Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: lnW6Se5oktzyVUwc6rLRxXMiK1gMVZE5zYvklOvnTnM=
Subject key identifier: F2:4C:2B:D8:8A:0C:3E:32:00:D1:E9:35:EF:61:1E:56:CC:C3:08:77
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01A08B9EF9C648633058E121792255153C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0E91
Signing time: Thu 10 Sep 2026 14:00:46 +0000
Manifest this update: Thu 10 Sep 2026 14:00:46 +0000
Manifest next update: Fri 11 Sep 2026 14:00:46 +0000
Files and hashes: 1: Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa (hash: 1BJkjJJzRJsgJ9P5xD0C2TGUD819GX/LrEbI55Wb35Y=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: GcAKbdjgzlCd/af7fijAnx+ZZ9yxgk6BHKRd5C/1zGM=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: zrzevlWk8nYV2cUksY99V_qlScY.roa (hash: AheS3Jn9vrwMVAXUOcAlokukhhQZQDpg2R6hmrLu6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:f9:c6:48:63:30:58:e1:21:79:22:55:15:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Sep 10 14:00:46 2026 GMT
Not After : Sep 11 14:00:46 2026 GMT
Subject: CN=f24c2bd88a0c3e3200d1e935ef611e56ccc30877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:55:cb:3a:42:eb:f9:b0:fb:1c:17:89:a6:
9a:4e:69:ee:30:c3:48:dc:0e:5a:d9:5e:95:90:8c:
ec:ae:72:ba:b3:18:b9:c3:35:9b:fa:9b:93:b6:c6:
66:5d:fd:3a:a7:80:5a:7a:31:4e:8b:96:98:05:ad:
05:7a:c1:96:9a:11:44:06:e2:b0:8e:8c:25:02:0b:
35:f1:98:13:d9:96:fb:72:0d:3a:57:ed:36:ef:2a:
cc:c8:5b:8e:48:94:0f:fb:1e:5b:bd:1c:98:5f:3b:
73:a9:97:bc:a8:89:6f:7e:e3:95:b4:d4:f7:ae:e0:
93:5f:1c:ad:e3:f6:42:65:15:61:5c:57:9c:7b:cb:
ec:a1:9e:70:f4:64:f0:35:44:ce:2c:d8:63:96:4f:
7a:73:5f:58:c6:af:d5:8c:7c:6d:04:0c:8e:37:ee:
1d:11:a9:98:5d:1b:e0:f8:1b:98:ce:2d:4d:53:a1:
c8:52:1c:ad:35:30:c2:2a:7c:e1:7d:da:46:72:00:
7a:1b:31:77:c4:91:48:b7:6d:34:1c:fc:e4:2c:a2:
a1:59:d8:fa:7d:da:9c:db:f3:aa:20:40:6b:ea:72:
64:44:90:95:4b:52:57:73:b5:7a:9e:0c:1d:de:61:
23:d7:fa:29:5f:1a:98:0c:c6:b9:88:94:69:c7:3f:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:2B:D8:8A:0C:3E:32:00:D1:E9:35:EF:61:1E:56:CC:C3:08:77
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:90:78:ac:d4:a6:90:d6:55:30:cd:30:07:10:65:cf:aa:a2:
92:1c:7b:3a:39:eb:ee:8c:0b:2d:c3:e7:be:b3:84:39:6c:ac:
f8:38:53:29:61:9a:1f:3d:8c:3c:cb:82:d1:88:fc:41:99:b4:
6a:5a:f3:f6:95:74:e0:3c:db:55:d1:b8:89:ba:20:2d:5e:00:
b1:c5:23:95:4f:22:3f:68:00:4d:0e:54:79:3d:35:58:4e:ed:
b8:8c:7f:ee:53:c3:4b:06:3e:5b:45:d2:9a:d6:e5:f1:27:f1:
09:e5:cf:7e:af:e3:cd:b7:ed:a2:10:29:91:b4:c0:46:ad:b7:
ed:c6:a0:12:b5:34:11:b0:db:f9:3a:38:c2:14:c5:34:e1:fe:
19:79:ff:99:5a:f5:ca:e7:0e:a3:62:f5:c3:17:f8:d5:d5:cb:
e6:fb:db:a9:0e:42:9b:b8:c3:35:dd:e1:33:e0:11:66:74:03:
28:aa:96:56:5c:ac:23:74:15:b5:2e:c7:db:5d:7d:3c:1c:d6:
65:3a:fe:40:f7:10:3c:16:29:58:be:61:b3:6b:62:0c:b8:0a:
bd:2e:44:ef:90:0e:75:d8:d9:11:f1:95:b4:7a:66:df:5d:e2:
a9:5c:1b:58:42:c9:7a:5f:69:fc:a7:e1:f1:57:45:26:5e:84:
3a:0f:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:47:58 2026 by rpki-client