Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: /Wve7ohYtjx1KBzHZLKqdEzHIi13mNAI7BQBbIPtrk8=
Subject key identifier: B7:36:90:BF:29:31:7F:E2:18:8C:6C:09:BF:2F:0A:3D:33:34:98:2C
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019CADFE49DA06CCA0F38EA81A22AAC5D4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 185A
Signing time: Mon 02 Mar 2026 10:00:49 +0000
Manifest this update: Mon 02 Mar 2026 10:00:49 +0000
Manifest next update: Tue 03 Mar 2026 10:00:49 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: CsCVQtM4b/MzNFsNz8wcyJr4/fkemeJhWVgfexmdZW4=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:49:da:06:cc:a0:f3:8e:a8:1a:22:aa:c5:d4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Mar 2 10:00:49 2026 GMT
Not After : Mar 3 10:00:49 2026 GMT
Subject: CN=b73690bf29317fe2188c6c09bf2f0a3d3334982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:05:79:e5:2c:8c:dc:3d:f8:ca:c2:eb:a8:
9e:a9:65:e6:06:b1:a0:1b:0f:c5:ea:86:3d:6e:55:
70:c6:01:89:bb:05:00:ec:f1:12:40:2a:67:46:af:
ff:93:fa:8d:59:51:d5:53:c9:11:63:ee:74:62:9b:
e7:3b:b6:d6:34:f3:ad:98:7d:a1:a0:55:87:2e:21:
6b:f0:97:30:d8:d2:5c:64:c6:ca:f3:fe:e7:8f:75:
24:bd:df:42:dc:36:8b:53:25:85:44:d8:87:cf:b9:
10:9b:f5:ee:56:96:67:18:26:ce:bd:92:a3:b1:93:
60:e1:4c:7c:8c:9e:8f:ed:ae:13:42:e8:02:61:fb:
66:c8:21:79:07:b6:79:c8:08:65:45:0a:af:9c:e3:
54:0e:6a:f1:92:59:67:7e:5e:9a:9e:4f:8e:43:d6:
15:8e:94:f5:a9:31:96:3c:dc:9c:02:ad:6f:4e:a3:
77:15:c1:51:aa:0a:6d:a0:ce:fd:8c:01:46:c3:b4:
57:03:05:16:0b:0a:f9:e0:a9:74:e7:10:06:ef:88:
72:02:bf:84:93:7c:42:08:a3:70:e2:ec:00:87:28:
06:25:8b:a0:cb:6f:3f:57:d4:5e:a3:d3:50:7f:9c:
2f:74:80:31:87:07:c9:65:04:8b:bc:3d:20:0b:26:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:90:BF:29:31:7F:E2:18:8C:6C:09:BF:2F:0A:3D:33:34:98:2C
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:15:16:2f:25:30:c1:66:ae:04:0d:94:0a:3e:af:6d:9e:5c:
1f:4a:97:63:34:3e:ea:5f:a0:b5:a8:0b:ad:0a:98:5c:64:f0:
67:30:a6:88:e9:ba:77:aa:d1:f8:52:49:26:7e:0d:85:1d:57:
ee:73:c9:67:0f:cb:fd:39:ee:f2:b0:d3:04:83:f4:78:27:41:
4d:1b:9c:0a:3b:a0:74:74:44:66:5d:3a:18:14:54:b9:35:af:
16:2a:74:bc:60:f3:d1:81:4d:b1:e7:1e:89:06:28:89:55:c2:
1e:23:e4:5a:bf:1e:c8:88:d3:8a:75:0e:63:d2:71:c1:fe:f1:
f4:af:b8:3a:2e:55:c4:9b:9e:6a:7b:9b:ba:a7:03:38:32:7d:
c0:3a:46:6b:bd:15:44:04:c5:07:ea:9f:ec:bf:dd:7e:5a:68:
ca:b5:14:28:04:c4:53:39:a3:61:97:37:00:a9:23:16:17:64:
93:29:2e:dc:1a:fb:f4:92:56:c8:7b:3c:fc:69:03:95:ba:4d:
ab:bd:33:01:1b:61:e0:e7:a9:f5:ec:c7:47:e2:bd:08:9a:e8:
0e:0c:d4:82:4d:f3:90:7a:6d:41:ad:c5:4a:98:be:2c:67:d6:
f6:80:1f:ef:55:52:24:22:2b:59:e9:9e:5d:83:82:57:a0:91:
a9:48:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:57 2026 by rpki-client