Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: HhXodOAJgWXbDMcLYCkV9NCI77McgXMdfq62r4n8OFs=
Subject key identifier: 35:DD:78:E5:D3:7C:C2:0B:BF:57:BA:E9:EF:4E:4C:CB:E0:39:68:C6
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019D29295ACE0F5E4891B1E996700E3AD6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 08:01:09 +0000
Manifest this update: Thu 26 Mar 2026 08:01:09 +0000
Manifest next update: Fri 27 Mar 2026 08:01:09 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: VnRdLkNCMuH5NvzW3x6tTGNmu+/Jz6vb7Cpcf0BC13g=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5a:ce:0f:5e:48:91:b1:e9:96:70:0e:3a:d6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Mar 26 08:01:09 2026 GMT
Not After : Mar 27 08:01:09 2026 GMT
Subject: CN=35dd78e5d37cc20bbf57bae9ef4e4ccbe03968c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:59:aa:83:b0:39:2f:6f:ba:8e:2c:36:61:
64:de:19:5e:71:65:bd:49:43:d2:53:86:bd:26:1e:
93:db:ed:2b:54:28:45:6b:48:d8:be:e7:f2:ab:b0:
72:7b:39:3b:1e:db:a7:e7:33:f6:3a:29:05:95:b9:
b3:79:4b:22:8e:34:77:36:49:36:2c:19:22:64:4a:
77:06:13:e3:c4:57:a7:f5:41:fd:c8:0f:d4:32:28:
cd:6b:5a:70:27:9b:81:8e:4c:b0:6d:0f:c4:3c:b3:
11:99:ff:dc:cc:71:48:6d:37:39:ae:cb:d4:7d:19:
61:2e:71:e2:72:d4:ff:3e:f5:9f:dc:48:c6:b8:96:
99:b0:8c:0e:22:ad:2e:43:6f:1a:fa:f1:03:aa:28:
49:55:c2:9b:d7:e3:3b:02:6e:5a:b6:d3:04:ef:49:
d9:df:d3:00:5f:86:8f:4e:6a:db:64:97:ec:1b:4f:
78:a6:2b:20:7b:68:eb:ab:50:3d:e3:d6:36:33:3b:
d3:d2:7b:ba:e4:bb:6c:a9:55:53:5f:ce:b5:84:1e:
a2:7e:dc:71:4c:fb:51:f9:bc:f8:cf:a0:92:23:08:
30:26:a5:9e:cb:70:7a:94:14:a5:a7:b3:aa:c1:b8:
4a:42:cc:03:9e:b0:98:78:49:3b:d4:39:a6:05:80:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:78:E5:D3:7C:C2:0B:BF:57:BA:E9:EF:4E:4C:CB:E0:39:68:C6
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b3:8a:fe:0b:2b:81:5a:e2:56:0c:88:cf:d4:af:8b:18:63:
8a:66:88:d5:83:3a:f8:e8:b3:f5:a9:52:b0:83:33:50:8e:8c:
7b:97:94:ee:46:c2:b7:12:4b:d4:24:20:2a:f7:11:45:29:ba:
96:08:e0:63:62:9e:98:2e:5c:dc:ca:88:e6:a3:3e:c3:4d:43:
13:88:e5:6c:fd:a6:4e:c1:72:14:b4:0c:4e:f3:3f:32:65:3d:
fb:96:8d:6c:b2:a6:7a:ca:e5:76:cd:59:31:30:2e:80:80:ec:
24:c1:ec:21:bb:a2:09:ef:6a:f1:5a:61:9f:53:cd:59:37:09:
af:66:ac:cb:ca:09:5e:cb:bd:12:e8:96:05:a5:ab:65:8b:33:
01:5b:ff:41:1b:9b:98:27:75:f0:9b:c9:b7:92:73:b9:0b:ca:
59:58:6e:03:7e:96:db:73:f7:fe:36:c6:cb:b9:55:0b:b5:90:
4c:0d:06:b1:fa:e1:2f:50:47:4a:0b:e5:0d:a7:55:05:3f:be:
dc:af:1d:74:b8:68:7c:c8:13:4b:90:bb:f9:86:7a:a1:e9:fc:
5d:70:e7:26:5d:80:f3:b1:2c:0b:87:19:db:59:37:f5:d7:63:
35:35:85:c4:80:75:e0:fe:66:2d:31:29:e6:7d:8d:ab:c6:c9:
08:fb:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:37 2026 by rpki-client