Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: G7KgTbFjQz/4EYCzRWUPwu6rdDogbjWFGNfu3kc7I7I=
Subject key identifier: AF:93:B6:05:08:50:13:4A:7E:E2:CA:C8:C1:8C:05:C5:AB:AD:49:C4
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019CFD2BDD19C1008DDF557D9DEB8797D5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0BE4
Signing time: Tue 17 Mar 2026 19:00:35 +0000
Manifest this update: Tue 17 Mar 2026 19:00:35 +0000
Manifest next update: Wed 18 Mar 2026 19:00:35 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: sNr2nGZHNTDSMEdv0QHiaIo2nRO0AkUw/8ijgQjN7+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:2b:dd:19:c1:00:8d:df:55:7d:9d:eb:87:97:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Mar 17 19:00:35 2026 GMT
Not After : Mar 18 19:00:35 2026 GMT
Subject: CN=af93b6050850134a7ee2cac8c18c05c5abad49c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:16:92:88:ed:4a:16:d8:e2:7a:86:d9:65:
9d:f7:dd:a8:ea:c8:d3:4b:9b:63:4c:71:79:ea:73:
00:d6:ed:cb:ce:65:4a:82:a4:44:81:92:48:07:b0:
68:33:15:26:12:c6:4d:e1:c2:f2:08:3e:92:5e:c5:
e1:f2:f0:91:ee:ba:38:ac:60:02:60:86:ff:45:ee:
c3:3a:40:57:c3:f5:57:87:81:ab:5e:fc:db:51:a3:
ed:72:18:02:21:9f:d1:17:4e:6c:b3:12:5f:46:34:
64:5a:6e:4e:37:7c:6b:53:52:2a:3e:96:7c:74:42:
d6:6c:b9:06:1e:d4:02:77:88:03:f5:b7:6a:a5:4b:
27:7f:04:09:57:8b:64:4a:6f:10:ce:4b:10:32:05:
38:b7:e6:b9:91:b5:bf:8d:b3:d7:fb:b5:44:8f:17:
8f:a5:c9:6a:33:2e:8a:0d:e2:9a:d8:9c:3a:c4:ed:
47:71:9d:ca:9e:fa:4d:14:6c:ea:45:94:b5:2e:51:
42:b5:5f:94:b4:83:59:4f:45:ce:9e:8a:71:bf:56:
28:26:26:c4:82:e3:86:65:e4:bb:64:0d:25:c0:ca:
70:fe:97:f8:dc:85:30:a5:9d:3d:8b:e6:fb:ff:d3:
74:b2:ac:2f:77:e7:af:65:56:7e:5c:4b:2f:d8:2d:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:B6:05:08:50:13:4A:7E:E2:CA:C8:C1:8C:05:C5:AB:AD:49:C4
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:03:00:6f:55:a4:fb:3a:aa:75:f4:12:4b:0a:cb:2c:f3:c8:
cc:d5:81:b5:8a:08:d9:d4:9e:89:79:46:f1:1b:72:8e:c6:b9:
9c:8e:eb:d7:29:45:84:e3:c5:ec:9a:fb:65:bd:47:60:e5:70:
79:4c:2b:a7:d9:ed:bb:75:28:a3:d8:55:11:1d:f2:80:0c:f6:
85:6f:02:6d:b8:4b:c0:74:ef:31:9c:9d:16:22:db:05:cf:dc:
a4:a8:96:ad:88:74:3d:0b:c7:2a:6e:70:b1:7b:c2:63:65:5e:
d2:40:8c:6d:ab:9e:b8:d1:41:24:b4:3d:cc:eb:80:bd:79:1b:
60:bc:4c:78:ff:01:3e:2c:ba:c2:b3:97:6c:49:5a:b1:a6:21:
a9:2c:27:9a:65:28:57:b8:25:12:88:16:72:8f:f5:65:f7:3b:
2c:70:c7:51:7a:8f:50:c3:5c:b3:97:13:8a:55:44:bd:6b:3d:
f0:a2:1f:eb:ae:60:a5:c7:75:b5:c7:d5:5b:bc:08:a1:1a:44:
9e:41:9a:21:a0:6d:a1:1c:7c:dc:2e:ed:b2:8b:46:bc:9e:87:
f6:a1:3d:6b:d0:b3:d8:83:66:44:11:ad:96:88:f5:14:4e:81:
46:dc:17:a5:a8:81:41:1c:fb:cb:6e:52:34:aa:1c:54:3e:90:
af:3f:7d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz9K90ZwQCN31V9neuHl9W/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2
YjQ2ODAwHhcNMjYwMzE3MTkwMDM1WhcNMjYwMzE4MTkwMDM1WjAzMTEwLwYDVQQD
EyhhZjkzYjYwNTA4NTAxMzRhN2VlMmNhYzhjMThjMDVjNWFiYWQ0OWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfcWkojtShbY4nqG2WWd992o6sjT
S5tjTHF56nMA1u3LzmVKgqREgZJIB7BoMxUmEsZN4cLyCD6SXsXh8vCR7ro4rGAC
YIb/Re7DOkBXw/VXh4GrXvzbUaPtchgCIZ/RF05ssxJfRjRkWm5ON3xrU1IqPpZ8
dELWbLkGHtQCd4gD9bdqpUsnfwQJV4tkSm8QzksQMgU4t+a5kbW/jbPX+7VEjxeP
pclqMy6KDeKa2Jw6xO1HcZ3KnvpNFGzqRZS1LlFCtV+UtINZT0XOnopxv1YoJibE
guOGZeS7ZA0lwMpw/pf43IUwpZ09i+b7/9N0sqwvd+evZVZ+XEsv2C2o9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+TtgUIUBNKfuLKyMGMBcWrrUnEMB8GA1UdIwQY
MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt
YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw
LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagMAb1Wk
+zqqdfQSSwrLLPPIzNWBtYoI2dSeiXlG8Rtyjsa5nI7r1ylFhOPF7Jr7Zb1HYOVw
eUwrp9ntu3Uoo9hVER3ygAz2hW8CbbhLwHTvMZydFiLbBc/cpKiWrYh0PQvHKm5w
sXvCY2Ve0kCMbaueuNFBJLQ9zOuAvXkbYLxMeP8BPiy6wrOXbElasaYhqSwnmmUo
V7glEogWco/1Zfc7LHDHUXqPUMNcs5cTilVEvWs98KIf665gpcd1tcfVW7wIoRpE
nkGaIaBtoRx83C7tsotGvJ6H9qE9a9Cz2INmRBGtloj1FE6BRtwXpaiBQRz7y25S
NKocVD6Qrz99JA==
-----END CERTIFICATE-----
Generated at Wed Mar 18 01:54:32 2026 by rpki-client