Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: S1VdoS0atgkB7szvVND67P0hclZQl833e96CtiZQI6A=
Subject key identifier: BB:2A:4D:D0:52:68:FE:8A:9D:69:F9:F4:31:63:14:91:BC:1B:82:15
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019E1ED9EB85A4D1F2D0D69FB44FB7E0B82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1835
Signing time: Wed 13 May 2026 01:00:58 +0000
Manifest this update: Wed 13 May 2026 01:00:58 +0000
Manifest next update: Thu 14 May 2026 01:00:58 +0000
Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=)
2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=)
3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: zHWdbLt1rAiNg9rKs2nxNqTmwTmyiXk/gbJtGch0yKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:eb:85:a4:d1:f2:d0:d6:9f:b4:4f:b7:e0:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: May 13 01:00:58 2026 GMT
Not After : May 14 01:00:58 2026 GMT
Subject: CN=bb2a4dd05268fe8a9d69f9f431631491bc1b8215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:b4:6a:4f:1d:e5:f0:02:e3:e3:4e:d5:f9:
69:c2:5d:e3:e3:c2:28:d8:d0:71:ce:56:39:13:6c:
56:ec:45:65:a8:72:a5:0e:23:de:75:74:c2:36:82:
29:af:4f:c0:22:aa:2c:0b:fb:f3:79:3b:0a:0e:e3:
cd:16:87:52:19:b2:a7:a5:da:fa:01:1d:43:fc:49:
e2:bc:ca:00:53:fe:a2:c1:f9:86:5b:9a:33:c8:c0:
2e:e0:18:b4:ec:89:18:60:d3:ad:8d:9e:8c:65:54:
72:cf:b7:82:9a:a1:52:a6:07:80:62:c8:00:c0:a0:
65:d2:34:ca:cc:7d:0e:dc:46:48:e1:ee:fc:8e:c1:
d7:1d:10:1b:32:f4:71:1e:11:92:17:e5:b6:02:1f:
ee:aa:c7:4d:cc:8b:fc:8a:33:06:4b:2f:dc:a1:e3:
78:cd:08:b5:7b:d1:61:03:c2:68:25:54:55:0e:a3:
6f:e1:98:ad:50:8f:da:cc:f9:23:b3:af:90:1c:99:
9c:f6:6a:13:b8:6d:50:7c:f1:59:b7:a2:d3:7b:00:
c0:3a:7d:92:4a:f3:79:d4:fd:15:5b:8b:c5:a7:de:
b3:3d:76:40:fa:94:27:03:5c:07:17:53:94:65:e5:
52:26:e6:fb:52:29:f1:81:ce:f9:e4:32:09:2e:0c:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:4D:D0:52:68:FE:8A:9D:69:F9:F4:31:63:14:91:BC:1B:82:15
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:25:50:d4:dd:aa:57:9b:09:c0:65:e4:aa:c0:b0:36:3e:21:
b7:ac:26:06:0c:df:da:13:5c:6d:1b:3f:41:b9:5c:81:2d:d3:
da:6b:21:83:88:3b:c2:71:44:ce:22:61:e2:ff:d1:76:62:f8:
11:79:a9:fe:9a:01:bf:1d:79:fb:08:26:9a:56:6c:13:e9:da:
c6:cd:f2:31:bf:2a:12:5c:67:07:6e:a9:aa:ca:5e:41:79:f7:
eb:23:ff:68:da:a3:6f:1a:38:e4:ef:1a:eb:dc:1d:f9:44:57:
6f:b6:bf:65:fa:30:91:50:b9:a2:c9:a4:4e:78:20:63:e7:bb:
7e:a0:58:68:a3:ab:a3:8e:ac:f6:ad:44:ef:5b:a3:7b:0e:d3:
0f:02:d4:af:36:f4:db:43:b0:79:f5:df:5c:75:31:df:dd:d0:
0a:68:61:68:87:c0:6d:72:79:72:50:70:9e:0f:24:dc:08:02:
91:8a:0d:42:d4:5e:97:a0:36:ff:40:e4:13:d9:79:b8:20:25:
e0:47:93:07:96:a1:62:2d:4e:64:07:34:47:4c:b2:e7:69:bf:
c9:9f:ee:d0:cf:65:a2:69:2d:ad:4a:f0:45:a9:19:69:e6:f5:
6b:03:64:31:1e:ec:90:6c:b9:35:f1:f2:4c:ff:ec:ff:60:1c:
8e:93:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:34 2026 by rpki-client