Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: d+jQohTQebJ5YkL484Ea7QC8cuSBTjud84vJWBBV7hw=
Subject key identifier: C9:64:7A:EE:9B:98:12:4D:A4:CF:4B:F4:2C:1A:D5:8E:07:8C:18:5E
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019F19E7BD22D1777857EE8580C017637273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 199B
Signing time: Tue 30 Jun 2026 19:00:45 +0000
Manifest this update: Tue 30 Jun 2026 19:00:45 +0000
Manifest next update: Wed 01 Jul 2026 19:00:45 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: DBZlm3mfZ5yTJTaHc9rhhBnlf+QjDzbqM7yo4E34TyQ=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e7:bd:22:d1:77:78:57:ee:85:80:c0:17:63:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jun 30 19:00:45 2026 GMT
Not After : Jul 1 19:00:45 2026 GMT
Subject: CN=c9647aee9b98124da4cf4bf42c1ad58e078c185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:e8:24:00:ca:44:36:e7:6d:1d:98:3f:39:
9c:e1:ef:e3:de:e2:e9:92:71:bb:93:d0:a5:8a:c5:
79:be:d6:de:a0:f3:25:e4:c1:ee:50:1a:4a:69:61:
d4:ac:32:90:af:bd:f8:e4:e5:1b:da:aa:05:ac:70:
8e:5e:82:94:9f:37:2c:69:df:4d:29:08:11:3e:fd:
af:02:73:94:5a:13:a9:3d:5e:be:b6:e4:61:66:e7:
f7:cc:a2:06:05:03:0b:e0:0f:68:78:32:b6:06:6f:
ad:76:43:b8:10:a5:bd:22:39:72:da:c1:6e:11:6c:
09:d1:ae:9b:1b:0f:40:9b:74:9f:cc:12:bf:55:bb:
24:50:58:ae:29:d1:57:a6:40:a6:bf:3c:d4:b4:b9:
b0:d3:0c:e1:36:1c:5d:94:57:cf:08:54:1e:a1:ae:
40:13:44:3e:7d:20:80:93:7a:41:30:52:d4:b1:01:
52:a6:ff:7e:2a:5c:45:76:b6:38:89:7c:3f:d7:aa:
54:30:09:45:96:3a:a9:d9:b1:e3:68:8d:a0:c7:3b:
aa:ef:2c:a4:2c:1a:fd:f1:f4:22:9e:d0:72:0b:ea:
27:1c:ee:16:cc:02:2d:58:02:7e:50:35:c0:12:05:
01:57:54:0d:29:b5:49:46:8f:eb:7b:90:82:25:31:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:7A:EE:9B:98:12:4D:A4:CF:4B:F4:2C:1A:D5:8E:07:8C:18:5E
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6c:1c:cc:54:0c:16:75:99:4e:b1:a4:30:f0:7f:5c:14:b4:
3d:aa:5f:1b:0a:c7:7b:a7:2c:2b:35:29:42:df:74:44:e6:af:
36:13:76:21:12:0f:3d:dd:48:a0:05:b8:d8:7c:92:af:18:57:
66:cf:1c:f8:99:fd:d8:5b:f6:e5:45:80:d5:f7:9d:99:97:6d:
bf:1f:78:bc:1c:a1:6f:72:0d:c6:f1:23:c1:6f:e7:7d:01:37:
8c:c6:b1:4b:75:5b:ed:69:6d:6f:36:8b:6b:94:fd:0e:38:eb:
38:7e:60:3e:a6:47:60:c2:e0:52:23:e8:a0:e1:77:ea:0e:12:
3e:cd:26:0c:d6:a9:f4:a5:48:14:bc:5c:b7:43:0f:78:da:d7:
8c:10:83:0f:29:4e:c9:d9:b6:66:07:b1:bd:9c:8c:bd:ec:75:
40:ff:79:b2:cf:f2:7f:07:f8:3a:25:6b:c4:71:36:42:55:ec:
b8:50:79:f4:40:3d:2d:90:a3:67:39:1f:7e:f0:76:bc:f6:59:
6e:0c:8e:96:ce:f3:b6:83:f3:d1:35:d6:f1:38:58:c8:3a:be:
94:3c:cc:e8:17:f5:5c:3b:9a:33:b7:b1:92:5b:89:95:85:d8:
51:c3:5c:77:44:4c:c3:a3:80:89:32:b3:43:a8:c1:e0:22:89:
34:8d:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:20:33 2026 by rpki-client