Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: bI6Hx5hhtos6atWIxeirQ+UiBXON3SxChqrtO7pRYjQ=
Subject key identifier: 97:B9:20:EA:3B:2B:C0:CD:21:4B:74:A3:52:AA:30:16:4A:EE:65:AA
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 01A0D3F0937D06852C3A5CBB2DB7B658E4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 15:02:33 +0000
Manifest this update: Thu 24 Sep 2026 15:02:33 +0000
Manifest next update: Fri 25 Sep 2026 15:02:33 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: Yar9cBZC9aZTkheLbCGXAfTvQb0Im75F7NxOJPOyhPE=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:93:7d:06:85:2c:3a:5c:bb:2d:b7:b6:58:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Sep 24 15:02:33 2026 GMT
Not After : Sep 25 15:02:33 2026 GMT
Subject: CN=97b920ea3b2bc0cd214b74a352aa30164aee65aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:2d:c9:31:bf:dc:c0:31:9b:3a:98:6d:47:
b3:46:a1:e6:e3:ae:b8:7f:31:cb:bc:ac:35:f1:0c:
0f:65:57:02:be:f1:82:b9:4e:87:bd:41:0a:81:26:
b9:23:82:2f:a1:d8:7a:f2:30:7b:a6:aa:63:e0:66:
31:79:a5:0d:50:57:ec:af:7b:4c:b4:80:ad:96:85:
08:8c:c9:bd:dc:9b:47:d2:57:6d:8b:a5:e6:a5:43:
e2:9e:04:23:db:76:e1:50:17:ed:73:e1:a3:26:fd:
0b:df:57:c3:51:d0:32:c5:f2:5b:92:f8:ef:4f:fd:
35:3d:1b:06:83:1c:ff:e6:26:30:1b:3a:2b:41:7b:
6c:b2:15:97:f9:61:c5:60:bb:63:d5:52:2a:16:d2:
e3:80:24:22:bd:98:78:e5:d4:cd:f3:89:bd:74:a9:
0f:3a:9c:63:63:2a:81:ad:70:e2:0c:91:44:63:c3:
48:c9:e3:18:61:55:59:03:db:c0:39:69:d6:2c:ed:
60:6e:cd:ff:c3:8c:69:df:7b:7e:e9:4f:27:be:7d:
47:36:61:99:18:b6:b4:de:0e:c8:38:b8:88:ec:d0:
a7:39:02:8c:d2:1e:75:07:75:8f:59:94:55:55:ec:
8b:68:04:7e:9c:de:5d:77:d2:39:8f:4c:ad:fb:ae:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:20:EA:3B:2B:C0:CD:21:4B:74:A3:52:AA:30:16:4A:EE:65:AA
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d8:76:b5:49:c8:09:e1:1b:66:83:af:a4:21:0d:f7:ec:7b:
ac:fb:9e:fb:a2:78:b2:a0:66:e8:d5:1e:1f:45:fe:33:a9:2b:
d0:2e:9b:74:c7:0b:e5:84:36:86:07:64:6f:05:f1:af:7f:d1:
0d:e2:f3:c4:6e:2a:c1:03:ce:56:98:d6:df:a9:82:84:6e:c5:
25:db:31:45:dd:42:89:cb:13:11:12:fe:3a:3c:81:3a:12:4e:
5a:f9:e2:a2:84:46:55:55:a8:df:22:59:c7:06:0a:c2:b4:00:
39:dc:aa:87:ae:85:fa:e1:e6:f3:a3:0a:b4:ba:51:46:fb:df:
bb:4a:be:aa:fd:5f:42:44:03:65:87:0d:12:4d:f2:1a:28:b2:
04:01:a8:a7:4c:50:0b:11:c9:d8:4d:e7:6c:65:8f:2e:f2:44:
99:11:a5:85:6f:d3:f8:b1:65:5a:cb:87:35:33:dc:23:4f:b7:
20:1d:b6:d2:50:76:65:b7:b9:f6:23:ae:30:fe:a7:4f:ba:6b:
b9:6c:2b:b0:70:86:20:c3:ed:67:6a:fb:9f:dd:fa:1a:d5:44:
db:d2:3a:e9:f5:3e:30:60:ad:0b:08:dd:d4:9e:45:8d:ee:02:
50:88:85:18:be:87:83:26:5f:55:e4:4d:f8:2c:40:4b:1c:d6:
b4:7d:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:12:36 2026 by rpki-client