Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: pZEKoa1iW+siKg76MvTrMEYHmakyMbSoqqKxLWnyj/E=
Subject key identifier: C3:5A:1D:AD:80:C2:42:7A:FC:93:F3:D9:F2:86:A4:10:6C:05:8F:0C
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019F91DA10037251CDF6382EFC10C4CB22BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1707
Signing time: Fri 24 Jul 2026 02:00:14 +0000
Manifest this update: Fri 24 Jul 2026 02:00:14 +0000
Manifest next update: Sat 25 Jul 2026 02:00:14 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: DfSOXPA/rxbCIFPlsoGCFFvgtK3Yl2S/5NXzSwC1zn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:10:03:72:51:cd:f6:38:2e:fc:10:c4:cb:22:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Jul 24 02:00:14 2026 GMT
Not After : Jul 25 02:00:14 2026 GMT
Subject: CN=c35a1dad80c2427afc93f3d9f286a4106c058f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:d4:a7:d1:bf:93:45:b4:09:3a:73:f0:4d:
3d:79:e7:2c:e6:02:87:f3:d0:ae:ac:91:a2:dc:bd:
8f:fc:af:53:ed:d8:1c:0c:7b:85:5a:3f:60:73:47:
3b:f6:df:3e:3b:50:b9:37:0b:89:b0:83:d9:5e:1e:
63:e1:66:44:58:4c:26:81:42:98:21:5a:b8:07:cc:
83:26:48:b8:4f:84:ec:6a:76:40:f8:c0:26:6d:ac:
4d:4f:b4:2c:db:ec:d6:85:28:0b:6c:d9:e2:44:81:
6e:47:74:65:21:cf:43:31:21:ec:77:39:1c:e2:2d:
3c:4f:1a:53:09:50:96:1a:a9:02:48:b9:c2:c6:05:
cd:cc:6b:aa:d5:26:a5:56:2d:b4:ce:53:7f:f8:ae:
9f:ef:2d:25:a1:db:14:83:af:4f:6f:4f:ec:a1:30:
84:9a:fa:33:e3:b5:d4:be:60:de:64:b4:6b:e0:40:
79:a1:69:51:1d:cc:e1:4a:ef:3a:c9:c9:90:cd:1a:
0d:1f:07:11:77:06:79:95:78:73:b6:e8:21:12:8f:
64:0e:6e:ed:07:18:87:ff:27:1b:40:bc:bf:da:10:
98:6f:bb:9f:c3:8e:2b:b9:d4:79:aa:b8:a2:53:a9:
f7:ec:34:97:62:66:5c:4b:40:81:de:de:eb:50:9b:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:1D:AD:80:C2:42:7A:FC:93:F3:D9:F2:86:A4:10:6C:05:8F:0C
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:09:85:27:38:e9:d4:b2:55:05:bc:8a:3b:33:00:b1:09:94:
89:47:7d:cc:5f:fe:a4:cb:ef:43:6e:de:76:cc:e5:66:2c:5c:
f2:81:07:1a:f8:7b:41:e8:d1:65:2d:e7:da:9b:68:7b:dd:35:
ff:59:1f:7b:5e:ce:8b:f3:0b:16:47:26:9a:74:f7:a8:78:4f:
b1:0a:f6:f3:80:b4:69:89:37:4e:30:66:dc:a9:2a:4b:df:98:
f8:92:3d:2a:c1:05:41:ee:bb:df:18:73:49:e4:e3:ae:89:50:
07:08:c4:4d:1b:8e:9b:b1:a5:14:05:f5:5d:15:8e:11:61:34:
1d:df:7e:72:52:6d:cf:4b:4d:a9:be:b6:11:80:bb:de:29:54:
15:b5:9a:20:47:cf:dd:bc:df:9b:85:ce:11:fb:dc:4d:df:38:
6a:8a:b3:9f:4c:06:4e:1c:9b:7e:98:31:36:ec:71:39:eb:00:
d3:cd:a4:2e:33:a6:31:27:ae:23:b1:3f:06:1d:f3:a4:aa:01:
26:8d:fd:e2:15:3f:f5:c3:f3:ac:38:55:72:72:14:71:87:66:
c6:00:94:b4:4f:e8:dd:80:59:fc:c8:00:48:a3:ef:aa:6f:c5:
e0:3d:04:af:27:bc:1a:47:39:28:4f:82:17:d5:1e:38:19:a2:
b1:88:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:54 2026 by rpki-client