Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: IVImzfbK8bq96gXqiVRpTIrMZkSTOFHv6T/6JpJqa2o=
Subject key identifier: 1C:03:3A:D6:F6:12:65:06:28:5C:16:18:50:A1:9E:9F:C8:99:D3:7B
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019D341A3C9174E507EC0EBFBFC8951D2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 11:00:27 +0000
Manifest this update: Sat 28 Mar 2026 11:00:27 +0000
Manifest next update: Sun 29 Mar 2026 11:00:27 +0000
Files and hashes: 1: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: VrZyfrOgDbruCVy3UrUhv8WvoqFIpiVDjjtdjW8RjoU=)
2: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (hash: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:3c:91:74:e5:07:ec:0e:bf:bf:c8:95:1d:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Mar 28 11:00:27 2026 GMT
Not After : Mar 29 11:00:27 2026 GMT
Subject: CN=1c033ad6f6126506285c161850a19e9fc899d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1b:4f:f1:dd:18:65:67:cf:eb:25:8a:e7:ab:
c1:61:c4:7c:1c:6d:3b:6e:01:06:75:d3:14:74:ec:
74:08:72:ec:19:f1:48:57:31:c6:27:1c:1a:66:fb:
99:89:63:af:48:03:24:46:c0:64:bb:14:e6:da:ab:
11:6a:d0:7d:cd:6a:e3:04:a6:93:8f:08:ac:8f:2a:
f2:5b:a1:03:07:a2:a1:d6:d2:bb:0d:5d:16:5e:9f:
e8:8e:ec:c9:44:6c:de:00:2b:82:2c:46:b7:bd:9c:
01:de:74:74:c5:01:b8:bf:87:7d:11:06:3d:8d:f6:
a7:cc:8e:73:43:cc:94:e3:99:6c:43:df:c1:a2:ea:
ad:d4:b5:a0:4b:36:6a:36:63:8c:a9:4c:5f:29:76:
89:8c:82:76:1c:b9:71:6d:d1:e2:6d:90:d7:b1:95:
97:b9:db:0d:90:ce:22:f6:91:a0:9a:a0:1b:3b:59:
3a:95:39:f3:3c:4e:95:b2:7a:d6:59:d1:3f:72:32:
91:94:d7:aa:b4:66:73:1f:5d:b4:06:b8:a2:d0:1c:
65:29:c6:8d:c6:4b:12:b7:f8:d5:f7:c8:e2:19:ff:
a7:44:de:ad:a5:e4:88:2f:0d:d0:7b:ea:fb:fe:f5:
ad:ea:01:0a:ae:92:01:89:2e:a2:aa:9e:d8:f2:aa:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:3A:D6:F6:12:65:06:28:5C:16:18:50:A1:9E:9F:C8:99:D3:7B
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:b6:ad:38:e0:1d:10:55:cd:94:a5:62:37:86:b6:bd:65:
dc:8c:99:f6:13:2a:07:44:36:c1:0b:68:f4:44:61:0e:be:d8:
c5:ae:85:10:64:e2:c3:cd:4f:86:6b:ea:0e:6c:5e:b6:74:7c:
09:ce:d8:b0:1c:a2:25:9c:53:97:02:20:f0:e4:3d:01:8b:98:
b3:60:29:1e:f3:25:be:d7:cc:a7:f8:74:1e:cf:f5:96:bb:46:
0f:2e:05:89:97:f8:fa:00:0b:d5:f6:d8:f0:45:84:6a:16:d9:
fe:d6:5e:ce:c7:7e:20:79:eb:a5:68:ba:fa:b0:ec:27:73:ec:
a2:93:da:53:d7:44:3e:be:d2:2a:7d:82:53:12:96:6f:1d:f5:
5b:01:b0:f6:92:5e:0b:20:9d:8f:34:74:eb:0d:69:ef:29:1a:
82:19:d1:22:91:38:c3:fd:ff:ee:a5:a8:3d:ab:3b:d4:ec:0d:
b9:52:15:f1:01:fc:ee:ed:a1:28:82:f2:84:17:f0:53:88:cf:
0c:88:74:4c:2b:73:a5:15:ac:9d:20:d7:bc:40:09:4b:69:ee:
67:41:06:1c:2a:75:f5:f7:2e:2f:1d:89:dc:3a:f7:bb:17:cb:
9e:f0:4d:13:a2:05:a3:f2:f3:b5:0d:5e:6e:ae:96:b9:e0:d9:
9e:74:58:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00GjyRdOUH7A6/v8iVHS++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj
Mzc5ZjcwHhcNMjYwMzI4MTEwMDI3WhcNMjYwMzI5MTEwMDI3WjAzMTEwLwYDVQQD
EygxYzAzM2FkNmY2MTI2NTA2Mjg1YzE2MTg1MGExOWU5ZmM4OTlkMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6htP8d0YZWfP6yWK56vBYcR8HG07
bgEGddMUdOx0CHLsGfFIVzHGJxwaZvuZiWOvSAMkRsBkuxTm2qsRatB9zWrjBKaT
jwisjyryW6EDB6Kh1tK7DV0WXp/ojuzJRGzeACuCLEa3vZwB3nR0xQG4v4d9EQY9
jfanzI5zQ8yU45lsQ9/Bouqt1LWgSzZqNmOMqUxfKXaJjIJ2HLlxbdHibZDXsZWX
udsNkM4i9pGgmqAbO1k6lTnzPE6VsnrWWdE/cjKRlNeqtGZzH120Brii0BxlKcaN
xksSt/jV98jiGf+nRN6tpeSILw3Qe+r7/vWt6gEKrpIBiS6iqp7Y8qqZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwDOtb2EmUGKFwWGFChnp/ImdN7MB8GA1UdIwQY
MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt
M2ZmOTI2MDg1NTI3LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3
LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6i2rTjg
HRBVzZSlYjeGtr1l3IyZ9hMqB0Q2wQto9ERhDr7Yxa6FEGTiw81PhmvqDmxetnR8
Cc7YsByiJZxTlwIg8OQ9AYuYs2ApHvMlvtfMp/h0Hs/1lrtGDy4FiZf4+gAL1fbY
8EWEahbZ/tZezsd+IHnrpWi6+rDsJ3PsopPaU9dEPr7SKn2CUxKWbx31WwGw9pJe
CyCdjzR06w1p7ykaghnRIpE4w/3/7qWoPas71OwNuVIV8QH87u2hKILyhBfwU4jP
DIh0TCtzpRWsnSDXvEAJS2nuZ0EGHCp19fcuLx2J3Dr3uxfLnvBNE6IFo/LztQ1e
bq6WueDZnnRY0w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:14 2026 by rpki-client