Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: Qnb2l4wVWv0aq6snqqBYnIkD3hhV5SsYvnAx9fuUaBI=
Subject key identifier: 07:9E:A0:C4:1B:5C:9C:2E:AC:1E:A3:D2:CB:7E:3C:B4:D6:F0:69:EC
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019CBE15F368172E807B91C801E801641DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0C96
Signing time: Thu 05 Mar 2026 13:00:35 +0000
Manifest this update: Thu 05 Mar 2026 13:00:35 +0000
Manifest next update: Fri 06 Mar 2026 13:00:35 +0000
Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: JdONsJqseoPwOJbIr5Bpgxhlm6iM0boYbquMhRdzgUc=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:15:f3:68:17:2e:80:7b:91:c8:01:e8:01:64:1d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Mar 5 13:00:35 2026 GMT
Not After : Mar 6 13:00:35 2026 GMT
Subject: CN=079ea0c41b5c9c2eac1ea3d2cb7e3cb4d6f069ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:93:9a:1e:62:53:39:c2:3a:02:98:36:ae:
e8:76:4f:e5:f6:81:20:57:47:43:c8:91:2e:db:39:
a7:5e:3e:e2:d7:71:93:2b:c3:21:2c:34:04:83:2f:
c4:d5:67:d5:9a:9e:7b:f9:d7:44:ca:40:26:4b:34:
6c:93:97:ff:75:89:28:33:58:8e:67:cd:16:97:80:
38:04:1d:b7:5c:9b:0c:84:11:e9:be:2a:f7:46:5e:
c5:a0:a2:e5:eb:9a:56:db:ce:c4:bd:91:35:9c:68:
28:0b:10:21:14:71:70:31:c4:73:ed:9d:42:6c:5a:
fd:77:ab:3e:6b:63:c5:5b:3c:7e:d2:f3:84:ed:7c:
a0:68:6e:f7:08:79:57:10:a5:ce:e0:22:6b:68:86:
e9:2d:f6:51:b2:d8:52:1c:5c:b1:a6:25:95:dc:23:
43:6e:13:b0:0a:61:56:6c:42:9b:fa:ea:d4:bb:18:
34:d1:51:2f:75:0a:19:7c:a3:6d:29:44:c9:97:11:
27:42:c9:55:ae:18:10:a8:2b:1a:2e:fc:bb:f3:fe:
a6:fc:82:a2:a2:2b:bc:0d:8c:6c:32:2c:e7:b2:78:
e7:9d:99:76:c7:ae:64:07:0d:0a:46:b9:fd:8a:8e:
61:ab:c1:89:e2:60:8a:02:f7:5e:90:d8:e9:37:32:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:A0:C4:1B:5C:9C:2E:AC:1E:A3:D2:CB:7E:3C:B4:D6:F0:69:EC
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:40:c2:6e:f4:3b:84:8a:6f:f3:0f:29:dd:0c:ac:8e:4a:
b2:e9:db:12:fd:4b:95:0a:87:ba:6e:aa:6b:c3:30:64:08:cd:
e9:bc:50:47:61:43:3e:d2:33:73:74:d8:1f:b4:b4:a1:64:53:
c0:b1:11:ac:9d:d4:35:bc:e6:dd:63:47:41:16:1b:0a:77:f8:
80:50:f3:dd:74:8a:52:fc:41:e7:ba:fc:64:85:de:ea:3f:96:
4f:d6:dd:9d:80:06:7c:6c:50:8e:ce:4f:03:d6:c4:f8:46:7f:
a7:92:74:11:45:92:95:e3:c9:a9:df:33:2d:8c:73:d6:de:90:
fb:09:4e:b2:d4:27:49:af:e6:1a:da:df:73:ee:76:62:14:b3:
91:70:3e:60:eb:47:b5:ed:49:3a:ff:7b:98:91:0d:59:3d:5f:
81:ba:bb:73:c0:cc:05:e4:5e:f8:3d:3c:f1:1d:1a:c6:b9:23:
98:2c:43:fc:86:f7:8d:b6:8f:ae:62:cf:74:1c:d9:0c:19:4f:
29:e5:03:44:7b:82:7e:81:67:3a:df:db:13:c2:b3:38:7c:e2:
59:f6:2a:b8:c0:c8:72:73:76:dc:32:79:06:b3:85:d5:57:38:
01:44:88:6c:9e:ec:f2:25:98:06:a6:5f:38:59:58:66:71:bc:
d6:c5:86:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy+FfNoFy6Ae5HIAegBZB3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjYwMzA1MTMwMDM1WhcNMjYwMzA2MTMwMDM1WjAzMTEwLwYDVQQD
EygwNzllYTBjNDFiNWM5YzJlYWMxZWEzZDJjYjdlM2NiNGQ2ZjA2OWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouaTmh5iUznCOgKYNq7odk/l9oEg
V0dDyJEu2zmnXj7i13GTK8MhLDQEgy/E1WfVmp57+ddEykAmSzRsk5f/dYkoM1iO
Z80Wl4A4BB23XJsMhBHpvir3Rl7FoKLl65pW287EvZE1nGgoCxAhFHFwMcRz7Z1C
bFr9d6s+a2PFWzx+0vOE7XygaG73CHlXEKXO4CJraIbpLfZRsthSHFyxpiWV3CND
bhOwCmFWbEKb+urUuxg00VEvdQoZfKNtKUTJlxEnQslVrhgQqCsaLvy78/6m/IKi
oiu8DYxsMiznsnjnnZl2x65kBw0KRrn9io5hq8GJ4mCKAvdekNjpNzL2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeeoMQbXJwurB6j0st+PLTW8GnsMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsJAwm70
O4SKb/MPKd0MrI5KsunbEv1LlQqHum6qa8MwZAjN6bxQR2FDPtIzc3TYH7S0oWRT
wLERrJ3UNbzm3WNHQRYbCnf4gFDz3XSKUvxB57r8ZIXe6j+WT9bdnYAGfGxQjs5P
A9bE+EZ/p5J0EUWSlePJqd8zLYxz1t6Q+wlOstQnSa/mGtrfc+52YhSzkXA+YOtH
te1JOv97mJENWT1fgbq7c8DMBeRe+D088R0axrkjmCxD/Ib3jbaPrmLPdBzZDBlP
KeUDRHuCfoFnOt/bE8KzOHziWfYquMDIcnN23DJ5BrOF1Vc4AUSIbJ7s8iWYBqZf
OFlYZnG81sWGCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 5 22:18:40 2026 by rpki-client