Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: YXLLYSXTgUj0S2gWdgkkToL4OVWowwd4A5+8FJYkBGs=
Subject key identifier: D9:94:07:90:D5:94:CD:2C:93:63:69:24:98:3B:BC:E0:23:7A:D4:E1
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01A0B7D25C575EBEDE26428259BAF0D34286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0DD3
Signing time: Sat 19 Sep 2026 04:00:11 +0000
Manifest this update: Sat 19 Sep 2026 04:00:11 +0000
Manifest next update: Sun 20 Sep 2026 04:00:11 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 3WhP18vSMhVkwTlNLy9DUl4xDgwi+iBQg2rgHkbHux4=)
4: qNWONomvIPPaw1vxRbdPf7PE9Uc.roa (hash: t+YKiZGgYPsEg6VbvrRY3eQ8DDKCYaJgu+YJ080oVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d2:5c:57:5e:be:de:26:42:82:59:ba:f0:d3:42:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Sep 19 04:00:11 2026 GMT
Not After : Sep 20 04:00:11 2026 GMT
Subject: CN=d9940790d594cd2c93636924983bbce0237ad4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:0a:b9:40:a6:ae:96:1f:3f:87:cd:f4:4a:
c7:b3:97:88:27:73:9e:3b:31:ee:46:5f:d7:7c:59:
f4:bf:29:81:f4:11:5c:a1:30:2c:c2:25:f2:55:76:
72:f6:ad:37:25:51:5d:4b:10:b5:77:77:b4:5b:61:
bd:0f:2a:d2:c5:c3:f6:43:e2:35:66:b6:0d:b8:18:
df:1c:34:e3:6f:72:f9:69:06:26:ad:75:0d:4c:3c:
75:88:86:ee:1f:12:72:b8:9e:77:82:a5:70:69:bf:
4e:9d:f0:16:45:ee:50:66:61:c8:9e:78:d3:14:72:
e0:35:ad:28:0f:98:77:8e:7f:12:f4:9a:a5:68:42:
f2:05:e4:88:bc:47:23:b6:84:0f:39:16:5a:1e:0e:
4a:34:cf:52:84:98:14:73:3b:bb:41:67:4c:ac:0f:
ad:2c:f7:e3:9e:05:9c:4b:69:d7:63:3d:9c:99:cb:
1d:97:02:f0:d3:ba:9a:70:94:63:0f:9e:d6:b3:84:
c5:f9:2f:cf:22:8c:b3:f4:4d:5a:d5:fb:ce:5d:fb:
9b:6f:9d:d6:04:48:2c:fe:aa:b7:2e:87:b5:1b:16:
05:c2:43:40:e6:5f:44:43:2a:2b:1d:9e:82:5b:31:
ce:50:da:a3:a5:83:84:f6:07:c1:10:57:72:d7:44:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:07:90:D5:94:CD:2C:93:63:69:24:98:3B:BC:E0:23:7A:D4:E1
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5b:b1:75:b1:dc:a9:82:f1:cb:8f:da:d5:58:37:c3:ec:ad:
86:91:a9:17:a7:3f:6f:90:29:8b:16:0d:25:6a:5a:ec:c5:d1:
00:23:26:78:6c:ff:3e:39:2d:e8:da:ac:d6:68:ca:4d:47:2f:
1a:5f:98:56:dc:0f:a7:d5:e8:81:fa:cd:70:6d:27:c2:5c:fb:
89:bb:fd:42:23:e7:a1:cb:9d:92:d9:4c:3c:42:b6:c1:c5:85:
bf:2d:84:45:8f:00:03:87:8d:cc:f8:a7:d7:23:49:c7:b9:8d:
29:f3:92:bf:63:f0:ba:55:5c:9b:4b:45:ab:62:86:23:f8:36:
f4:48:a7:2e:6e:e5:b9:5d:4b:81:1b:75:87:66:14:60:2e:29:
06:f6:51:f9:98:75:9b:da:37:6e:05:54:7f:15:2f:f6:3f:00:
a2:05:ed:cc:93:d0:bc:fb:bc:b1:32:81:9f:9d:d3:1b:85:5e:
3e:67:57:74:4f:70:30:68:48:8c:c4:ab:c0:8f:85:63:d2:63:
27:38:6e:04:97:69:1c:69:c9:e7:19:1a:ed:d9:50:fb:37:33:
e0:e5:89:ea:b0:0d:a7:e6:4d:df:ef:a2:b2:5a:1a:40:2b:50:
93:dc:b5:1b:d2:9c:cd:17:e8:0a:5d:1e:ac:1f:ab:f4:eb:a5:
8b:b5:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:44:00 2026 by rpki-client