Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: qpzR9ezx5XcFzrcOpIyA5saZx84E1UmMTrf1+fYiiHk=
Subject key identifier: B4:A4:C5:A5:C7:04:CE:4A:87:88:EC:E0:D6:95:84:98:82:E8:ED:5E
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 019D33083BEDE6273E8C2BA899F61A84BF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 06:01:10 +0000
Manifest this update: Sat 28 Mar 2026 06:01:10 +0000
Manifest next update: Sun 29 Mar 2026 06:01:10 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: IYzdFOKw2T5bcIvMsEC8VP9yjejgsjRbOikNXrpVDmY=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:3b:ed:e6:27:3e:8c:2b:a8:99:f6:1a:84:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Mar 28 06:01:10 2026 GMT
Not After : Mar 29 06:01:10 2026 GMT
Subject: CN=b4a4c5a5c704ce4a8788ece0d695849882e8ed5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:ec:26:8a:6c:c0:69:d5:b8:38:17:8b:a5:
e6:db:26:c8:9b:67:41:bb:4a:61:8e:75:0a:b7:07:
62:39:1a:d9:81:37:0e:5a:74:1c:bf:09:e7:2b:21:
e1:17:4b:0f:75:02:ff:45:56:de:de:ee:47:df:f2:
ee:68:6f:57:2f:b7:ff:8b:c1:2a:e4:5e:ba:38:74:
c1:03:ea:41:cd:18:7a:bf:18:f4:b9:ed:6d:3d:da:
15:3c:1a:fd:44:05:97:02:93:3c:23:96:38:2e:f4:
27:20:e6:03:69:ca:53:d3:02:c6:5b:05:e2:3d:95:
88:63:cd:77:8c:19:b7:07:53:be:0e:b8:a5:8f:24:
f8:49:ac:03:96:3c:d8:21:cd:6d:8a:b5:d8:87:b8:
63:2e:12:1b:ec:f6:22:f1:9f:cf:22:a1:41:d5:9e:
dc:b5:b7:0b:4c:7e:85:74:9f:09:08:6d:52:33:4e:
28:55:9a:83:0f:c8:56:34:97:4c:b9:e1:67:c1:f2:
1c:3d:61:43:88:6c:1f:39:87:4f:de:33:a0:5f:47:
5d:a2:2c:30:df:96:da:f8:4d:b1:ed:2e:ab:b9:b2:
fe:c6:b1:6c:4b:12:00:28:90:47:dd:2c:23:44:3b:
9a:2d:23:2f:67:7e:b8:57:7e:4f:a4:3f:d0:53:fc:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:C5:A5:C7:04:CE:4A:87:88:EC:E0:D6:95:84:98:82:E8:ED:5E
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:dc:3a:2c:4d:cc:e5:d8:50:f2:9a:71:db:cd:ba:e8:29:
0d:6c:61:cc:71:b0:fb:3b:f9:cc:7e:dd:93:cf:bf:83:05:9f:
02:12:74:1b:82:68:47:48:98:ad:55:46:d1:e3:ee:b1:b3:b4:
92:49:89:c6:42:e5:d7:42:21:e4:fb:61:08:62:47:7d:78:e1:
3f:8f:e2:8a:fa:6f:ec:8c:ff:e1:a3:73:22:d1:98:ae:45:78:
08:24:37:7b:9c:25:e3:3a:a3:36:99:b3:d3:c9:3b:4f:b1:7c:
2f:fd:68:ab:94:10:ed:1f:fc:29:85:40:4b:25:9b:d4:d5:a6:
b4:6d:95:b7:76:bb:12:80:8f:cc:b5:f3:82:4c:18:c6:88:f9:
df:c6:9e:66:91:e2:0f:97:52:3b:c4:be:f1:02:06:b6:d1:59:
d4:d9:81:f0:3f:73:93:6c:a2:c4:44:41:71:c8:06:5f:3d:5b:
9d:55:d6:06:90:9d:13:8f:a8:36:a5:74:dd:5d:f5:2e:9f:70:
d5:be:5a:8b:72:17:be:f1:91:67:40:db:3d:d7:4a:43:24:b0:
15:bc:8a:0f:de:dd:67:d7:b4:85:8a:41:63:09:b9:56:72:77:
24:38:33:1e:15:7c:ff:39:70:e0:94:f4:02:c0:d0:0c:f7:80:
37:86:2c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:23 2026 by rpki-client