Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: xyjgkZ4TOHMjcUq4R8fQcx3zNT4Iix1N1foWNOcF90w=
Subject key identifier: 09:08:72:15:EE:8A:87:79:9D:35:10:01:C8:25:DE:A5:D5:E1:50:7B
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019EC3007F7DD2DE40F9E407E443A16FE8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 196E
Signing time: Sat 13 Jun 2026 22:00:49 +0000
Manifest this update: Sat 13 Jun 2026 22:00:49 +0000
Manifest next update: Sun 14 Jun 2026 22:00:49 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: oaL5tzIudoDuycTsBbMgdGRc+fCrK6xCndw3gLFy9BI=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:7f:7d:d2:de:40:f9:e4:07:e4:43:a1:6f:e8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jun 13 22:00:49 2026 GMT
Not After : Jun 14 22:00:49 2026 GMT
Subject: CN=09087215ee8a87799d351001c825dea5d5e1507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:9e:43:4d:d7:02:4d:da:a6:f9:e0:45:b9:
e7:9a:ff:02:e8:f7:4f:8f:68:29:9f:1b:90:24:6e:
d5:96:ba:84:a2:6c:43:29:d4:62:33:0f:12:4e:bd:
d8:c6:5c:23:2d:a4:3e:99:1b:a3:88:76:df:12:70:
57:ec:67:a7:8c:dc:fb:60:06:23:21:05:5e:d6:ce:
06:1f:59:fe:44:05:7e:5d:bc:db:15:73:35:de:3a:
3e:1d:2e:63:3a:44:58:5d:ad:9c:df:cf:3d:c6:17:
29:48:2c:4f:5b:b0:dc:8a:86:98:84:68:e6:61:28:
b2:97:9f:8c:72:05:3f:bb:0a:93:2a:1b:c4:f6:1c:
ed:fc:b1:76:26:50:b2:56:40:89:fe:fa:a9:4e:b5:
2b:e1:42:54:ad:bd:53:33:d8:60:74:81:5d:61:f7:
1a:92:06:ad:de:30:95:22:44:7a:49:75:0e:21:ad:
db:e6:b0:0e:5d:17:e3:d1:e9:8a:e1:c1:1d:bc:f3:
d5:b9:dc:cf:8d:11:a6:98:de:44:49:ab:75:b7:98:
33:28:a6:b6:17:0b:1d:c5:79:89:16:eb:6f:cc:28:
25:56:60:8f:96:87:d0:8f:af:d6:02:db:66:a8:54:
ae:38:32:c1:a8:26:a1:c2:bd:8f:66:d6:d8:3f:d6:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:72:15:EE:8A:87:79:9D:35:10:01:C8:25:DE:A5:D5:E1:50:7B
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d1:2e:52:d6:60:03:a9:a2:89:b1:46:55:7e:64:3d:e2:58:
75:9b:f7:2d:76:e6:f5:9f:d8:76:a1:92:04:50:c4:92:47:05:
77:81:99:f0:ed:7d:91:d9:d5:8c:fb:e8:ee:f6:ac:35:8b:3d:
14:12:8f:18:d7:e6:e4:99:d7:de:35:37:34:ab:65:ff:ce:66:
08:7a:69:e9:61:41:1c:66:bf:67:d0:80:c7:60:60:6e:de:3f:
a2:c1:31:18:39:42:68:14:a6:d9:37:95:95:05:12:16:82:c8:
ae:34:ab:65:36:ef:3e:f3:8c:09:db:d5:41:3e:0a:91:08:a6:
a0:aa:aa:34:0e:8b:64:7f:ec:d6:fc:bf:a9:c0:84:64:e6:c4:
1f:9b:f6:60:54:ab:3c:27:69:d8:ca:56:2c:57:9b:09:3b:0b:
44:57:fa:c5:03:0f:3d:67:c1:89:c2:55:33:ff:f9:80:36:50:
ad:fc:22:6e:4a:ec:de:44:53:20:8f:e7:73:07:14:7a:c2:66:
86:e3:d6:ea:53:88:10:28:b2:3f:36:fd:84:8d:43:a4:6c:09:
b5:88:98:5d:9a:d3:58:c5:7b:0b:52:91:24:fd:2e:87:b9:aa:
c9:f1:2e:d0:fb:68:61:21:8f:2f:be:0c:9b:58:0b:bd:0f:4d:
d3:be:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:35:20 2026 by rpki-client