Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
File: NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft (raw, json)
Hash identifier: MaVSe1MXZd3M+DBF1PHQ4P6qpv0y0yWQ23NkmMElpSM=
Subject key identifier: 8B:78:9A:BE:7E:5B:32:57:AC:E9:D4:D2:90:E4:45:21:B6:20:C8:32
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 019D27E026F0EE3FBF2579C1CBC43A86601A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
Manifest number: 0658
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl (hash: 0aUDDhYF1uzOSSQ8j7nos70UyfYobqYy0+/JcYH4F9M=)
2: V0FXBHF7zd7eoSFLKhrjKxi24vc.roa (hash: Ku0lrgk8w0+7zmhpvQbPryOCwIndLIyVecGBgi9w3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:f0:ee:3f:bf:25:79:c1:cb:c4:3a:86:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=8b789abe7e5b3257ace9d4d290e44521b620c832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:50:cd:17:d6:b2:61:40:16:a2:82:ae:f4:
80:55:59:1a:56:86:37:4b:1f:e1:9e:f5:a9:9f:8f:
46:94:4b:93:3c:2e:9e:a0:e2:ec:af:8d:5e:c1:68:
27:1b:02:e3:7c:d0:f1:31:da:78:37:6a:fa:64:ea:
6d:a7:53:81:7f:cf:92:11:d7:46:1f:bf:94:37:b6:
b1:e3:97:ea:32:f6:31:1c:36:43:f6:6f:68:b7:f8:
1b:bb:ed:65:6f:ad:a6:94:82:c1:43:72:89:91:ac:
19:55:a1:86:62:ad:7a:71:86:da:0a:cc:83:1b:21:
69:b5:04:97:4b:9a:63:d0:34:f0:b2:c6:32:56:43:
89:18:2f:88:dc:05:5d:dd:be:9c:18:60:06:cb:b7:
db:17:72:5d:91:93:9a:41:ab:2b:bd:0b:f8:c8:61:
2f:82:20:0b:01:5d:c3:4e:43:7f:3c:4a:ad:6b:c3:
76:8e:e9:93:79:5c:ba:ed:68:68:b7:7c:c3:aa:0b:
95:89:5f:94:0a:b2:f1:bd:ba:c8:31:c1:72:54:ca:
2f:be:23:4b:db:9a:a3:5c:df:37:90:f4:25:c6:d1:
e7:8d:00:57:b0:a9:dd:9c:c2:06:65:90:88:d1:aa:
30:8c:b2:ae:39:cd:00:59:2b:2a:79:65:9c:1f:db:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:9A:BE:7E:5B:32:57:AC:E9:D4:D2:90:E4:45:21:B6:20:C8:32
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6e:54:27:9d:e8:db:8b:b6:a2:4e:5a:e7:69:55:71:6b:72:
ae:18:11:28:7a:2c:aa:45:df:33:c1:a6:74:63:57:e5:79:26:
c8:43:55:e6:44:b0:a1:14:5a:ea:de:ba:d5:48:27:fe:38:83:
87:b3:e0:93:15:6b:be:c9:33:07:66:81:4e:47:3f:84:83:2d:
d5:67:0a:2d:de:86:ec:a0:35:0a:ea:b7:b0:41:57:30:29:4c:
e0:0d:39:ab:5f:6b:5c:80:49:a8:b6:9f:94:7d:a5:57:8d:0f:
bc:ca:a3:78:f3:68:bf:d6:37:2c:67:67:eb:b5:05:01:f8:8e:
aa:cc:f2:10:42:d1:7a:4c:90:bd:a5:a9:4f:e6:79:51:d9:e1:
b7:f1:c6:1d:fd:a0:86:5c:f6:7c:fc:e1:80:b3:6f:82:8a:7e:
4a:91:6e:79:fb:e5:fe:c8:e4:a0:71:3b:93:cf:57:59:23:f6:
4d:5f:f2:f1:3e:fb:1a:33:dd:99:b7:5c:f4:08:bb:16:67:93:
c8:3d:59:89:4b:91:6c:10:b4:27:b0:a9:c5:5b:11:9a:1a:7f:
4a:3f:d4:0f:64:6a:b4:1c:02:f8:03:16:e2:c4:bf:2a:b0:7b:
d3:ca:73:6e:96:ef:ee:41:12:97:bd:ca:11:cb:50:30:0b:7d:
98:df:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:10 2026 by rpki-client