Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: 7+j8DDXEo0+ly23iieQBKD8WRmycWf0s5MTub5O3vXw=
Subject key identifier: 27:93:94:43:D0:50:D8:97:53:F4:23:19:EB:A8:D0:4A:56:02:37:35
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019D2997A3FF6706FB143A4C95219C57AE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 10:01:36 +0000
Manifest this update: Thu 26 Mar 2026 10:01:36 +0000
Manifest next update: Fri 27 Mar 2026 10:01:36 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: GfwTdWHAOoFj4+M/FYZa00yp3huyFrNaXKtfMZ8hL5M=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:a3:ff:67:06:fb:14:3a:4c:95:21:9c:57:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Mar 26 10:01:36 2026 GMT
Not After : Mar 27 10:01:36 2026 GMT
Subject: CN=27939443d050d89753f42319eba8d04a56023735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:33:0e:bb:f6:62:49:99:80:3e:6a:00:a6:
18:bb:db:24:fc:4e:aa:4b:d9:b4:29:f3:f7:a8:4c:
0b:8c:24:54:5e:cd:05:af:6a:60:76:02:90:51:e6:
c1:36:fa:61:a0:a3:9f:f8:91:9a:a1:bd:98:d1:52:
53:fa:8e:cf:96:f9:0c:3f:7b:8d:3a:6f:db:e2:3d:
11:22:d1:e5:81:c7:ef:8a:1a:0b:2c:84:9e:62:d7:
f0:30:fa:32:b7:02:05:c2:a6:31:df:45:74:ae:47:
ea:35:c0:38:7d:4b:9e:52:d1:61:d9:69:fa:31:f8:
8f:13:67:fd:80:1c:09:18:82:a1:99:7f:aa:fc:fc:
da:23:20:1f:39:88:a8:15:8a:6c:60:38:1c:0a:fd:
65:06:56:39:84:6e:1e:99:3a:c3:78:a6:90:d9:3b:
cf:fa:04:aa:bb:26:f9:cc:13:9b:5d:00:94:6f:cd:
59:be:f6:8a:d2:06:c7:92:4b:55:76:fe:ad:81:68:
58:fc:e4:dd:68:21:6a:a1:bb:15:66:14:8f:f8:ce:
61:1d:9d:ea:a9:68:af:23:5d:2c:07:f3:12:56:04:
af:1a:d0:2c:93:75:c5:dd:43:f1:01:d3:6d:39:54:
ad:15:75:da:3c:78:57:7f:0c:16:c6:3b:80:c2:41:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:94:43:D0:50:D8:97:53:F4:23:19:EB:A8:D0:4A:56:02:37:35
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:30:1b:8b:4c:a4:af:67:96:19:9f:18:1a:26:48:ec:a1:a5:
88:3c:a0:bc:4f:a7:32:7b:82:63:8f:a6:a4:ae:58:e0:e6:43:
ee:6e:01:cf:c4:e4:d8:6a:be:bf:13:2b:a4:a3:8d:18:20:a4:
bf:e8:18:39:b5:f1:a6:19:e9:a9:7c:01:15:e9:82:5f:3e:d0:
cf:41:08:05:1c:87:5a:95:fe:eb:7b:94:12:18:69:a6:8e:1d:
75:ff:41:86:96:31:7e:05:63:ba:2a:0b:ef:26:4f:71:e5:ff:
7e:15:4a:bf:af:ff:f9:82:e9:0d:44:0e:30:88:64:30:fb:12:
fc:10:20:10:fd:61:5d:2d:c1:3c:d9:9c:13:9f:f4:14:0d:ed:
82:31:ad:4e:b6:d1:88:8a:da:20:7a:c0:27:f5:5d:93:29:a5:
f2:ca:10:11:01:c2:5e:81:18:f0:00:3b:1a:5e:62:20:e8:94:
10:bd:14:7b:21:fc:a0:fe:09:fa:cd:c4:f7:8b:9a:7a:ef:55:
a7:80:a5:7d:c3:05:69:e6:49:18:a9:c0:e9:55:e6:67:ad:3a:
e9:3c:07:2f:ab:e1:e1:7b:16:c6:6a:fd:66:b7:e7:00:04:a1:
fb:0b:b1:c4:04:2e:81:49:a9:82:03:ef:41:5d:58:70:0d:cc:
9d:87:50:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl6P/Zwb7FDpMlSGcV658MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjYwMzI2MTAwMTM2WhcNMjYwMzI3MTAwMTM2WjAzMTEwLwYDVQQD
EygyNzkzOTQ0M2QwNTBkODk3NTNmNDIzMTllYmE4ZDA0YTU2MDIzNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E4zDrv2YkmZgD5qAKYYu9sk/E6q
S9m0KfP3qEwLjCRUXs0Fr2pgdgKQUebBNvphoKOf+JGaob2Y0VJT+o7PlvkMP3uN
Om/b4j0RItHlgcfvihoLLISeYtfwMPoytwIFwqYx30V0rkfqNcA4fUueUtFh2Wn6
MfiPE2f9gBwJGIKhmX+q/PzaIyAfOYioFYpsYDgcCv1lBlY5hG4emTrDeKaQ2TvP
+gSquyb5zBObXQCUb81ZvvaK0gbHkktVdv6tgWhY/OTdaCFqobsVZhSP+M5hHZ3q
qWivI10sB/MSVgSvGtAsk3XF3UPxAdNtOVStFXXaPHhXfwwWxjuAwkG2nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeTlEPQUNiXU/QjGeuo0EpWAjc1MB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezAbi0yk
r2eWGZ8YGiZI7KGliDygvE+nMnuCY4+mpK5Y4OZD7m4Bz8Tk2Gq+vxMrpKONGCCk
v+gYObXxphnpqXwBFemCXz7Qz0EIBRyHWpX+63uUEhhppo4ddf9BhpYxfgVjuioL
7yZPceX/fhVKv6//+YLpDUQOMIhkMPsS/BAgEP1hXS3BPNmcE5/0FA3tgjGtTrbR
iIraIHrAJ/Vdkyml8soQEQHCXoEY8AA7Gl5iIOiUEL0UeyH8oP4J+s3E94uaeu9V
p4ClfcMFaeZJGKnA6VXmZ6066TwHL6vh4XsWxmr9ZrfnAASh+wuxxAQugUmpggPv
QV1YcA3MnYdQCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:14 2026 by rpki-client