Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: W2Do5Gre0SEo6sWYk5tYDZJm94JGF22Sc86HMYcH22U=
Subject key identifier: AA:42:7D:31:61:FE:35:9E:B6:69:7C:3C:3C:7D:00:C1:B9:4A:C7:36
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019E32297F76E64714230098EB3DEE57EFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1923
Signing time: Sat 16 May 2026 19:00:40 +0000
Manifest this update: Sat 16 May 2026 19:00:40 +0000
Manifest next update: Sun 17 May 2026 19:00:40 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: aqNu660qtuweSsbJ2e9ubn6P53q7ql2+9fwwSVn5dUA=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:7f:76:e6:47:14:23:00:98:eb:3d:ee:57:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: May 16 19:00:40 2026 GMT
Not After : May 17 19:00:40 2026 GMT
Subject: CN=aa427d3161fe359eb6697c3c3c7d00c1b94ac736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:60:5a:c6:a5:6e:a8:f1:57:c0:03:f9:81:
13:15:50:2e:d2:df:66:dd:85:52:5d:7e:b8:d9:be:
ac:2b:49:8a:0f:25:2f:b6:54:65:57:9c:49:ae:d4:
6d:77:29:20:e2:52:b3:7a:32:fe:ad:48:93:cc:5c:
6b:60:d4:26:22:b8:3d:67:54:bd:a8:52:52:79:45:
47:81:65:3f:0a:26:5b:67:92:bf:b0:1f:a9:d5:7b:
5c:f1:a1:33:33:f9:41:7f:5d:30:5a:35:16:89:a5:
b7:59:26:73:e1:99:88:61:18:30:3b:56:ae:cb:bb:
9c:6c:c5:76:d5:3a:12:15:c2:8e:6e:a3:e8:11:7d:
76:bb:d9:0f:92:44:19:6d:8f:d4:0a:a0:1f:35:c6:
8d:fe:f3:19:1b:d3:06:c4:53:64:d0:75:f8:f6:a6:
5c:a5:0e:88:4a:6e:97:e3:83:04:61:3f:a5:5f:e1:
90:f0:bf:9d:0d:53:6d:2c:95:be:79:ce:34:6d:a7:
f0:e0:5d:0f:34:41:f4:27:28:c7:10:58:8c:b8:48:
84:97:3f:83:fd:ec:f6:58:76:75:b3:9f:98:01:17:
c9:48:2a:b2:ea:c1:20:16:9c:cc:be:3c:86:6a:90:
aa:3c:c4:ab:2c:0a:1c:3c:ba:a4:d2:cc:5b:2f:db:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:7D:31:61:FE:35:9E:B6:69:7C:3C:3C:7D:00:C1:B9:4A:C7:36
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:85:6b:0a:91:ae:7b:d9:d3:dd:29:e3:86:dc:45:eb:3f:4d:
64:51:f3:0b:7c:24:99:a8:82:0d:a4:25:5d:d3:57:3d:2a:34:
4b:72:fb:a4:3b:e2:45:40:b9:8a:14:6c:d1:f4:fe:9a:4f:2c:
c3:97:1b:57:2c:4a:be:8a:d1:7e:19:f1:5a:de:07:0e:5d:68:
e5:68:e1:02:27:72:45:65:23:df:b5:e7:29:59:5e:1a:5b:e7:
bb:0e:a3:38:7f:21:9b:5a:02:18:2e:c7:54:01:60:a9:cd:fa:
c6:1e:2b:20:bc:42:f3:b4:ba:45:96:5d:63:42:20:cb:99:0e:
48:c7:57:10:61:5d:b1:99:d9:26:56:34:f4:7f:2d:16:a1:77:
52:61:75:2d:2e:37:34:42:96:cc:79:cd:4b:8d:4e:ff:71:7c:
9d:fc:76:0d:bd:66:ab:3e:cf:2b:d7:b6:b8:0e:41:2a:20:91:
9b:16:77:e8:46:85:fb:93:01:59:80:5a:87:8c:4d:12:5d:d7:
34:b9:bc:19:db:4d:5f:be:5f:ad:49:60:ce:55:c1:da:d3:8c:
21:a7:7d:b7:9f:4d:89:14:e2:9c:ae:69:3f:5f:db:de:4a:0a:
c7:07:69:5e:93:a1:db:56:a1:51:50:15:4c:c8:80:70:5b:3b:
ed:c5:e5:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKX925kcUIwCY6z3uV+/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl
ZThkYTcwHhcNMjYwNTE2MTkwMDQwWhcNMjYwNTE3MTkwMDQwWjAzMTEwLwYDVQQD
EyhhYTQyN2QzMTYxZmUzNTllYjY2OTdjM2MzYzdkMDBjMWI5NGFjNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SJgWsalbqjxV8AD+YETFVAu0t9m
3YVSXX642b6sK0mKDyUvtlRlV5xJrtRtdykg4lKzejL+rUiTzFxrYNQmIrg9Z1S9
qFJSeUVHgWU/CiZbZ5K/sB+p1Xtc8aEzM/lBf10wWjUWiaW3WSZz4ZmIYRgwO1au
y7ucbMV21ToSFcKObqPoEX12u9kPkkQZbY/UCqAfNcaN/vMZG9MGxFNk0HX49qZc
pQ6ISm6X44MEYT+lX+GQ8L+dDVNtLJW+ec40bafw4F0PNEH0JyjHEFiMuEiElz+D
/ez2WHZ1s5+YARfJSCqy6sEgFpzMvjyGapCqPMSrLAocPLqk0sxbL9sXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpCfTFh/jWetml8PDx9AMG5Ssc2MB8GA1UdIwQY
MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt
MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5
LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6oVrCpGu
e9nT3SnjhtxF6z9NZFHzC3wkmaiCDaQlXdNXPSo0S3L7pDviRUC5ihRs0fT+mk8s
w5cbVyxKvorRfhnxWt4HDl1o5WjhAidyRWUj37XnKVleGlvnuw6jOH8hm1oCGC7H
VAFgqc36xh4rILxC87S6RZZdY0Igy5kOSMdXEGFdsZnZJlY09H8tFqF3UmF1LS43
NEKWzHnNS41O/3F8nfx2Db1mqz7PK9e2uA5BKiCRmxZ36EaF+5MBWYBah4xNEl3X
NLm8GdtNX75frUlgzlXB2tOMIad9t59NiRTinK5pP1/b3koKxwdpXpOh21ahUVAV
TMiAcFs77cXlvA==
-----END CERTIFICATE-----
Generated at Sat May 16 20:21:49 2026 by rpki-client