Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: ucYlxq+WdbCL3tpeRZEDS+xcvGKsAArWuP7TZCLlH9s=
Subject key identifier: 82:C9:DC:C0:B0:67:09:32:B7:25:47:5E:A1:91:08:AD:60:68:B7:5B
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01A104A4C995CF18CFBC1C6FB37D66966EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 17C7
Signing time: Sun 04 Oct 2026 02:01:10 +0000
Manifest this update: Sun 04 Oct 2026 02:01:10 +0000
Manifest next update: Mon 05 Oct 2026 02:01:10 +0000
Files and hashes: 1: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (hash: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI=)
2: KQsm9K1heMHyaUWKbN-CsyFs5cg.roa (hash: 8XS5NufSMeXCYXx0KZUZXpCrXpgKWjPo5WW5nv+gqaM=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: MgT5Pvi74FDzXaRQ57fEb5fqUet4QPR6F/JBnizJUq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a4:c9:95:cf:18:cf:bc:1c:6f:b3:7d:66:96:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Oct 4 02:01:10 2026 GMT
Not After : Oct 5 02:01:10 2026 GMT
Subject: CN=82c9dcc0b0670932b725475ea19108ad6068b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:af:7d:d6:7e:50:cf:fa:37:68:bb:03:89:
fa:0c:32:81:d9:a7:10:61:88:88:f4:1c:c6:10:4e:
07:fa:49:d4:6d:97:60:3c:cc:75:ef:bf:f6:91:96:
34:2e:e6:d0:b0:25:d6:47:d2:97:bd:25:8e:36:0f:
ef:db:6e:fc:9a:66:94:2f:9e:01:02:1a:24:93:30:
cf:61:1a:62:a3:f5:35:3e:54:22:27:d8:ff:2e:a8:
fc:30:97:55:e9:85:f9:30:80:70:25:17:83:87:aa:
f2:7a:6b:c2:c7:a9:48:a4:e0:e9:ea:00:b1:35:c9:
49:58:6e:18:8c:12:02:1b:26:d3:03:64:6d:48:1e:
47:9d:c8:ba:f6:64:0c:a4:bb:d1:f1:93:1b:54:27:
06:37:05:f5:da:0c:60:bf:10:bb:4b:b5:d5:3a:a2:
f3:70:2c:64:8e:b4:6c:d7:39:f8:d9:51:c8:52:c0:
22:f0:02:1c:18:92:66:f4:d1:82:95:81:d2:31:5d:
de:f0:33:2b:96:7f:40:bf:07:83:fa:60:65:18:fc:
c1:0d:73:51:46:ff:1a:00:00:da:f5:14:be:6a:2f:
11:42:74:f8:c6:8f:64:e8:ae:dd:16:5d:6b:cc:72:
70:49:e2:9a:44:65:bf:5d:de:16:b6:22:0b:b6:28:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:DC:C0:B0:67:09:32:B7:25:47:5E:A1:91:08:AD:60:68:B7:5B
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:02:67:19:77:07:22:4b:8e:43:29:89:e9:55:c6:20:1e:
16:9e:4b:3e:a9:d1:8c:f0:00:40:37:1a:b0:5a:29:19:7a:18:
9c:6d:ac:4e:12:d1:38:06:bb:ce:0d:39:3d:16:c6:5f:c1:ff:
0d:87:0d:15:4c:b2:6c:54:50:43:7a:83:2a:81:ae:58:f7:23:
74:fc:a5:c6:d4:8d:33:cb:85:1f:78:8f:29:52:91:8e:c3:8d:
e0:8a:66:2c:c4:8c:2b:e7:88:fd:6f:1b:4d:c9:18:0d:7e:f8:
4f:22:0a:4f:71:3e:b1:42:33:32:c1:83:dd:b1:00:c5:f4:73:
79:7f:ed:f4:05:70:e4:bb:44:23:2d:24:6a:b6:58:ce:01:df:
1c:a1:b3:00:37:38:73:1d:d1:1b:a5:93:97:41:2b:db:05:cf:
d1:1f:6e:8a:f0:cd:18:83:a2:e1:23:e6:c8:32:d8:d8:95:58:
11:a9:88:65:96:ca:54:4b:4e:8b:41:2a:a7:d6:6b:48:95:08:
72:72:ea:60:d9:ae:2b:00:02:18:c4:53:9a:32:8a:00:2f:81:
ab:da:f9:ab:c9:58:cf:8a:80:68:0c:db:71:44:5f:39:92:ca:
80:cc:df:7c:ed:61:61:ed:7e:d5:99:1c:5c:09:a7:78:65:76:
a0:be:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:08 2026 by rpki-client