Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: uWOxIZl2R+/OPOjkux6S5PEg5O84eXBND4YiY1Pa2Cs=
Subject key identifier: 0D:A0:36:9D:F3:CC:74:03:ED:20:8D:26:0D:88:B5:FC:99:C9:D5:AF
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019D3AF7F7FEC0BC394FB34664391D330886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 19:00:22 +0000
Manifest this update: Sun 29 Mar 2026 19:00:22 +0000
Manifest next update: Mon 30 Mar 2026 19:00:22 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: +9Kn1J0qeOVNMXP/WCljo3sxV38P8ZoWSpeuEHnxMjQ=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f7:f7:fe:c0:bc:39:4f:b3:46:64:39:1d:33:08:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Mar 29 19:00:22 2026 GMT
Not After : Mar 30 19:00:22 2026 GMT
Subject: CN=0da0369df3cc7403ed208d260d88b5fc99c9d5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:56:52:95:b6:0a:3a:a5:bd:4d:f2:29:25:24:
e1:d8:09:ea:5e:4f:25:09:94:16:bf:d4:af:71:e9:
ce:a5:9e:5c:ef:f2:35:86:c2:0e:fe:18:0e:66:cd:
ee:af:01:ea:49:c5:ad:47:77:15:c2:cf:26:29:ff:
b5:f2:d6:0e:01:30:98:81:f3:d4:45:9a:47:fb:35:
93:d6:01:33:b5:f3:a2:45:e1:c0:0d:c5:05:33:58:
da:28:a7:80:8c:2d:6a:12:06:46:72:26:7a:16:e3:
07:e0:84:1b:a2:ae:5e:68:7a:d3:f8:c0:f4:82:54:
07:fd:16:5d:02:90:39:bd:89:c6:2f:39:e9:fb:da:
1b:c0:0f:1c:3b:cd:3d:7b:ee:a7:e3:24:7f:81:90:
4d:29:89:00:f6:a0:2c:55:5e:49:da:5b:0d:0f:56:
fa:26:5a:d4:00:50:65:2b:25:1e:b5:78:15:8c:47:
a4:8b:ea:38:4a:90:fc:bd:10:11:4d:7d:11:f1:64:
d1:23:62:6a:7e:07:41:0b:f8:f6:5a:c3:d2:ef:b1:
42:b3:5d:0b:ec:22:e0:4e:eb:cb:d0:5b:db:cf:f0:
62:98:c3:d0:85:61:38:43:66:95:71:cf:eb:8a:6b:
a4:95:41:6d:35:03:e4:d1:ee:f1:14:5b:22:b1:60:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:36:9D:F3:CC:74:03:ED:20:8D:26:0D:88:B5:FC:99:C9:D5:AF
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:db:7a:11:77:cf:22:47:ab:8b:a4:20:71:30:40:ec:6a:1f:
a2:a1:08:45:9e:91:e3:1e:ac:f7:92:d4:46:ca:a8:1f:3e:f8:
7e:6a:63:ef:c6:14:54:a7:b2:62:7a:30:ce:a4:98:ce:d5:1a:
07:8c:60:e0:53:d4:f8:1d:e3:1c:b4:e8:7d:d7:95:81:4d:a8:
63:17:ca:cc:07:fb:e6:3d:60:25:45:a1:70:b2:bd:50:dd:ca:
11:52:9e:4b:77:af:81:08:fe:b9:e9:e0:36:aa:c4:37:7e:39:
e2:4a:97:38:b9:59:b0:38:1a:52:3c:6a:fe:df:71:42:e1:10:
5e:bc:53:d6:d0:3b:92:56:2c:a5:08:14:af:66:32:f2:4c:fc:
22:46:16:77:d6:3f:f1:44:a2:63:41:31:7c:a0:bf:87:c4:17:
9c:e5:7c:0e:cc:9e:e7:ae:25:d9:ae:a7:51:2b:fb:c7:1f:6f:
4f:a5:cb:e8:b6:f2:ac:ae:f1:87:53:26:92:c9:b7:8c:87:6b:
4b:b1:b4:6f:5f:77:4a:4a:47:e9:8b:e8:78:3c:ad:86:61:53:
c6:63:41:d1:47:26:eb:84:93:7c:f6:3c:94:55:cb:fd:c2:d1:
fc:53:09:c6:ab:7c:cd:c0:53:94:00:5b:47:c7:b2:47:03:25:
9c:08:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 04:27:01 2026 by rpki-client