Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: CJIOdsZzdGthj6L4QadMrl00kVzMaRH2cy4Li7YGe/8=
Subject key identifier: 8E:63:22:DA:13:2F:18:6B:05:EE:32:43:F7:8E:9E:F4:FB:B2:8A:8C
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019F6B044D2E4F3907C9B4F4E1D2B705721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0DFA
Signing time: Thu 16 Jul 2026 13:01:11 +0000
Manifest this update: Thu 16 Jul 2026 13:01:11 +0000
Manifest next update: Fri 17 Jul 2026 13:01:11 +0000
Files and hashes: 1: 1-ryJIEOqpA8l9RbN7-gklZBdq0w.roa (hash: 4ws6lmAs2NjopGJM8783tZuCfDXl+eALfjhicTQgH0Q=)
2: J4FFEtQcJC3-DBhRRLtMQex6EYI.roa (hash: iaQJuASwGUMU2i6IS0uW5fUdoLz/JbnfzKlvq/DfoBk=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: 8pVuUv9n/0CQRCs0UDX8xBdKv2pEurj2s9rOr7f5SZI=)
4: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:04:4d:2e:4f:39:07:c9:b4:f4:e1:d2:b7:05:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 16 13:01:11 2026 GMT
Not After : Jul 17 13:01:11 2026 GMT
Subject: CN=8e6322da132f186b05ee3243f78e9ef4fbb28a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:c1:fa:c3:6f:ea:a8:b6:8b:22:62:2a:ab:
8d:ce:bf:cc:2b:e9:6c:37:bc:0b:ee:0a:d5:f9:33:
16:a8:be:a4:6c:0b:7b:2a:f3:25:9f:3c:1e:ec:71:
9d:34:d4:c3:99:c3:0d:43:c5:76:7a:de:1a:86:e4:
59:0e:9a:c7:4d:cc:fd:51:f9:cb:db:77:26:4a:cf:
c3:e9:a7:4f:bf:6c:29:d2:4c:48:e7:f6:f3:b1:23:
9e:41:43:6a:a1:81:57:29:b1:b7:f1:6c:98:4b:d5:
31:7f:e3:cc:f8:f8:89:d8:a2:47:c0:32:63:f7:fc:
ab:4f:8e:48:e3:dd:80:b0:55:c3:60:a2:44:79:fe:
d3:08:2a:15:07:66:c5:84:5f:9c:d0:ee:ab:85:ff:
70:5b:64:d0:0f:21:8c:c1:9d:03:05:1b:08:a2:4d:
45:30:83:d4:33:06:87:eb:8f:59:2a:88:ee:f4:a9:
1e:36:d6:22:31:03:5f:6d:d2:03:0c:94:23:e0:f1:
be:83:09:57:33:67:11:d9:c1:fb:cd:f3:a3:c5:51:
e8:0f:8d:09:9a:60:4e:c5:fe:93:56:cd:c1:c0:a9:
36:0a:7a:ac:30:d4:a4:a3:09:43:d7:fc:1b:23:46:
af:9b:74:48:59:75:44:6b:51:ef:f0:c3:ff:ad:a2:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:22:DA:13:2F:18:6B:05:EE:32:43:F7:8E:9E:F4:FB:B2:8A:8C
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:4c:b1:da:29:ff:76:0f:c8:b7:12:e0:c1:c4:58:d8:ce:
b6:0c:cd:df:63:59:0c:9f:ed:0f:17:83:e6:58:e0:8c:12:e0:
02:69:53:ae:d6:11:30:06:94:74:51:fd:9b:62:bf:3f:b7:d8:
2e:07:a2:84:45:4f:13:6a:06:7b:59:66:5e:78:5a:f0:21:9a:
71:1d:d9:e9:fa:7b:8f:a6:b6:29:64:52:40:21:bb:25:86:ba:
12:bb:1b:95:92:07:ee:64:38:70:1a:ce:fc:d4:24:1f:cb:a4:
61:65:01:d3:9a:8f:da:4f:1b:0d:bc:46:a3:c0:a6:cd:cc:2e:
b5:4b:a4:a6:df:c6:5b:ff:cf:de:09:c7:20:b3:87:32:75:d4:
8e:94:aa:38:23:9c:a2:fb:5b:89:70:66:b4:6e:e6:63:f8:18:
d6:79:69:22:4c:01:a6:3f:cf:3b:1e:81:50:9c:dc:73:cb:39:
87:1e:42:13:9a:c6:70:af:e9:5b:09:72:09:d2:7c:28:ee:ea:
da:80:74:1c:f3:8e:c4:92:e1:15:39:fd:fb:4c:9f:74:18:2d:
9c:87:23:c3:84:7e:ec:cb:7f:43:23:61:cd:82:26:90:86:e0:
76:2f:ea:b2:e2:43:7c:be:c9:ae:68:90:5d:48:ef:93:a7:ab:
ab:db:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 16:18:44 2026 by rpki-client