Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: QDU1GnPfWxI+5CCzsbepdUNrjc0H85Jq0QKVpryIOec=
Subject key identifier: 9C:AB:5D:50:44:E2:AF:FA:B5:F6:49:F3:B2:F1:E8:C2:23:A3:27:61
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 019D3940F5D0304A2CBC8DB82DAEF223A869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: 4MiAJwzR0PPxr-dliGFjke8_QaQ.roa (hash: ZxnOdzgWsAp09tFBm2XqBvLkxANnIjozT0brrxAIWL4=)
2: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: JrFFGg0VLLPJXGSBSGlhr0vJsJvVwQ8VjubMv8ers/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f5:d0:30:4a:2c:bc:8d:b8:2d:ae:f2:23:a8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=9cab5d5044e2affab5f649f3b2f1e8c223a32761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:06:df:fb:f6:e4:99:84:cd:b2:80:ab:5a:
88:69:7a:ba:44:e8:f9:b1:95:06:db:81:70:10:4e:
10:5f:fe:42:dd:bf:df:7a:fd:ac:78:27:84:b2:0d:
00:9c:0b:3a:4b:36:bf:ef:a9:26:24:ee:9b:e0:00:
29:b5:ac:e4:f9:c4:59:45:1b:4a:67:6d:f7:94:6d:
15:d8:8b:dc:34:82:04:0b:33:df:09:87:0d:2e:15:
97:db:0d:9d:06:4c:ba:ca:5e:93:6d:d7:9d:25:cc:
1b:51:52:01:0b:b4:53:66:b9:7d:76:27:1a:db:b7:
b0:cc:f0:c4:bf:37:e4:ee:2f:61:95:59:2b:69:b4:
ee:09:4f:63:61:49:80:67:35:32:13:54:fa:e3:ec:
44:92:ba:ba:f1:27:53:fc:79:ba:f7:af:07:01:bc:
95:49:19:33:7b:55:9c:98:e1:39:64:95:73:02:84:
45:be:69:91:f8:58:eb:af:22:da:01:21:bd:86:46:
9f:13:44:f8:cc:d6:03:08:39:a7:6f:c8:95:67:6f:
80:bc:52:2c:b4:9e:34:9c:fb:ff:9e:b6:33:e7:06:
48:c0:15:1b:d8:d4:75:8f:65:1d:ef:48:12:d1:0a:
c0:c5:a9:b0:05:38:a5:d8:4f:01:6d:2d:70:ed:2c:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:5D:50:44:E2:AF:FA:B5:F6:49:F3:B2:F1:E8:C2:23:A3:27:61
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:49:a3:54:27:75:05:ff:86:a2:17:f1:5a:2f:46:56:0a:
c6:98:7b:e4:c1:33:37:b4:c0:23:b1:08:91:22:eb:e0:1b:f9:
9c:f6:5d:13:66:42:4d:1a:b4:f6:5d:b3:60:f0:62:c4:1f:9a:
5e:19:46:d2:c8:fe:94:c0:8e:b4:84:ba:dd:e5:4e:79:ff:48:
d0:0c:52:14:d0:1f:86:b9:c2:1e:94:1f:0d:ec:6a:49:51:ae:
8e:8c:1a:a7:a7:c2:e0:bf:5b:7f:bb:9c:b6:ae:a2:1a:68:f2:
7d:33:80:4e:e2:20:33:fe:34:8e:e7:5c:09:90:f1:23:c1:bf:
69:25:ed:82:40:4e:47:7c:6a:bc:95:36:2b:f4:40:22:ac:1b:
c4:14:66:62:3c:8f:cf:bf:34:02:39:58:e0:d6:50:a5:4a:c2:
7d:e3:e9:37:c4:3f:d0:13:86:0e:98:aa:68:04:6a:28:cf:bf:
1d:3b:95:36:cf:71:e5:09:b7:92:a4:fa:96:ee:35:33:32:7b:
dc:0e:05:e2:8f:32:8f:89:2f:00:de:5f:82:19:67:de:dd:ca:
d8:68:ca:43:9c:5c:c4:2e:e4:7b:f4:5b:8b:6b:06:c7:84:d7:
e6:6b:84:92:b8:34:f9:53:e8:fd:f5:65:16:e6:77:de:15:c6:
6e:6a:f9:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPXQMEosvI24La7yI6hpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk
OTMwZWIwHhcNMjYwMzI5MTEwMDUxWhcNMjYwMzMwMTEwMDUxWjAzMTEwLwYDVQQD
Eyg5Y2FiNWQ1MDQ0ZTJhZmZhYjVmNjQ5ZjNiMmYxZThjMjIzYTMyNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkegG3/v25JmEzbKAq1qIaXq6ROj5
sZUG24FwEE4QX/5C3b/fev2seCeEsg0AnAs6Sza/76kmJO6b4AAptazk+cRZRRtK
Z233lG0V2IvcNIIECzPfCYcNLhWX2w2dBky6yl6TbdedJcwbUVIBC7RTZrl9dica
27ewzPDEvzfk7i9hlVkrabTuCU9jYUmAZzUyE1T64+xEkrq68SdT/Hm6968HAbyV
SRkze1WcmOE5ZJVzAoRFvmmR+FjrryLaASG9hkafE0T4zNYDCDmnb8iVZ2+AvFIs
tJ40nPv/nrYz5wZIwBUb2NR1j2Ud70gS0QrAxamwBTil2E8BbS1w7Sx1UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyrXVBE4q/6tfZJ87Lx6MIjoydhMB8GA1UdIwQY
MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt
MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0
LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd1Jo1Qn
dQX/hqIX8VovRlYKxph75MEzN7TAI7EIkSLr4Bv5nPZdE2ZCTRq09l2zYPBixB+a
XhlG0sj+lMCOtIS63eVOef9I0AxSFNAfhrnCHpQfDexqSVGujowap6fC4L9bf7uc
tq6iGmjyfTOATuIgM/40judcCZDxI8G/aSXtgkBOR3xqvJU2K/RAIqwbxBRmYjyP
z780AjlY4NZQpUrCfePpN8Q/0BOGDpiqaARqKM+/HTuVNs9x5Qm3kqT6lu41MzJ7
3A4F4o8yj4kvAN5fghln3t3K2GjKQ5xcxC7ke/Rbi2sGx4TX5muEkrg0+VPo/fVl
FuZ33hXGbmr5eA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:26:30 2026 by rpki-client