Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: 1ZPCFDxCw5WTj/6S5Bhjtoxs6EaihSCz9e3Omir58/U=
Subject key identifier: 6C:46:33:13:A0:8D:A7:03:54:EF:B9:0A:44:39:0B:4B:36:FB:98:6C
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019D2628265C21D967F2840EACD8E0E23276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: chplI+Qbn1lOqgucuYlkA0hCCDM7rEyI06bAMFaI+ow=)
2: xOxM1BncNHfY0c-6DzC1tBiAY8A.roa (hash: Yq27UJVRisxKr8puDtLKdu2H0pR8ajRLZTCral2Htvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:26:5c:21:d9:67:f2:84:0e:ac:d8:e0:e2:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=6c463313a08da70354efb90a44390b4b36fb986c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:81:01:93:2b:b2:c7:64:93:ec:44:2f:50:
31:6d:7b:63:8a:65:bd:79:ed:53:d8:8d:73:23:87:
45:69:60:29:83:6e:7d:ec:9f:46:c0:9a:6e:d4:1b:
9f:0f:b4:05:8c:f3:88:7a:1d:5e:62:2c:a1:15:36:
01:6e:e8:53:42:6f:6b:2b:79:ba:ac:ae:a3:63:58:
4c:00:b9:f0:73:42:bd:11:05:45:3c:fd:b8:96:bd:
86:58:00:02:59:9b:57:a0:b2:1b:0a:40:d7:74:79:
25:17:b6:80:ea:b3:c5:d4:d5:9c:26:3d:08:ea:c8:
33:64:fc:5f:03:d9:7d:0a:76:1e:6a:ea:d7:9a:f4:
6a:82:f9:a7:21:fe:e8:6b:a7:80:cb:46:8c:18:ee:
03:2e:d6:56:97:a7:83:03:61:9f:e0:87:ff:ba:f7:
fd:dc:ff:5f:3f:35:88:a9:66:f7:e8:59:20:eb:e6:
09:12:a8:3c:da:68:7e:06:76:ef:dc:8d:05:73:38:
a3:a3:e3:3d:cb:1e:f3:99:a2:69:c1:1e:17:e8:23:
6d:ea:d9:77:1c:c9:65:c2:85:a6:5a:fe:a4:f0:00:
c1:a2:d1:fc:e5:f3:50:14:d7:d0:57:75:a6:5a:6c:
9a:62:f7:0b:c6:ff:5d:9a:54:b4:3c:d4:28:44:37:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:33:13:A0:8D:A7:03:54:EF:B9:0A:44:39:0B:4B:36:FB:98:6C
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:56:8e:81:47:5b:65:a9:67:b3:c2:cf:ba:4a:c5:20:b8:
d0:49:ad:e2:2d:e1:45:53:f8:ca:2e:e3:e6:30:66:95:24:f0:
bb:43:55:53:01:ac:0a:ca:e1:4c:c6:98:b4:be:03:b0:33:4b:
d8:14:75:4f:68:68:29:3c:d6:90:02:92:f6:20:74:96:16:55:
cb:99:49:f7:67:d7:f8:d8:1f:4d:96:ae:d9:ec:46:fc:47:d6:
88:8a:69:b0:b1:1d:21:cd:14:6b:73:11:52:f5:8a:e8:8e:29:
4b:b8:e8:ea:40:8b:cb:70:24:6a:64:37:33:95:84:8a:66:1b:
50:31:d1:97:0d:6d:88:15:f9:32:45:81:1e:36:5f:12:f5:a1:
b6:bb:e9:68:e2:28:f9:7b:c1:66:e2:67:c6:f0:e2:aa:26:5d:
36:34:7f:a1:72:f2:1d:c7:ad:78:64:b2:37:32:46:dc:6e:fc:
97:66:9f:4c:52:58:d5:a1:3e:05:ce:1b:21:ac:fc:e8:72:78:
67:e6:cc:6a:db:6b:7b:1f:fb:0c:ab:9d:9c:16:b7:34:99:b9:
73:51:b5:b8:f3:21:33:91:f3:84:80:88:38:23:05:81:90:38:
b7:db:15:3e:f6:a3:fc:af:04:d6:60:a0:36:c6:18:39:60:6a:
26:fc:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:19 2026 by rpki-client