Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: cJsVasd+69LS2YAfqibbb3NJJ2HuLu1WntzSK5+T2dQ=
Subject key identifier: 52:68:19:03:6F:73:E9:01:70:DB:25:97:11:4B:00:E0:81:61:2B:EE
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01A186AD2244284064DE480D16E8B0F7B790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0F13
Signing time: Thu 29 Oct 2026 08:00:55 +0000
Manifest this update: Thu 29 Oct 2026 08:00:55 +0000
Manifest next update: Fri 30 Oct 2026 08:00:55 +0000
Files and hashes: 1: Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa (hash: 1BJkjJJzRJsgJ9P5xD0C2TGUD819GX/LrEbI55Wb35Y=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: FWxwvgoZTexh51952iPKaYwLECMVBsDgAJ+YsoJmgfg=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: zrzevlWk8nYV2cUksY99V_qlScY.roa (hash: AheS3Jn9vrwMVAXUOcAlokukhhQZQDpg2R6hmrLu6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:22:44:28:40:64:de:48:0d:16:e8:b0:f7:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Oct 29 08:00:55 2026 GMT
Not After : Oct 30 08:00:55 2026 GMT
Subject: CN=526819036f73e90170db2597114b00e081612bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:96:c4:5d:6a:34:3e:98:53:df:cb:6a:91:
90:9c:11:55:8c:25:04:f7:cc:f5:11:56:de:39:c6:
5c:d0:a0:53:ee:bc:3e:e1:78:fd:b8:2d:a4:f0:9f:
4b:82:5f:7b:ea:1c:9b:5d:ec:c9:30:9c:2a:10:b3:
f1:81:3b:a9:87:69:6d:03:33:8f:0b:75:6f:ae:73:
4f:88:bf:46:58:70:72:c6:f7:59:c4:91:60:1f:06:
67:cf:a2:37:c0:80:34:4f:cd:c9:68:f1:be:ca:d2:
a9:e4:15:b3:5d:f8:1b:20:81:eb:a1:69:9d:4d:0f:
03:16:c0:70:01:f3:3b:b4:7b:c9:af:c6:27:4f:4e:
6e:9a:dc:d9:ee:86:93:7f:d0:40:25:e8:bd:bf:59:
a5:ef:57:e1:05:3d:08:f8:3b:28:39:e2:b7:c0:9b:
5f:d1:87:8e:36:e3:ad:44:ef:d2:7e:c2:71:71:bf:
c8:54:bd:94:33:50:54:ac:a0:94:70:22:3e:a1:e1:
30:f5:94:9d:76:1a:7e:da:05:e0:3c:0a:26:73:06:
2f:d3:92:68:bb:4f:24:77:93:10:5d:5c:21:94:3e:
7c:5b:2d:00:40:53:96:ce:02:f7:15:8c:bb:fe:fd:
5c:47:f5:e5:a7:1f:04:83:72:d6:23:8c:91:ea:6a:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:68:19:03:6F:73:E9:01:70:DB:25:97:11:4B:00:E0:81:61:2B:EE
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:30:ce:99:34:3a:cf:6c:83:ee:46:68:50:07:54:cd:87:80:
f6:e1:4e:55:16:b9:66:16:b5:84:cf:73:2d:92:a3:b7:2c:e8:
16:c6:e4:d3:ff:fd:53:4d:66:b8:7b:5d:dd:82:11:1d:91:30:
59:50:4a:fb:a3:c0:c5:39:01:fd:66:57:fb:bf:36:ce:ce:c9:
17:15:2e:32:ca:7d:67:a5:19:18:9c:36:0a:c0:b8:4e:5f:1c:
0e:1b:1e:95:dc:32:a2:90:95:b1:f8:f6:87:e5:6b:be:d8:72:
5d:cd:75:f5:c5:c9:8f:b0:67:8f:4f:1e:35:6c:f1:ca:d8:08:
4b:40:df:53:b8:04:4f:38:3c:51:fc:6e:a8:c1:0a:e3:87:62:
b5:99:e3:fd:64:9a:7c:91:60:36:9a:47:25:aa:5c:25:06:35:
f0:48:f5:28:b8:6e:8b:ee:19:4d:69:c1:cc:5a:f6:f8:25:f0:
b9:98:ac:4a:c6:14:8b:8c:74:52:d8:45:66:e1:4c:b3:99:35:
ea:25:94:b1:44:cb:0a:7b:ed:b7:e2:63:92:b3:c8:af:31:7e:
c0:99:29:96:38:9d:f4:36:ac:f9:4e:5c:73:33:d6:04:16:be:
d6:3a:8e:f6:93:8d:9c:01:56:be:b3:66:a9:b6:89:dd:ce:4a:
cb:82:3d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGrSJEKEBk3kgNFuiw97eQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjYxMDI5MDgwMDU1WhcNMjYxMDMwMDgwMDU1WjAzMTEwLwYDVQQD
Eyg1MjY4MTkwMzZmNzNlOTAxNzBkYjI1OTcxMTRiMDBlMDgxNjEyYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQiWxF1qND6YU9/LapGQnBFVjCUE
98z1EVbeOcZc0KBT7rw+4Xj9uC2k8J9Lgl976hybXezJMJwqELPxgTuph2ltAzOP
C3VvrnNPiL9GWHByxvdZxJFgHwZnz6I3wIA0T83JaPG+ytKp5BWzXfgbIIHroWmd
TQ8DFsBwAfM7tHvJr8YnT05umtzZ7oaTf9BAJei9v1ml71fhBT0I+DsoOeK3wJtf
0YeONuOtRO/SfsJxcb/IVL2UM1BUrKCUcCI+oeEw9ZSddhp+2gXgPAomcwYv05Jo
u08kd5MQXVwhlD58Wy0AQFOWzgL3FYy7/v1cR/Xlpx8Eg3LWI4yR6moltwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJoGQNvc+kBcNsllxFLAOCBYSvuMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5jDOmTQ6
z2yD7kZoUAdUzYeA9uFOVRa5Zha1hM9zLZKjtyzoFsbk0//9U01muHtd3YIRHZEw
WVBK+6PAxTkB/WZX+782zs7JFxUuMsp9Z6UZGJw2CsC4Tl8cDhseldwyopCVsfj2
h+VrvthyXc119cXJj7Bnj08eNWzxytgIS0DfU7gETzg8UfxuqMEK44ditZnj/WSa
fJFgNppHJapcJQY18Ej1KLhui+4ZTWnBzFr2+CXwuZisSsYUi4x0UthFZuFMs5k1
6iWUsUTLCnvtt+JjkrPIrzF+wJkpljid9Das+U5cczPWBBa+1jqO9pONnAFWvrNm
qbaJ3c5Ky4I9Cw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 18:10:41 2026 by rpki-client