Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: HVnaL3sob0HdgclJ3T90O5QqgXYYANZyDJAP9T93ezA=
Subject key identifier: 9F:E2:57:DD:B0:2E:B4:D9:3A:24:1F:04:82:8E:D9:85:79:EC:77:EE
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 019D3A1CF5DC2BF1D7C66BDB007AAB9E1950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 1113
Signing time: Sun 29 Mar 2026 15:01:09 +0000
Manifest this update: Sun 29 Mar 2026 15:01:09 +0000
Manifest next update: Mon 30 Mar 2026 15:01:09 +0000
Files and hashes: 1: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (hash: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: grao8jEe4ZVx4MZPw6A1QG7lPMWdZIpSRFtUamROgaM=)
3: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (hash: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA=)
4: PSJHF0T7csTccKL_3bcCSL4cmds.roa (hash: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs=)
5: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (hash: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU=)
6: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (hash: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f5:dc:2b:f1:d7:c6:6b:db:00:7a:ab:9e:19:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Mar 29 15:01:09 2026 GMT
Not After : Mar 30 15:01:09 2026 GMT
Subject: CN=9fe257ddb02eb4d93a241f04828ed98579ec77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:9a:d0:df:da:e7:50:c8:a4:84:3f:f9:b6:
ac:55:21:cf:27:e5:c3:22:b2:1b:aa:ce:21:76:e4:
1d:df:d6:80:60:a4:5e:6f:ed:df:c1:26:a6:b0:20:
b2:53:d3:6c:3c:a9:07:e2:40:f2:85:5a:c9:a2:cb:
16:aa:b2:08:65:2e:e9:16:a4:df:a0:2e:50:92:78:
b9:56:5d:33:e2:71:4f:b6:c4:99:b9:d5:27:ed:36:
73:c6:85:2b:a5:38:df:4b:c0:b9:db:6a:d5:28:f2:
2d:d7:21:2f:2f:92:ed:e3:54:92:e2:00:40:19:65:
f5:78:5b:39:a4:44:05:f7:5b:0c:ad:25:8b:10:2c:
b4:85:ba:69:62:d1:39:b8:4c:99:a7:a2:7e:77:0f:
06:7f:7a:64:6d:fa:40:f2:55:f8:70:ee:2e:7b:e6:
c0:9d:40:21:89:e6:0a:32:8f:9c:1c:e9:f0:9d:cf:
74:6a:39:9f:b4:b3:75:b1:d8:93:ac:36:69:e2:fc:
33:39:64:a7:6a:b2:67:19:0b:60:ca:4f:42:d4:52:
1b:4e:b5:9a:7f:56:0c:f0:20:3e:d5:77:d0:ff:04:
a9:0d:b5:e7:eb:c8:f6:f7:c5:33:dc:25:8d:1c:87:
40:1f:80:ba:da:0b:f4:33:2c:71:83:ea:8f:11:d1:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:57:DD:B0:2E:B4:D9:3A:24:1F:04:82:8E:D9:85:79:EC:77:EE
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:91:2c:99:71:db:cd:87:46:87:fb:fe:99:9a:5b:ca:c7:df:
8b:0a:ad:79:6e:4d:9d:21:87:f2:47:29:20:c0:46:21:c7:66:
a4:07:93:18:b6:75:a2:50:40:84:b8:b5:03:50:52:d3:92:ce:
42:94:f6:85:21:dc:ac:55:25:e8:9e:6d:90:13:b4:71:cf:94:
9c:60:a3:97:e3:6c:a3:a1:af:cd:08:67:a7:08:4c:ea:49:9f:
a5:3c:ed:f5:73:76:4e:a2:44:f9:03:66:88:ad:a6:37:83:e4:
73:14:ae:b1:87:ba:1f:69:4d:ff:41:d4:7a:8c:a2:b1:30:44:
11:4f:ee:1a:93:a9:bb:9b:88:36:e9:6b:9f:ee:b3:94:62:5f:
61:3a:90:40:b6:6d:a5:df:da:73:12:ed:6e:0c:f6:f5:06:fd:
8a:b6:be:8d:85:d4:96:33:d9:04:fa:7b:c8:f9:f4:07:d8:80:
e0:77:11:10:d9:8c:92:30:ac:4d:91:94:ef:81:48:6a:fc:69:
6b:a2:db:70:cd:8e:8a:4e:af:50:da:e8:be:f3:52:cb:23:f1:
d9:8d:7a:83:c6:0a:f0:1a:1b:a4:2d:65:05:3b:57:c4:7e:64:
8a:63:87:69:a5:be:0c:e4:43:85:e7:7d:91:ea:c1:4a:68:ef:
7e:ab:29:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HPXcK/HXxmvbAHqrnhlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjYwMzI5MTUwMTA5WhcNMjYwMzMwMTUwMTA5WjAzMTEwLwYDVQQD
Eyg5ZmUyNTdkZGIwMmViNGQ5M2EyNDFmMDQ4MjhlZDk4NTc5ZWM3N2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTia0N/a51DIpIQ/+basVSHPJ+XD
IrIbqs4hduQd39aAYKReb+3fwSamsCCyU9NsPKkH4kDyhVrJossWqrIIZS7pFqTf
oC5Qkni5Vl0z4nFPtsSZudUn7TZzxoUrpTjfS8C522rVKPIt1yEvL5Lt41SS4gBA
GWX1eFs5pEQF91sMrSWLECy0hbppYtE5uEyZp6J+dw8Gf3pkbfpA8lX4cO4ue+bA
nUAhieYKMo+cHOnwnc90ajmftLN1sdiTrDZp4vwzOWSnarJnGQtgyk9C1FIbTrWa
f1YM8CA+1XfQ/wSpDbXn68j298Uz3CWNHIdAH4C62gv0Myxxg+qPEdH3WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/iV92wLrTZOiQfBIKO2YV57HfuMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5EsmXHb
zYdGh/v+mZpbysffiwqteW5NnSGH8kcpIMBGIcdmpAeTGLZ1olBAhLi1A1BS05LO
QpT2hSHcrFUl6J5tkBO0cc+UnGCjl+Nso6GvzQhnpwhM6kmfpTzt9XN2TqJE+QNm
iK2mN4PkcxSusYe6H2lN/0HUeoyisTBEEU/uGpOpu5uINulrn+6zlGJfYTqQQLZt
pd/acxLtbgz29Qb9ira+jYXUljPZBPp7yPn0B9iA4HcRENmMkjCsTZGU74FIavxp
a6LbcM2Oik6vUNrovvNSyyPx2Y16g8YK8BobpC1lBTtXxH5kimOHaaW+DORDhed9
kerBSmjvfqspLQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:47 2026 by rpki-client