Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: JJHgHF9L/meEFF0+c6lYnI9ZlXZFGdwhp3OaEcHG+GQ=
Subject key identifier: 12:13:34:F2:97:F7:F3:37:C8:42:51:7C:5F:D5:9A:34:C2:59:42:5A
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019E20C86F58A7B0FC727CDC89D1D597CF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 191A
Signing time: Wed 13 May 2026 10:01:06 +0000
Manifest this update: Wed 13 May 2026 10:01:06 +0000
Manifest next update: Thu 14 May 2026 10:01:06 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: C8HplA7jc6F7lalo2RjF1A3IHn+x5AtfliyLWhDzFao=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:6f:58:a7:b0:fc:72:7c:dc:89:d1:d5:97:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: May 13 10:01:06 2026 GMT
Not After : May 14 10:01:06 2026 GMT
Subject: CN=121334f297f7f337c842517c5fd59a34c259425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:98:d6:ce:69:15:7b:d5:b6:61:73:4f:2b:
2e:07:69:6b:51:eb:25:d0:87:70:5c:09:33:04:42:
40:fb:56:2c:1a:4c:af:a0:1e:6a:1d:d4:8f:37:cb:
fa:7c:b7:e0:1b:24:c1:06:8d:35:4f:f7:e6:bb:7e:
63:8e:65:cb:a0:b9:73:18:0b:34:53:b9:10:f3:8e:
4f:f2:5d:83:e5:54:e2:7b:aa:9f:a5:e5:6a:66:ca:
b9:9e:42:60:09:8b:b8:88:76:32:e3:b3:db:69:5e:
f1:24:e8:15:2b:72:c7:dd:ef:bb:d3:9e:8e:f7:77:
15:08:ff:8a:de:9f:7c:93:4b:c8:fb:16:b1:d6:1e:
72:b8:ac:5c:a8:db:7c:4a:3a:4b:08:7e:72:37:41:
6e:50:22:2e:25:ce:8f:96:00:5f:47:60:fa:4d:04:
db:6c:49:bd:0b:c7:5d:3f:02:b8:13:39:67:f7:4a:
42:53:e0:08:34:d9:c7:32:ab:eb:2f:26:39:80:82:
21:a9:df:c4:00:e6:ab:f0:f3:40:69:aa:9f:e7:ae:
18:ee:63:99:7c:67:1c:d1:23:ba:71:5d:d3:5b:8a:
bb:62:d9:55:48:2c:7d:d3:0a:77:70:1e:63:e2:b6:
01:72:c1:ed:bd:53:56:82:31:20:e1:e1:81:7f:76:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:34:F2:97:F7:F3:37:C8:42:51:7C:5F:D5:9A:34:C2:59:42:5A
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:45:19:40:18:90:25:72:60:b6:32:31:2b:27:b6:87:4d:ff:
36:1f:1b:3b:34:6d:6f:87:16:4c:07:65:f1:54:20:30:96:a1:
13:77:73:a1:2a:19:6a:39:e7:3b:e1:eb:a8:44:21:79:7c:2d:
e2:12:1f:d2:3c:83:b1:b1:f2:33:4d:e1:a5:9b:78:53:29:96:
cc:89:b2:4f:2c:01:74:da:72:ff:d6:76:b5:cb:d0:20:29:12:
0f:6c:e8:f0:59:51:bd:65:6c:3c:43:f0:a5:d7:ff:68:01:75:
c7:9f:60:de:96:d6:9c:75:ba:b1:22:ad:7f:b2:87:c0:03:58:
5d:28:1f:bf:4d:ba:3d:16:8d:aa:0a:ac:df:93:7f:f3:d3:80:
7b:1b:a5:c7:91:97:c2:af:d3:ad:ff:9c:f6:57:ec:d8:9a:27:
f0:ab:cd:54:4c:51:28:97:e4:7b:48:b8:d9:8f:13:b9:2c:91:
26:3c:98:d8:a9:fc:76:4a:c3:d0:e6:b8:1e:73:cb:8c:3a:ac:
4e:32:03:5f:24:27:35:ce:93:89:55:99:e8:72:ac:c6:b0:13:
fe:5f:2c:e6:5f:81:77:8d:c4:09:3a:22:74:0a:50:f0:79:ec:
c7:b7:7b:4b:f2:4e:9b:de:19:40:ca:f7:dc:34:8a:47:03:bb:
c4:b9:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:45 2026 by rpki-client