Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: QO3INxbYSh8Mck0rjMa5BZY/kvOrIOUHbS70Bt7o8e8=
Subject key identifier: 9E:59:86:D1:DD:C2:FF:2B:CF:A4:3B:59:94:AD:56:FC:E6:8A:2A:B1
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01A0E964A426448B42DA24966B79EC9509F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1A8B
Signing time: Mon 28 Sep 2026 19:01:21 +0000
Manifest this update: Mon 28 Sep 2026 19:01:21 +0000
Manifest next update: Tue 29 Sep 2026 19:01:21 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: 6jbZ+meUJPvcsRc5lF42AToX/7pgQJsZ462FMhHLp5E=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:a4:26:44:8b:42:da:24:96:6b:79:ec:95:09:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Sep 28 19:01:21 2026 GMT
Not After : Sep 29 19:01:21 2026 GMT
Subject: CN=9e5986d1ddc2ff2bcfa43b5994ad56fce68a2ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:1d:7b:94:3a:4d:1d:2c:54:5a:af:9f:50:
c7:28:51:b6:f3:78:a0:b7:ad:1c:0b:4d:ad:29:b5:
7e:90:be:f1:1a:cf:e5:f8:e2:5f:03:1d:d5:62:b0:
32:d3:86:32:8c:35:0f:0f:bf:f4:a0:b6:18:46:1b:
c7:a2:ba:2f:80:cd:39:23:7c:c5:3b:e1:e5:6a:76:
54:e4:09:ec:09:82:40:10:14:0c:6f:97:24:32:3d:
4e:15:9c:dd:61:96:5f:38:01:7b:f5:f7:52:53:5b:
ad:cc:a2:31:6b:c3:1e:96:8b:00:a7:09:54:d2:18:
cb:74:90:6d:ba:c4:a7:8f:f6:fc:f2:93:a2:e4:ea:
51:af:34:f0:10:d5:81:a3:bd:96:98:5f:e7:d2:fe:
06:a7:7b:62:68:9c:c2:a3:8b:c5:ee:8c:39:7b:ce:
1e:0e:73:7e:26:99:f1:45:77:07:43:c2:78:1d:71:
8a:b7:4c:bd:84:31:97:20:16:0b:f4:9a:63:87:fa:
b8:aa:2a:e5:48:ed:13:7f:33:04:5b:f4:85:ea:b0:
16:97:a1:02:94:5d:4d:cc:d1:e2:f6:12:ed:7c:c0:
f3:09:b3:0b:77:6b:c7:4c:31:78:98:a2:ca:2e:ed:
98:a3:c6:c8:fc:a8:af:9f:47:d1:75:38:5f:b8:58:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:59:86:D1:DD:C2:FF:2B:CF:A4:3B:59:94:AD:56:FC:E6:8A:2A:B1
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:7e:5d:be:ce:68:ff:1b:cd:4e:cd:cf:a1:a2:d9:92:dc:
f8:24:2a:47:27:4c:12:44:ad:62:92:ae:c9:b5:c6:10:9d:61:
df:cb:28:7f:99:ce:b4:34:de:de:da:dc:32:ad:b4:ae:fb:2a:
a8:23:32:39:00:61:1f:7b:03:46:f9:cf:70:9f:4a:04:98:cf:
27:89:a8:92:78:99:86:a0:ca:91:41:19:4c:e0:0a:cf:be:46:
7b:ed:5b:d3:45:8a:b7:af:55:9b:01:af:c1:a8:02:94:18:a6:
84:36:44:19:10:9f:85:41:87:27:82:56:e1:03:24:5c:66:f6:
79:2a:b6:99:ad:03:b9:6e:aa:54:51:8b:89:7e:e6:dd:42:6f:
b9:51:9d:62:85:7f:f0:03:22:99:37:5c:1c:24:5f:15:67:b3:
9d:a1:9b:49:8b:30:bc:89:f7:07:f9:0e:ee:9e:36:a1:77:92:
78:1f:54:70:d5:8e:d7:52:0c:e4:12:e1:be:77:d5:42:b8:d8:
cd:10:aa:dd:c1:44:87:ad:54:38:3e:2f:d2:21:54:46:91:1a:
f5:bd:fc:c5:a6:07:76:bc:f9:18:ef:62:36:39:ac:89:ab:9a:
1a:e0:e4:38:2b:36:b4:f2:35:92:ea:19:b0:f5:d5:93:0c:02:
f2:0d:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:18:21 2026 by rpki-client