Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: NVigCULFi7zWQdYu+TBrisMLiIglDmY/bbz6Gf23A44=
Subject key identifier: 3F:FB:7D:B8:BC:40:F0:B7:0C:13:93:84:52:5E:45:C5:99:5E:66:18
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019D265EE822119CEFB5F92C8AFA0B569919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 0620
Signing time: Wed 25 Mar 2026 19:00:47 +0000
Manifest this update: Wed 25 Mar 2026 19:00:47 +0000
Manifest next update: Thu 26 Mar 2026 19:00:47 +0000
Files and hashes: 1: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: MlrQlU/oQxegPLiZ1xQg8SObCsDpMGX4Nx5IpZb/OEw=)
2: ZgrVoB1Wz6mny7wzSyt-ncOnX-s.roa (hash: pPHicEIizRCimEFs1IEl8Pv0RkfkVNW4hyUZC1BFM4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e8:22:11:9c:ef:b5:f9:2c:8a:fa:0b:56:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Mar 25 19:00:47 2026 GMT
Not After : Mar 26 19:00:47 2026 GMT
Subject: CN=3ffb7db8bc40f0b70c139384525e45c5995e6618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:21:95:90:93:a0:d5:13:d6:7a:f5:09:68:
29:6a:f0:e5:54:f4:f0:08:94:99:0a:0d:73:f3:20:
3f:07:0c:2b:c4:0a:d2:f8:6c:a7:4c:4f:34:17:b7:
b4:92:e5:aa:67:0d:54:31:6a:e4:e3:21:d0:22:e0:
d0:7e:e5:dc:1c:f9:60:9d:fa:58:2a:23:aa:52:23:
d3:ae:cd:30:d3:8a:d1:bc:6a:53:c7:bd:fc:cb:16:
f5:0c:c8:b9:ce:18:a3:10:79:78:7e:ef:db:0a:b1:
82:6b:e2:5c:53:58:6b:db:9f:a5:88:7e:b3:df:b6:
a8:2c:e3:04:c4:4c:a4:15:69:d4:39:f7:4b:17:87:
9d:b5:f0:ed:e8:ac:0d:cf:de:8f:d1:74:e3:72:9c:
dd:d1:b2:f8:fa:a2:fb:67:f6:a9:7b:a3:b4:64:73:
e0:07:5e:99:3e:87:11:4c:33:4c:49:cf:41:5c:e0:
69:54:80:0c:26:dc:fc:99:86:f4:4a:72:d8:7b:9e:
08:22:ec:a0:e4:f1:99:db:7c:2d:33:5a:e9:b7:28:
0b:cf:4d:f6:d3:1a:b4:da:64:22:8e:c2:b0:cd:30:
fe:a8:6b:0a:cb:2d:68:9c:0a:89:e2:97:2d:40:aa:
55:cd:e8:84:4d:f2:dd:2c:79:8b:a3:37:91:03:bb:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:7D:B8:BC:40:F0:B7:0C:13:93:84:52:5E:45:C5:99:5E:66:18
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:57:9d:d1:2f:98:5f:06:ac:1d:c3:ee:cf:9a:0c:b3:43:
38:48:88:a5:4c:ca:3c:42:1d:aa:99:c7:8a:60:3c:f3:d8:db:
1f:e8:09:b3:6f:ac:cf:f6:95:b1:3b:73:8a:e6:67:d7:21:92:
c1:e6:20:93:5a:69:8b:40:d5:8b:2b:e0:44:33:42:ce:cc:80:
a1:16:12:dd:98:36:81:f0:f5:53:8a:32:78:ea:d4:d7:91:72:
c0:45:4e:e6:1f:76:0f:50:3f:14:74:6e:18:e4:71:81:e8:92:
4c:62:08:aa:47:1a:d3:f3:9e:5b:11:c7:01:b0:ad:db:2b:6f:
9d:d4:6a:d7:b7:cb:9f:ba:03:dd:11:4e:a3:cf:5b:05:3f:d3:
e1:b5:b5:5a:f9:b0:37:f0:81:f9:a5:bd:35:69:63:2a:6e:a9:
15:f6:61:ae:9f:3d:57:ce:0d:0f:fd:5e:3c:8b:e4:bc:71:25:
bc:61:8b:07:ba:54:f8:be:59:cc:82:20:3d:47:7f:d8:8b:cc:
55:92:fa:f4:0e:fb:f5:db:ca:0f:61:a8:cd:e8:02:25:d1:d1:
bc:3c:f8:8e:6e:82:18:f7:24:b6:d6:ab:81:2a:de:13:97:f4:
22:bb:bc:67:e9:1c:ac:ab:25:35:dd:ab:c6:5b:57:23:d7:9b:
77:e4:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:50 2026 by rpki-client