Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: 5Km5zWVHcELgVqTtK7xLDyrT2JQdKJ6iZmltZd+VSOs=
Subject key identifier: AD:9E:DD:1D:03:41:73:3B:35:2C:1E:7A:23:C6:29:D7:77:4F:7B:26
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019D9B87ECB6B16F1E15BD5B3BFC150E2ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 13:01:09 +0000
Manifest this update: Fri 17 Apr 2026 13:01:09 +0000
Manifest next update: Sat 18 Apr 2026 13:01:09 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: h7JV7TBhHWD6I22GUClIgwgjwY/H0ND3+pIdp0RHNl8=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ec:b6:b1:6f:1e:15:bd:5b:3b:fc:15:0e:2e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Apr 17 13:01:09 2026 GMT
Not After : Apr 18 13:01:09 2026 GMT
Subject: CN=ad9edd1d0341733b352c1e7a23c629d7774f7b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:63:25:7a:81:15:93:1f:90:aa:c3:1d:97:
b8:c9:da:7c:a2:da:ea:44:4f:e9:20:de:5c:91:05:
e1:fc:6e:e1:27:77:ef:ff:45:f5:1a:80:e3:b8:37:
c6:11:20:ae:76:cc:3c:56:8f:ea:42:1c:eb:6a:be:
1d:77:5f:d9:25:b0:71:99:9a:b5:5a:4b:c9:c8:a0:
8a:fc:b4:25:d9:91:09:58:83:5a:05:8e:99:28:55:
e2:56:da:d8:47:c8:40:7d:28:13:f4:e4:84:5c:d8:
9b:15:d7:cd:f8:6a:9f:c7:b1:4a:37:8d:7a:44:e0:
60:6f:ab:b5:3a:e4:a0:93:40:56:fc:2c:22:23:ef:
b4:21:0a:9d:8a:52:a7:0b:b2:61:a5:1c:47:84:95:
d0:a2:88:a8:62:bd:c6:30:01:5b:ac:64:16:fd:07:
6b:b7:7d:3b:8b:82:50:18:7a:3c:ff:cd:47:de:87:
35:b0:36:96:d4:cb:25:bf:94:3d:fb:8d:c5:c0:7f:
4c:93:90:94:1e:d2:10:af:c4:5d:0a:74:3b:bc:d7:
14:aa:b2:d8:d0:a0:d7:99:a8:39:80:8d:89:27:b9:
65:f0:a5:90:c4:0b:c0:b9:32:f0:99:d3:95:11:0f:
2c:2f:79:74:b7:c7:e1:3e:f2:7c:9d:cd:11:77:2e:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:DD:1D:03:41:73:3B:35:2C:1E:7A:23:C6:29:D7:77:4F:7B:26
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:e6:86:13:6d:09:18:f9:0b:1f:ea:39:1b:6b:4d:3c:e7:
f5:4c:fb:29:2f:79:f2:d7:53:65:1f:2b:83:3f:16:9e:9b:e0:
39:b4:9f:23:5d:df:ca:f5:b7:3e:84:66:32:8e:32:dd:2a:1b:
79:ac:5b:b4:4a:79:17:d6:9b:3c:9b:6a:7d:b1:f7:a5:00:f9:
98:17:11:3b:25:13:8a:e4:85:9d:5d:68:76:b8:46:c9:df:23:
80:37:55:95:fd:76:f6:20:83:1d:0c:8c:0a:4e:bd:03:aa:ba:
22:c0:ab:f7:25:10:c4:ca:ff:32:33:99:0d:76:c8:fb:4c:55:
d5:62:4c:47:23:1d:6d:49:d2:68:7b:64:fd:51:fe:8c:fd:82:
11:30:e5:87:40:a5:ec:e3:81:bf:9a:24:f7:a9:0f:7e:62:8a:
0e:f8:89:2e:78:82:b5:bc:70:e1:91:4d:ea:d8:73:e8:77:cc:
c6:ba:0e:2e:dc:0b:4a:59:5e:18:b7:e3:4d:a9:67:39:1a:83:
3a:d3:a6:8d:d6:78:75:51:45:55:95:a0:a1:3a:36:7c:a9:fc:
81:95:ca:70:b3:83:db:8f:25:cc:c5:d0:5a:dd:04:9c:3e:e6:
97:64:79:71:11:c1:9b:94:7f:b9:57:cc:ca:7d:4b:55:d4:c7:
d2:ba:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:50 2026 by rpki-client