Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: /abT4l7ef08wZC1DyJv4iH7tW0cDAkvvUcT9G/XgzRA=
Subject key identifier: DC:65:5B:D0:33:60:E6:3C:F3:EA:67:72:C1:73:58:A9:90:EF:FC:39
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01A0FEA2DA772979CFEB33260395A1B68959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1A96
Signing time: Fri 02 Oct 2026 22:01:20 +0000
Manifest this update: Fri 02 Oct 2026 22:01:20 +0000
Manifest next update: Sat 03 Oct 2026 22:01:20 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: HfO3jv/j3QOPEZn/TL1QcY5gR7+IrUAT5v/Qa8UcjAU=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:a2:da:77:29:79:cf:eb:33:26:03:95:a1:b6:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Oct 2 22:01:20 2026 GMT
Not After : Oct 3 22:01:20 2026 GMT
Subject: CN=dc655bd03360e63cf3ea6772c17358a990effc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:c6:51:ef:c0:8b:60:f7:5f:e3:7f:8e:8f:
6d:6b:a2:b4:6a:62:03:82:5f:31:cd:ec:72:c4:8a:
df:3e:9e:7f:06:a2:a2:43:7a:b4:85:7a:86:3e:5f:
2c:75:25:87:0f:6d:55:b0:86:ff:2c:19:b0:ac:24:
58:42:09:74:3f:6e:e2:64:08:96:1f:2e:ff:7e:9c:
83:5b:1b:6a:cb:e0:74:47:ec:92:c5:5c:01:78:65:
46:49:66:72:52:52:d9:f4:2f:61:e1:72:48:3d:2b:
80:53:14:ee:83:2f:2f:7b:ab:7c:39:fc:81:6c:59:
c9:55:cc:05:6e:de:60:b9:62:8d:bb:79:82:ca:3c:
a4:4f:f8:3f:4a:09:95:6f:94:39:94:15:94:4d:2a:
c8:29:d8:81:68:22:a6:64:cb:14:44:c9:66:3e:12:
96:59:fe:9a:d5:92:cb:25:17:22:12:f1:ac:15:42:
ef:bb:b5:a3:ab:9c:5a:06:00:b9:14:9a:f1:f8:c4:
66:fa:89:1a:60:bf:72:2e:2f:b2:53:99:e6:87:29:
78:ea:78:79:c6:b1:a4:63:54:b6:60:92:f3:98:51:
d6:32:96:e7:29:ce:a2:33:73:45:b7:51:9e:82:21:
de:c3:a6:7f:04:37:f5:1a:23:ff:57:e9:fe:0f:0b:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:5B:D0:33:60:E6:3C:F3:EA:67:72:C1:73:58:A9:90:EF:FC:39
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:7c:b3:8c:22:ba:d7:60:9a:9b:66:26:93:32:74:9c:89:
af:f4:38:2d:5a:64:7b:fb:10:2c:e5:69:de:37:51:17:53:47:
63:4a:0d:ef:ce:7f:93:fb:dd:72:bf:fe:52:d2:af:93:ba:6e:
d6:0b:bc:a9:84:00:15:e3:1a:dd:6d:14:58:46:40:52:9f:0d:
07:39:d3:86:e7:62:96:f6:33:6e:52:4e:86:15:c3:02:44:95:
aa:66:e7:49:ec:26:82:fa:27:f9:d2:fb:f2:6c:b3:15:de:95:
31:fc:7f:ca:70:57:ec:46:87:76:a7:ed:73:83:fa:02:01:2d:
b8:8b:75:ae:6f:94:68:b9:b8:df:04:2a:bc:06:b5:a5:9a:51:
39:4e:e5:f7:73:a9:f8:12:f2:ed:48:e3:5f:67:cb:56:e4:3b:
77:8a:11:70:ba:11:63:dc:e9:69:13:77:d3:8d:ff:3e:b2:d0:
ec:36:08:5f:06:6f:aa:42:d2:fc:a5:5c:d9:fa:1c:8a:5a:59:
9b:91:29:6f:38:59:98:40:ba:18:f5:b8:b2:49:04:5f:c0:3a:
4c:03:49:0d:9c:e3:f0:eb:87:1a:00:39:c4:fd:49:19:66:02:
4a:60:0d:16:ee:ec:2e:e9:8f:9d:aa:69:f0:96:c6:c5:5f:2c:
01:d6:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 07:43:28 2026 by rpki-client