Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
File: NdNdrWLFWYRuok4UUAv-RePXUfI.mft (raw, json)
Hash identifier: we0X3V+IQ3UsUguICJIYW5UdXke+n/sYwlYtTJ1sVjc=
Subject key identifier: 47:CD:F7:C2:61:18:DC:31:24:D3:AD:94:80:43:7D:1E:80:EF:84:8D
Authority key identifier: 35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
Certificate issuer: /CN=35d35dad62c559846ea24e14500bfe45e3d751f2
Certificate serial: 019D3C0B61DEF4C2E7CABE0052F50C0B1217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
Manifest number: 35
Signing time: Mon 30 Mar 2026 00:01:11 +0000
Manifest this update: Mon 30 Mar 2026 00:01:11 +0000
Manifest next update: Tue 31 Mar 2026 00:01:11 +0000
Files and hashes: 1: A52xkOJ3gt9nOlPHcfsZqFwzDK4.roa (hash: 39PbgxontqguJHDp8xB13e5MSDd4oSH9j0HuESC2TAg=)
2: NdNdrWLFWYRuok4UUAv-RePXUfI.crl (hash: qHRdN6yEpOCOcsW2xYyW0Jsg9NKJd9JiKyE4T0Bqs+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:0b:61:de:f4:c2:e7:ca:be:00:52:f5:0c:0b:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d35dad62c559846ea24e14500bfe45e3d751f2
Validity
Not Before: Mar 30 00:01:11 2026 GMT
Not After : Mar 31 00:01:11 2026 GMT
Subject: CN=47cdf7c26118dc3124d3ad9480437d1e80ef848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:46:cc:56:fd:67:8b:84:a8:f1:20:43:06:
35:65:19:5b:6f:8e:75:c1:cd:ed:c0:5e:14:16:cb:
3a:99:36:81:4d:af:30:a4:b8:fd:1a:39:d7:c1:cc:
e5:e0:4e:bc:72:96:e5:46:f4:87:ec:db:85:ed:6e:
73:38:8e:e5:fa:8a:77:65:b6:07:4e:8f:2e:d4:6f:
1f:3f:ec:f5:17:60:54:87:28:fc:01:bf:2c:6c:ad:
65:e4:77:f1:1a:b4:0b:a0:30:97:25:b5:0b:15:c8:
57:8c:ca:9c:00:47:47:b7:3f:05:54:c0:f0:b4:64:
ae:bf:5c:40:92:cf:a7:5a:c1:a6:ae:e0:43:79:46:
5b:5a:7f:ba:b4:60:23:8d:4a:12:ac:6f:9d:8a:14:
93:24:9c:76:9b:15:44:4b:ba:13:46:d7:12:fa:08:
24:07:29:d3:2d:31:ea:c1:98:b9:30:56:14:62:8d:
62:6e:0e:df:c8:7a:34:31:40:57:e7:d1:02:40:ff:
97:8e:6a:02:17:db:83:a1:8d:78:ef:f3:73:e0:12:
c1:a5:52:13:78:e4:56:9a:e7:01:64:0c:e3:9b:cf:
1f:08:bc:31:d9:ac:d1:72:3b:05:d2:7c:8d:c1:1f:
0e:e0:4d:f4:3a:0b:1a:5f:a1:e8:13:38:8c:05:8a:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:F7:C2:61:18:DC:31:24:D3:AD:94:80:43:7D:1E:80:EF:84:8D
X509v3 Authority Key Identifier:
keyid:35:D3:5D:AD:62:C5:59:84:6E:A2:4E:14:50:0B:FE:45:E3:D7:51:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdNdrWLFWYRuok4UUAv-RePXUfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/2e0337-477a-47fb-ad7e-a7fa967b6448/1/NdNdrWLFWYRuok4UUAv-RePXUfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:09:d1:a3:0e:1f:df:45:4d:6e:69:9b:05:b6:36:27:04:
