Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: WPVvMOtIm1x7orvHgXLWPdK7+NORS/JgHqdz8mhO7B8=
Subject key identifier: 4D:F7:27:E8:3D:97:00:6D:DC:06:0F:F5:02:7C:28:B8:38:41:E1:0E
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019FAABE705DEB112435830AEC64932A9E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 19E6
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: 8KT6v4LVA-vQeV-Gp5UEk8gGLd4.roa (hash: HDCqeA5UYA+s3eOLu1EG9gk71L2zB4pr/4jjPJR+5As=)
2: 97c8X_igmy_ypAPXegDN0Fzbi3E.roa (hash: r4on45G9/o/yyUAm8tRl6BJ4ytLaJsEz9hsZkzjem9w=)
3: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (hash: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew=)
4: MnpGjUZQnIO4Uw9VLLcUl729zsM.roa (hash: jwaIjNKJinT8ke5jD2UCrz9vXcry4VmiaXXpt0dsMmU=)
5: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: 803dMQavn3bPdkfZQ3CBROZQf2Fs8eySZ59NH6UEbo0=)
6: OCCamzGIjYqKmyPB5gU68V84jtk.roa (hash: Mv9Gt7kM3WySy+Jw5Lw06u8sR2Gfffm0Uge0ysYX5gw=)
7: Qz5E3yW1A48GlQlQ8-W44R8k2MA.roa (hash: Qac4XS30rjYFAVIp0gz3UqVLZmIGboX+CL088LxdsqA=)
8: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (hash: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:70:5d:eb:11:24:35:83:0a:ec:64:93:2a:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=4df727e83d97006ddc060ff5027c28b83841e10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:38:0e:2f:0b:6a:40:03:f7:79:09:13:54:
a2:c6:87:dd:7e:72:f9:60:2d:d3:c4:7b:1c:29:4c:
71:64:3f:61:de:7d:a5:1f:8c:6a:9e:0a:b2:03:79:
98:e3:df:77:ee:4d:5a:5f:b9:fd:69:c4:66:91:b9:
ac:1f:1b:f9:b9:13:41:95:d9:d7:ac:2f:b8:60:de:
d8:28:92:c1:16:9e:74:0a:9f:9a:af:54:43:eb:d6:
91:0e:18:68:3f:bb:e5:73:a9:ba:c4:a2:dd:03:f5:
2c:db:d3:e1:c4:6a:1e:34:40:51:85:fd:ed:20:17:
ca:91:8c:e6:05:0d:08:11:e0:a2:8d:ad:7c:1b:bf:
27:69:c0:4e:47:05:f3:06:cd:87:9c:ce:54:f2:df:
a3:c6:05:5c:2c:86:0d:84:a5:58:08:5b:78:c9:fe:
5f:14:53:4e:33:1c:d8:75:f2:90:97:13:17:34:dc:
52:0c:44:a0:bc:21:0d:2b:cc:89:51:20:5b:43:09:
47:d9:27:7b:c6:82:27:f8:9f:d1:68:01:e2:12:4d:
47:8a:4d:ff:79:8e:a3:f1:48:6c:ec:4b:24:d5:63:
d5:65:a2:7b:b2:e4:b8:50:36:5b:c3:37:f9:f2:7d:
df:24:79:9d:d2:db:06:57:da:49:75:4a:b7:f8:a9:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:27:E8:3D:97:00:6D:DC:06:0F:F5:02:7C:28:B8:38:41:E1:0E
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:01:9b:71:ba:d8:7c:d7:70:e7:8f:01:a5:c2:95:c4:c0:
97:2a:80:0d:dc:82:a8:26:cd:01:6c:4d:7a:87:a3:da:49:0d:
76:07:a5:e0:aa:65:7c:53:be:fd:c1:2c:bc:38:a2:82:69:2b:
ff:30:ce:64:95:09:1f:46:73:2c:0b:22:4c:be:cc:6a:a6:23:
6c:f6:0e:01:52:eb:b9:a0:d9:76:54:68:af:b3:41:28:a5:00:
fd:7d:36:73:b1:15:12:7a:33:9d:7c:b1:25:f6:4d:3e:ca:28:
8b:fe:6d:b9:a5:20:99:65:41:d7:ee:a2:7e:95:3d:1a:23:b6:
a0:59:b4:e2:fa:0d:50:27:f4:8b:40:52:3f:05:34:ef:2d:92:
77:7e:b0:4b:a5:8d:3d:ec:94:92:a9:ab:fd:d7:3c:58:06:4e:
70:b2:08:85:84:ca:7b:77:e3:15:fe:a9:a5:a8:8b:23:1b:70:
3e:8d:ae:13:71:c1:35:51:77:71:86:34:7a:7c:df:9d:df:2d:
f2:e1:25:76:3d:04:03:5c:ce:6d:06:bf:36:af:ae:7d:43:ae:
c7:a5:26:33:4b:90:1a:df:05:6a:df:27:e2:12:24:0c:c1:3f:
ff:37:5e:b1:f0:8e:07:d9:c8:fd:a4:3a:f0:9c:20:2a:14:de:
d5:0e:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:34 2026 by rpki-client