Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: VHkzRFli6298eH5o8Z48xErFtTrv3dYD/LF+0Ah0psM=
Subject key identifier: DE:46:CA:28:27:49:51:FA:70:BB:68:C8:54:24:D3:EB:C1:59:98:95
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01A0DC852D5926EDECCD498B3619FFB2E4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 05DD
Signing time: Sat 26 Sep 2026 07:01:50 +0000
Manifest this update: Sat 26 Sep 2026 07:01:50 +0000
Manifest next update: Sun 27 Sep 2026 07:01:50 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: YjT3PmCoGnxMTQMEljvRwnNAoMwbrlevRSQQk36oCdw=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:2d:59:26:ed:ec:cd:49:8b:36:19:ff:b2:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Sep 26 07:01:50 2026 GMT
Not After : Sep 27 07:01:50 2026 GMT
Subject: CN=de46ca28274951fa70bb68c85424d3ebc1599895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:d5:a8:59:79:ce:db:01:6a:cf:71:ab:a8:
80:77:df:6d:ac:ff:f0:a4:6f:ae:c3:ff:e3:8e:2b:
c8:1a:44:b4:b2:4e:43:0e:77:71:da:3c:36:79:cb:
93:c6:1d:cf:0b:24:f0:82:a6:95:3e:96:93:28:6c:
a4:18:3d:6a:6c:67:ee:55:8d:f5:01:25:e4:7d:ac:
24:f5:a2:14:ff:35:7d:16:ad:f2:a7:24:ee:f9:40:
3d:9c:21:2d:f3:68:23:62:44:7f:80:ba:1c:14:30:
20:a2:55:82:b1:ad:c3:bd:6a:61:98:0e:e2:ba:1c:
0c:cc:f0:f1:fb:b6:8b:8c:af:49:24:62:d9:39:13:
f6:c6:fa:b0:2c:7b:20:2e:d9:9b:36:e0:71:04:3c:
46:68:8c:1c:4f:05:d9:a3:05:97:35:7c:69:08:84:
80:54:91:22:4d:92:5f:57:0c:34:09:1b:e6:44:8b:
78:4c:3e:04:a9:72:fe:81:34:f3:b5:be:99:e5:ea:
05:01:07:6e:ea:7e:50:a5:12:9d:0b:cf:72:ec:d5:
38:e8:5b:a2:77:0e:7a:b7:c3:f0:f9:7f:14:0d:64:
86:b0:ad:79:5f:e4:9b:97:45:2b:bb:bb:ea:b5:b7:
47:72:75:83:66:78:71:98:8c:14:1a:6f:f3:89:2d:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:CA:28:27:49:51:FA:70:BB:68:C8:54:24:D3:EB:C1:59:98:95
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6b:da:b2:04:6d:51:8d:7c:90:cf:bd:a7:86:96:35:73:b4:
47:9a:61:ca:2c:98:60:4a:be:30:96:87:33:0e:59:c5:e9:4e:
61:84:a9:1f:99:09:93:e4:b7:1e:3c:9d:41:b8:7d:69:0f:94:
76:e8:9c:b9:5c:6c:62:f8:33:c4:fc:b3:b4:e6:6d:0c:d6:06:
9c:43:75:0a:4f:65:94:4d:de:d2:ac:a3:f8:10:12:91:9a:f8:
8f:df:12:ee:05:a0:56:db:03:31:1f:14:8c:49:f0:a7:86:ee:
66:b1:de:3e:55:e9:7a:2e:b2:61:5e:9e:31:f5:4d:ea:ec:04:
07:35:05:d4:a1:96:6f:c3:c1:10:17:64:18:c6:7c:59:d8:0e:
5d:a6:86:46:08:02:4f:04:24:f6:2e:62:51:47:0a:b6:37:db:
1b:3e:5c:43:2f:d2:f6:bc:85:62:84:3c:a2:f1:4f:71:f4:c5:
84:92:d4:6d:95:e7:f9:cd:ac:1d:20:ec:cb:a9:db:93:20:09:
f0:51:a1:4f:45:f1:d6:9c:1c:2a:d5:c0:19:dc:d5:09:8d:97:
1f:1e:f0:7f:1e:99:7f:43:9f:50:56:8f:33:1d:0d:5c:d5:2e:
3d:f8:0b:74:04:6d:84:bc:89:cc:19:66:94:ef:09:f2:40:e8:
fe:07:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:03 2026 by rpki-client