b1:73:94:75:c0:79:5e:02:31:9b:a4:db:e9:7c:72:dc:c7:ce:
34:28:b5:08:84:90:80:93:61:05:a5:7b:82:54:4f:92:91:10:
93:89:8c:ed:ff:ae:10:c5:20:4a:e6:ad:4e:a9:21:be:38:61:
14:66:64:aa:03:c4:46:78:c8:bc:e2:74:9d:d3:f8:1e:df:99:
fe:28:bc:2f:1f:98:5c:c9:ca:50:82:7f:ae:e0:41:55:15:2f:
19:9f:c5:36:a5:bb:07:50:fc:1a:6d:1c:64:63:65:bf:71:11:
a5:23:d1:00:14:2c:71:c9:e4:24:6d:cd:a9:ec:6f:93:e8:24:
94:f8:3c:ce:8a:81:b5:1c:1c:fc:98:20:83:df:be:61:c1:34:
68:d9:76:77:91:f7:74:8e:bb:6f:5a:34:2d:57:b2:10:34:26:
f1:bc:9b:31:ce:69:2d:14:06:81:7f:a2:36:22:c7:5c:03:4d:
9b:c2:9e:04:65:c2:d4:73:ce:72:5e:9d:fd:5f:43:e8:90:cc:
58:d7:cf:e9:ff:40:3a:6a:1d:1f:ea:00:d8:04:58:85:42:27:
9e:b6:13:45:d5:74:23:31:ea:b0:76:13:8f:6f:98:4a:24:76:
f9:35:a6:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ08C2He9MLnyr4AUvUMCxIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDM1ZGFkNjJjNTU5ODQ2ZWEyNGUxNDUwMGJmZTQ1ZTNk
NzUxZjIwHhcNMjYwMzMwMDAwMTExWhcNMjYwMzMxMDAwMTExWjAzMTEwLwYDVQQD
Eyg0N2NkZjdjMjYxMThkYzMxMjRkM2FkOTQ4MDQzN2QxZTgwZWY4NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqdGzFb9Z4uEqPEgQwY1ZRlbb451
wc3twF4UFss6mTaBTa8wpLj9GjnXwczl4E68cpblRvSH7NuF7W5zOI7l+op3ZbYH
To8u1G8fP+z1F2BUhyj8Ab8sbK1l5HfxGrQLoDCXJbULFchXjMqcAEdHtz8FVMDw
tGSuv1xAks+nWsGmruBDeUZbWn+6tGAjjUoSrG+dihSTJJx2mxVES7oTRtcS+ggk
BynTLTHqwZi5MFYUYo1ibg7fyHo0MUBX59ECQP+XjmoCF9uDoY147/Nz4BLBpVIT
eORWmucBZAzjm88fCLwx2azRcjsF0nyNwR8O4E30OgsaX6HoEziMBYoSeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfN98JhGNwxJNOtlIBDfR6A74SNMB8GA1UdIwQY
MBaAFDXTXa1ixVmEbqJOFFAL/kXj11HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmROZHJXTEZXWVJ1b2s0VVVBdi1SZVBYVWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yZTAzMzctNDc3YS00N2ZiLWFkN2Ut
YTdmYTk2N2I2NDQ4LzEvTmROZHJXTEZXWVJ1b2s0VVVBdi1SZVBYVWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yZTAzMzctNDc3YS00N2ZiLWFkN2UtYTdmYTk2N2I2NDQ4
LzEvTmROZHJXTEZXWVJ1b2s0VVVBdi1SZVBYVWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsUJ0aMO
H99FTW5pmwW2NicEsXOUdcB5XgIxm6Tb6Xxy3MfONCi1CISQgJNhBaV7glRPkpEQ
k4mM7f+uEMUgSuatTqkhvjhhFGZkqgPERnjIvOJ0ndP4Ht+Z/ii8Lx+YXMnKUIJ/
ruBBVRUvGZ/FNqW7B1D8Gm0cZGNlv3ERpSPRABQsccnkJG3Nqexvk+gklPg8zoqB
tRwc/Jggg9++YcE0aNl2d5H3dI67b1o0LVeyEDQm8bybMc5pLRQGgX+iNiLHXANN
m8KeBGXC1HPOcl6d/V9D6JDMWNfP6f9AOmodH+oA2ARYhUInnrYTRdV0IzHqsHYT
j2+YSiR2+TWmLg==
-----END CERTIFICATE-----
Generated at Mon Mar 30 08:54:38 2026 by rpki-client