Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: dNSOwHj7X1fj2ACqEh8JTZ6bJPZvPERxIuiTBLA0/VE=
Subject key identifier: 92:CA:76:86:50:1F:AF:1D:33:0E:8A:21:2F:E8:AC:97:4D:ED:E1:6A
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01A1291F0DBAE8B7FF4F41A9A4F3B0EEB186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1AAC
Signing time: Sun 11 Oct 2026 04:01:03 +0000
Manifest this update: Sun 11 Oct 2026 04:01:03 +0000
Manifest next update: Mon 12 Oct 2026 04:01:03 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: J9nHR0laW+AUZQns/p71AcBahAvw/Iccjirt5dvXtuY=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:0d:ba:e8:b7:ff:4f:41:a9:a4:f3:b0:ee:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Oct 11 04:01:03 2026 GMT
Not After : Oct 12 04:01:03 2026 GMT
Subject: CN=92ca7686501faf1d330e8a212fe8ac974dede16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:34:4d:8d:14:12:92:00:d8:c3:f6:f7:f1:
77:5f:aa:a1:41:01:18:64:cd:b6:23:88:5b:13:58:
8a:af:4f:78:b6:3d:85:3f:8c:39:b9:91:50:a8:35:
cf:be:3d:5b:af:33:bb:48:8f:66:8a:c9:08:9f:79:
ad:68:fc:55:d7:c9:fa:12:a7:34:ac:c8:b0:8a:d5:
fe:3a:29:93:7a:eb:ba:b6:0b:dd:ab:34:14:fc:38:
29:ab:36:e4:9e:46:4c:c5:ac:39:01:a2:fe:36:16:
cb:d4:d3:f4:9e:ce:af:d2:f8:b5:4a:59:9e:32:4f:
f7:0d:17:c8:c0:46:35:2a:53:40:07:60:ae:fb:22:
9d:ca:e3:66:d0:62:f0:32:bf:0c:8a:46:29:d1:03:
13:b4:cb:9c:2a:96:3d:f5:9b:ba:f7:66:a7:f2:b0:
55:56:16:1f:e3:3f:d0:70:88:7a:6e:0c:72:b5:5c:
63:69:7f:0e:54:30:d3:b2:ed:cb:ee:e1:75:fb:e7:
9b:17:bd:f0:4e:57:cd:55:05:1a:95:36:36:83:36:
e0:75:dc:58:6e:a6:3f:c0:7d:af:fd:5a:87:7f:a8:
81:0c:56:c7:14:4e:61:8e:48:59:8b:94:e2:b9:9f:
ac:be:b9:be:11:7f:a8:00:ef:03:2e:64:fd:7c:5e:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:76:86:50:1F:AF:1D:33:0E:8A:21:2F:E8:AC:97:4D:ED:E1:6A
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:23:ee:05:b6:56:69:90:48:b3:5f:35:46:49:c4:b7:e5:
59:47:41:30:be:9d:17:01:32:df:e7:63:4d:c8:75:70:05:a7:
27:54:47:64:2b:98:4e:49:eb:b9:69:f3:a7:08:15:03:0c:1e:
e9:70:d2:06:b8:94:07:d6:24:23:32:b5:98:82:be:d0:3c:85:
f8:a7:86:0c:18:29:d3:79:5a:4d:ad:4a:a4:96:2a:6a:8d:83:
dc:e1:6e:48:c2:f4:18:d6:08:fd:71:d0:64:aa:64:79:9d:31:
a6:f4:ab:4b:36:3b:87:61:53:35:54:a1:fb:4f:94:ec:88:f4:
b9:7a:9c:b6:f9:40:0d:3e:df:16:6a:ed:4c:ba:5b:6b:f0:1f:
5c:49:1f:d0:e4:aa:36:77:64:79:45:78:c6:b9:97:06:4a:ec:
a5:a4:6c:11:7d:d1:2c:4c:c0:92:e8:1d:bc:4c:bd:92:8f:47:
6f:f7:46:41:42:54:28:ba:00:ae:68:5a:4a:26:22:3f:f8:e7:
a1:6f:f1:8e:4d:eb:88:e2:31:6f:f8:1d:95:d3:d7:2e:e2:29:
e3:3e:7b:f5:7e:fe:7f:a1:e8:47:13:ac:5b:18:96:d5:88:ac:
25:de:8f:fb:81:52:76:8a:21:06:36:c7:8b:55:07:9e:5f:c0:
ee:b0:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:04:59 2026 by rpki-client