Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: wghr+pkAJepVW05kZDLSveUDLpELmMfVHWhfun99uF0=
Subject key identifier: B9:43:6B:E9:72:E5:BA:7B:DE:09:74:69:8C:4D:1C:78:5C:C7:D5:B4
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019F9392436A679517BD427C968076F7E0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 19DA
Signing time: Fri 24 Jul 2026 10:01:03 +0000
Manifest this update: Fri 24 Jul 2026 10:01:03 +0000
Manifest next update: Sat 25 Jul 2026 10:01:03 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: xntlbmXW7WOOXjTy74L6oUJzBRgSZzfdrFdbb7C49wU=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:43:6a:67:95:17:bd:42:7c:96:80:76:f7:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jul 24 10:01:03 2026 GMT
Not After : Jul 25 10:01:03 2026 GMT
Subject: CN=b9436be972e5ba7bde0974698c4d1c785cc7d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:07:4d:4c:0d:5e:12:f3:75:2b:65:bc:c1:42:
7f:ec:c0:7e:fb:91:6b:e4:fd:53:41:58:0b:9f:01:
0c:32:9e:07:b0:d8:82:12:5c:a1:89:ee:1c:59:f7:
57:ae:13:ed:77:0f:73:d3:53:f4:5a:86:f5:3a:bd:
d9:1e:d2:de:d5:5a:ce:1e:f0:39:32:f6:5b:80:d5:
3e:c0:aa:a2:1a:66:eb:54:ce:44:78:e0:a3:8a:19:
4d:9a:fe:cb:bb:03:d1:0e:b2:72:64:91:c8:86:81:
d2:82:58:39:cd:56:0d:42:d3:8c:60:df:d5:47:69:
e6:01:8a:82:fd:bb:40:97:ae:54:4c:8e:ff:a3:b4:
0e:48:0e:5e:a9:65:9e:1a:ce:69:77:19:b5:7a:9b:
a4:a6:68:4a:f0:a6:8d:fc:94:50:90:90:a7:3e:01:
28:2e:f9:68:69:47:f7:b3:d4:28:b4:ba:0f:da:1d:
0a:a2:f9:a2:2c:6b:24:99:f9:59:bf:3c:9a:01:7e:
0d:5b:81:1c:5b:8b:da:32:a7:79:4c:c6:2a:55:43:
82:6b:23:31:58:27:4a:a7:0a:e1:22:35:31:61:5e:
9f:34:c1:51:e8:b1:41:a9:c1:70:bc:41:04:f6:9b:
54:a0:5e:6a:4f:1d:e1:27:03:9b:70:f6:2b:b6:ef:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:6B:E9:72:E5:BA:7B:DE:09:74:69:8C:4D:1C:78:5C:C7:D5:B4
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:b9:21:9a:d9:d5:58:a1:d6:46:89:e3:5a:95:e9:19:4f:
e5:77:65:38:f5:72:4c:72:25:81:65:a8:d2:19:ef:3e:cc:ed:
15:a6:8b:a3:39:df:e0:1b:57:9e:89:23:e9:15:86:91:bd:a9:
a2:23:5b:17:7f:0a:d9:ea:32:41:03:d8:73:7c:cb:89:3d:d8:
af:7c:05:79:8a:70:49:3d:c2:8d:d9:37:3f:dd:b3:7c:12:d6:
d3:c3:ae:a3:cc:ae:43:d7:33:f2:d3:c3:12:5c:fe:8e:f0:1c:
18:a7:0c:f6:25:4b:3e:62:4d:1d:2c:e1:fe:d1:9b:2f:1e:ce:
e8:2b:61:e2:a1:64:95:fb:ef:8d:07:b1:33:74:d1:4f:fd:95:
c3:f6:cc:e5:d1:a2:8d:3f:f1:3e:3a:20:9c:3d:96:3b:be:cf:
c2:fe:4c:65:88:1f:60:ef:5e:84:bf:30:a9:ce:27:7f:9e:9b:
f9:c7:5f:bf:aa:ce:58:1f:f7:2b:3e:12:d3:bf:e9:57:4e:cd:
8c:6d:a6:9d:b2:f8:f9:c9:32:b8:54:6a:07:1a:79:40:50:6c:
51:1c:de:ac:c9:f2:99:72:1b:14:e3:6d:c2:75:98:41:55:24:
91:20:37:a7:c3:82:68:f1:0f:3b:70:ae:d5:7d:08:75:95:f2:
b0:fd:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:21 2026 by rpki-client