Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: JJQzKYZZRVZbm2eJR4zUv49S7VWZph2Zsw7aNsT4HVU=
Subject key identifier: 56:B4:D5:43:28:6C:CC:DC:53:D9:DC:84:EA:1F:F4:C0:DD:FF:07:92
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019D29294C60C3CA3913205E6376148544FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0E32
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: 2Y4Gmow6BZ2CpgFtMGmIUSJsDQpqrTQFGliQaxMIn0k=)
2: z4L6AD3m-R2tfOhJaueCbCo3ru0.roa (hash: 0ubsZGhqaNgq/MTbY8mEdyeAa24CrlFwOd2MlfZ80j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4c:60:c3:ca:39:13:20:5e:63:76:14:85:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=56b4d543286cccdc53d9dc84ea1ff4c0ddff0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3a:81:59:bc:a9:fc:6c:0e:ad:72:f6:a7:1a:
62:f2:17:81:87:8a:23:b5:a9:86:22:83:39:92:7e:
c0:e6:e8:79:94:7c:f2:43:ea:68:50:22:c5:7b:d4:
d7:ae:fd:8b:eb:94:60:01:91:18:46:70:bb:e0:14:
df:29:a4:63:f8:d4:2e:80:b5:4b:3e:eb:35:b5:bd:
69:30:89:31:ac:41:f2:67:c1:71:2a:f8:32:d4:d3:
ab:09:6e:ca:be:3d:3b:15:26:e6:de:00:23:93:67:
b8:33:ae:f5:9b:49:41:d2:cf:d9:a3:8b:33:ae:eb:
72:c5:ed:e9:43:f6:2b:2e:af:7d:88:89:ef:cd:fd:
0b:7b:21:c5:7b:6f:fa:6d:87:c5:87:bb:c9:cc:41:
aa:30:ff:c1:4b:5e:c0:1c:ae:0f:ae:c3:20:a8:de:
47:60:4f:cc:54:f5:09:a5:6e:1e:c7:49:2c:96:a1:
de:fc:75:99:c2:f5:99:b5:d6:a1:c1:b4:cd:39:93:
46:47:2a:bd:7e:e3:d7:2e:34:24:a5:c3:a8:e6:f2:
3d:cf:cc:f2:bc:a4:d1:ad:aa:11:7e:7d:5c:d3:ad:
ee:0f:91:f8:fc:88:40:e6:00:3d:f4:eb:2a:cf:ce:
f0:3e:e5:45:7f:97:bb:68:ac:65:fa:8f:52:22:6c:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:D5:43:28:6C:CC:DC:53:D9:DC:84:EA:1F:F4:C0:DD:FF:07:92
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:23:83:ee:5e:1e:fa:3c:1a:73:48:07:38:c4:57:a2:f2:3a:
9f:b6:3d:ba:0b:23:56:03:c9:c9:f8:a1:29:c5:24:93:37:df:
72:5e:05:33:45:80:64:d9:3f:00:24:8f:f0:9a:de:11:8f:0e:
03:38:34:5a:a5:c4:58:99:fa:d6:3b:7e:10:df:ca:91:4f:a2:
17:6f:2b:47:97:51:16:7c:ce:fe:86:73:fa:71:43:ba:d1:a5:
04:b7:3a:c4:76:83:38:0c:8c:c1:0e:f0:ac:51:03:2c:37:e4:
68:60:7d:41:14:99:fc:a8:e1:64:d5:c3:bb:da:85:bf:db:58:
a8:bd:e9:79:12:63:39:c0:bd:e6:5e:44:42:be:d4:a7:6e:7f:
0b:4e:d5:53:83:58:df:b2:3f:93:4d:03:65:a5:00:b4:d5:83:
3e:30:21:9a:be:43:75:fb:21:69:5d:e8:5b:45:36:cd:b7:a3:
d6:4c:a4:d5:a3:ca:77:4a:10:1b:d0:d5:59:83:d9:b3:59:92:
f6:e9:99:0d:45:b0:e0:09:61:01:d2:0e:dc:7a:e3:0c:6d:c5:
f9:de:fb:0a:f5:3b:c2:ea:2a:2c:f4:01:1f:ed:0d:b9:d2:49:
86:21:31:96:ba:f9:bf:01:6f:57:0d:89:54:41:e6:5a:52:a1:
12:fe:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:34 2026 by rpki-client