Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: FTzhjN3l2z0s1lcpLtY3B/HcZiRCYu4HQnvxJ3KNqh4=
Subject key identifier: 24:28:46:9E:31:C7:91:22:B6:A1:4B:D5:48:49:BD:57:13:84:29:58
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019EE28B9B81A3F1EBEDC51E732CC93A7544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0CE0
Signing time: Sat 20 Jun 2026 01:01:00 +0000
Manifest this update: Sat 20 Jun 2026 01:01:00 +0000
Manifest next update: Sun 21 Jun 2026 01:01:00 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: +LPdl0s1xls/40jEYenAAPr2wOpKAtWAWnGQvUDMGUQ=)
4: qNWONomvIPPaw1vxRbdPf7PE9Uc.roa (hash: t+YKiZGgYPsEg6VbvrRY3eQ8DDKCYaJgu+YJ080oVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8b:9b:81:a3:f1:eb:ed:c5:1e:73:2c:c9:3a:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jun 20 01:01:00 2026 GMT
Not After : Jun 21 01:01:00 2026 GMT
Subject: CN=2428469e31c79122b6a14bd54849bd5713842958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:9a:03:09:de:95:62:3f:52:7d:b9:af:8a:
08:d7:29:f4:1d:c9:39:07:08:7e:b9:ba:ae:e1:fb:
7d:af:d6:b7:91:79:ed:03:f3:6e:12:9f:e7:14:01:
dd:19:b7:ba:75:3e:95:a2:4d:e5:0a:0f:53:2c:b2:
3d:4e:58:56:e9:53:3b:4b:29:e1:e3:cc:12:bf:77:
f9:f2:d2:c5:d0:e4:8b:31:4d:bb:2d:19:ad:12:42:
41:ec:5b:9c:24:1c:d2:dc:1d:f3:de:9f:65:13:ab:
9b:b9:03:2d:a1:56:7e:6f:f1:cd:73:5d:be:eb:1a:
75:d7:9d:cd:b1:39:d5:73:b7:56:5c:8c:ac:6a:45:
c9:10:12:6a:72:00:73:5a:9e:48:e5:04:91:58:69:
05:cc:32:72:9d:4e:1e:a8:27:78:f8:fd:0b:9c:6f:
57:34:2a:d4:29:84:a8:18:9f:76:ba:de:4d:8f:a8:
d1:d1:c4:75:a7:60:61:3d:c7:22:96:b1:62:7e:92:
89:2d:47:2a:fc:6f:88:73:38:99:71:13:cc:c5:4f:
6b:ca:7d:68:13:4d:5d:50:8e:80:69:f3:3b:a5:54:
8a:a9:10:93:07:e5:04:07:06:e6:d9:69:87:53:fb:
a6:12:3e:eb:2f:39:fc:45:12:9c:24:af:c1:66:83:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:46:9E:31:C7:91:22:B6:A1:4B:D5:48:49:BD:57:13:84:29:58
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:bb:db:92:cb:f1:d4:24:f1:c1:2b:8c:ae:6a:6a:18:a5:
5d:aa:10:31:b2:08:b4:b0:a4:7b:8c:e0:37:a2:17:ae:61:ee:
7f:8c:ef:de:ca:5c:db:42:ee:f4:49:ac:c8:4e:a4:14:17:1f:
40:d8:d0:d0:b9:a1:77:b8:3b:4f:04:9f:44:78:c7:98:40:58:
bd:02:72:d5:29:ce:d1:e4:ba:aa:a1:fb:f3:80:67:30:df:87:
ae:1f:a5:60:84:23:76:14:01:48:40:2e:19:a8:e4:c3:a7:a6:
f3:e4:0d:2c:9c:aa:c2:cd:3d:2f:c2:22:c8:dd:e2:45:5e:f5:
c7:67:d3:77:0f:8b:08:75:9a:81:92:91:f2:46:29:c6:4d:5c:
f6:5c:54:b2:fd:05:73:e2:c0:5d:38:8d:87:30:63:fa:8e:5d:
1a:99:dc:24:87:65:43:3a:f4:b8:ec:e2:19:6b:d6:27:1a:a8:
57:d6:8c:20:71:12:b1:eb:03:98:cf:6e:60:89:e3:74:22:6e:
86:12:45:27:b8:2e:60:8b:47:09:91:18:79:b9:99:e5:cc:c2:
ff:d9:f5:66:0c:46:2e:4b:e6:c3:fe:53:fb:4e:8a:b6:c1:28:
11:c4:26:23:07:5d:fe:50:cf:96:e6:0c:ee:ca:55:7f:a8:ac:
e4:3e:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:18:31 2026 by rpki-client