpBg.roa (hash: f31YyZABOBwtseRnb8FQe6cKm0I2jp/izIHzJ0jLzdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:86:ee:1d:00:47:39:0d:48:a8:a0:31:72:8b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=d131a5cb49c121c694b235e170d46f35fdaa95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:12:c4:43:c3:77:c3:f0:29:76:cd:7b:e0:
9f:54:a2:a1:86:1f:e4:0c:f5:8c:03:4b:2d:d1:5f:
3c:61:fb:c7:07:9f:2c:75:9c:33:e8:5b:cf:69:3a:
31:50:97:e4:a2:a7:62:b3:5d:f7:93:f1:77:b8:d5:
4c:1b:c2:89:36:bb:a4:11:08:b0:b0:81:1b:a2:51:
29:9d:50:2d:0d:49:f2:93:ae:1b:79:74:14:51:12:
19:c2:98:3d:d4:d8:4f:d7:0b:c0:a0:28:29:06:aa:
e5:38:0d:d8:9d:01:70:ab:76:25:a0:68:9c:62:d9:
a6:9b:cf:8b:2d:9c:51:ff:8b:5f:49:f5:19:76:41:
23:0b:be:82:fb:41:1a:c9:87:3b:e2:a5:71:8c:85:
05:03:3c:cd:00:93:88:41:1a:96:14:aa:f5:d3:53:
64:f3:00:85:bd:24:87:52:8a:97:2c:cd:55:55:c9:
d3:46:2e:ab:8b:e0:69:f0:9c:d0:ad:b3:1a:5a:8f:
f7:74:60:b8:b4:29:85:f1:77:72:eb:8b:db:99:92:
1a:8d:40:41:96:d4:03:ad:0e:e9:d7:50:a8:c1:dc:
25:88:be:52:b4:79:00:95:40:09:48:31:b5:18:2d:
25:e9:2b:ec:dc:8f:94:fd:a9:45:6c:c7:63:2e:7b:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:A5:CB:49:C1:21:C6:94:B2:35:E1:70:D4:6F:35:FD:AA:95:DF
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cf:24:42:70:04:1e:3c:f2:65:05:29:dc:89:89:45:b8:02:
c1:78:5c:f7:50:d7:03:17:73:a2:c8:58:e4:9d:3e:57:d1:d7:
42:cc:a0:ec:f9:0a:34:5d:2d:2d:c8:d8:f5:a4:dd:24:02:64:
d7:53:b7:3f:d4:88:47:00:11:da:4d:db:8f:22:c9:db:4b:15:
d6:cf:78:0c:47:31:72:0c:ba:24:6e:9f:e4:e5:bc:32:34:99:
af:ab:48:1b:31:25:1f:80:09:e8:35:91:78:17:c5:a6:ff:ce:
06:77:1a:de:5e:15:0a:b2:b7:95:78:d0:37:ee:e3:80:c9:8c:
84:e8:80:a9:2e:27:51:45:f9:db:3f:b3:40:b2:4a:dc:f7:a3:
a3:7d:ae:05:65:a9:5c:cd:a2:99:06:08:de:2f:68:e1:2d:86:
82:bd:bb:54:9b:9e:60:15:5b:6e:c2:1a:28:1e:5e:9a:5b:15:
59:63:0f:f6:3d:cb:05:81:49:a0:e3:bc:ce:1a:09:9b:73:9b:
60:ea:4b:48:e1:6b:f7:48:10:dd:53:c1:e0:5e:43:ec:cb:42:
03:54:71:cc:b4:5e:1a:9e:60:c1:6b:19:38:d6:12:f0:3b:66:
17:60:99:7a:bb:9e:fb:6e:6f:0a:5d:5a:05:30:7b:1a:3b:0b:
e9:04:08:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIbuHQBHOQ1IqKAxcouwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4
Mjc2YjcwHhcNMjYwMzI2MDUwMTA3WhcNMjYwMzI3MDUwMTA3WjAzMTEwLwYDVQQD
EyhkMTMxYTVjYjQ5YzEyMWM2OTRiMjM1ZTE3MGQ0NmYzNWZkYWE5NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcUSxEPDd8PwKXbNe+CfVKKhhh/k
DPWMA0st0V88YfvHB58sdZwz6FvPaToxUJfkoqdis133k/F3uNVMG8KJNrukEQiw
sIEbolEpnVAtDUnyk64beXQUURIZwpg91NhP1wvAoCgpBqrlOA3YnQFwq3YloGic
Ytmmm8+LLZxR/4tfSfUZdkEjC76C+0EayYc74qVxjIUFAzzNAJOIQRqWFKr101Nk
8wCFvSSHUoqXLM1VVcnTRi6ri+Bp8JzQrbMaWo/3dGC4tCmF8Xdy64vbmZIajUBB
ltQDrQ7p11CowdwliL5StHkAlUAJSDG1GC0l6Svs3I+U/alFbMdjLnt5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNExpctJwSHGlLI14XDUbzX9qpXfMB8GA1UdIwQY
MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt
NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw
LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhs8kQnAE
HjzyZQUp3ImJRbgCwXhc91DXAxdzoshY5J0+V9HXQsyg7PkKNF0tLcjY9aTdJAJk
11O3P9SIRwAR2k3bjyLJ20sV1s94DEcxcgy6JG6f5OW8MjSZr6tIGzElH4AJ6DWR
eBfFpv/OBnca3l4VCrK3lXjQN+7jgMmMhOiAqS4nUUX52z+zQLJK3Pejo32uBWWp
XM2imQYI3i9o4S2Ggr27VJueYBVbbsIaKB5emlsVWWMP9j3LBYFJoOO8zhoJm3Ob
YOpLSOFr90gQ3VPB4F5D7MtCA1RxzLReGp5gwWsZONYS8DtmF2CZerue+25vCl1a
BTB7GjsL6QQIIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:29 2026 by rpki-client