Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: JbqVwRAC9RHCOJTTdAEHqJqgIv5YRA9dCOoH4eAr3UA=
Subject key identifier: 48:0D:6C:AE:EA:1F:B5:FE:80:DF:B9:91:CF:86:4E:A4:12:94:4E:8E
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01A003942957DF1A27491CF1C5D145370833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1A14
Signing time: Sat 15 Aug 2026 04:00:36 +0000
Manifest this update: Sat 15 Aug 2026 04:00:36 +0000
Manifest next update: Sun 16 Aug 2026 04:00:36 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: clu32ktJNfIGxtdmCVPgaImP16aWaZ6oxwD/Q87lgHQ=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:29:57:df:1a:27:49:1c:f1:c5:d1:45:37:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Aug 15 04:00:36 2026 GMT
Not After : Aug 16 04:00:36 2026 GMT
Subject: CN=480d6caeea1fb5fe80dfb991cf864ea412944e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:8a:47:32:18:65:45:4c:24:ba:ae:6d:a6:
23:a3:4d:83:b1:fb:ee:3f:8e:63:72:73:fc:4e:7e:
cd:2d:28:ba:97:8c:5d:72:9c:8c:d7:c4:dd:6d:20:
70:dd:80:1d:28:56:56:3a:2b:03:25:c3:d8:c7:d2:
40:dd:25:55:78:b4:a8:51:7b:f2:8b:b9:73:0d:f2:
96:6c:da:bf:f6:4b:7f:ee:f4:fc:f6:21:14:ac:d9:
e6:ff:58:f2:d4:d0:4e:38:26:7f:c4:58:f2:11:da:
c5:55:25:cb:70:e1:f5:09:30:a8:d5:1b:5d:f1:09:
04:a1:eb:4c:42:63:ef:bb:35:6d:78:6e:b5:66:19:
b4:d9:b0:bb:ee:38:f9:fa:e1:fb:5c:9a:7f:dd:0b:
8c:4c:c5:5e:a4:f5:d7:91:03:f9:13:38:3a:dd:f9:
e8:8b:56:ca:17:fc:29:9f:e0:d0:49:25:91:64:48:
d0:db:82:09:08:fc:0d:4d:e3:24:ed:98:62:97:b3:
1a:a5:c2:f7:81:29:57:92:ec:96:86:04:5a:eb:19:
33:e3:07:04:11:c1:06:d0:df:ec:d0:37:50:38:ca:
d4:42:85:eb:58:ce:be:ab:3d:1a:6c:04:e9:ce:1e:
30:1a:0d:f9:9f:5d:5c:ce:f1:64:19:14:9b:67:3b:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:6C:AE:EA:1F:B5:FE:80:DF:B9:91:CF:86:4E:A4:12:94:4E:8E
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:b3:dc:e7:8c:32:90:40:70:6a:13:d4:3a:7c:1d:5a:25:
51:4d:00:e0:54:8d:1e:5f:bf:5e:b1:9e:65:0e:38:5b:9a:2c:
ea:bb:8d:50:f7:0f:f3:e5:1a:e0:e6:68:93:f5:d2:14:fc:a5:
4e:51:3b:a1:eb:4d:00:00:70:12:a2:74:cc:da:8b:2d:6e:8f:
f0:ed:b7:b7:bc:76:a9:e7:ae:18:75:89:ae:57:ce:0b:54:3a:
e8:84:dc:dd:ac:a4:85:13:53:7c:df:cc:17:eb:41:fc:95:38:
87:55:ec:8d:c7:cb:c1:5c:ac:cc:08:09:4e:1d:e9:07:c0:a9:
90:f2:91:11:14:ed:f5:33:04:48:f1:f9:00:75:18:1d:fe:12:
4e:53:64:a5:fb:fd:8d:a4:95:df:38:31:12:e7:73:33:0e:61:
e0:e3:26:98:76:1c:e2:96:81:24:b2:f6:00:94:37:46:ef:c1:
fd:e3:fe:1f:63:47:ba:3e:a7:4b:a6:38:67:7d:4e:fd:9d:4b:
c1:3c:9d:c9:43:36:71:8f:5a:b5:5f:9d:4e:eb:a5:b1:f1:d9:
b3:3c:1c:c2:01:14:04:82:5a:c5:ac:bb:0b:08:56:0c:23:c2:
77:ae:9d:77:13:c1:83:97:54:4a:da:55:f7:45:eb:c3:26:a1:
4c:3f:cc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlClX3xonSRzxxdFFNwgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjYwODE1MDQwMDM2WhcNMjYwODE2MDQwMDM2WjAzMTEwLwYDVQQD
Eyg0ODBkNmNhZWVhMWZiNWZlODBkZmI5OTFjZjg2NGVhNDEyOTQ0ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJKKRzIYZUVMJLqubaYjo02Dsfvu
P45jcnP8Tn7NLSi6l4xdcpyM18TdbSBw3YAdKFZWOisDJcPYx9JA3SVVeLSoUXvy
i7lzDfKWbNq/9kt/7vT89iEUrNnm/1jy1NBOOCZ/xFjyEdrFVSXLcOH1CTCo1Rtd
8QkEoetMQmPvuzVteG61Zhm02bC77jj5+uH7XJp/3QuMTMVepPXXkQP5Ezg63fno
i1bKF/wpn+DQSSWRZEjQ24IJCPwNTeMk7Zhil7MapcL3gSlXkuyWhgRa6xkz4wcE
EcEG0N/s0DdQOMrUQoXrWM6+qz0abATpzh4wGg35n11czvFkGRSbZztNZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgNbK7qH7X+gN+5kc+GTqQSlE6OMB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnyz3OeM
MpBAcGoT1Dp8HVolUU0A4FSNHl+/XrGeZQ44W5os6ruNUPcP8+Ua4OZok/XSFPyl
TlE7oetNAABwEqJ0zNqLLW6P8O23t7x2qeeuGHWJrlfOC1Q66ITc3aykhRNTfN/M
F+tB/JU4h1XsjcfLwVyszAgJTh3pB8CpkPKRERTt9TMESPH5AHUYHf4STlNkpfv9
jaSV3zgxEudzMw5h4OMmmHYc4paBJLL2AJQ3Ru/B/eP+H2NHuj6nS6Y4Z31O/Z1L
wTydyUM2cY9atV+dTuulsfHZszwcwgEUBIJaxay7CwhWDCPCd66ddxPBg5dUStpV
90XrwyahTD/MwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:45 2026 by rpki-client