Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: +Dr29py7o+15INS4SfpnPxrCmxRImyEfuyCf6Gl5n5Y=
Subject key identifier: DA:3F:7C:8C:E9:D4:38:B0:75:2C:D5:15:F3:40:EF:29:1C:77:AA:FF
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019DA7C3C872D0167081A98EF69CD57EBCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0D0F
Signing time: Sun 19 Apr 2026 22:01:59 +0000
Manifest this update: Sun 19 Apr 2026 22:01:59 +0000
Manifest next update: Mon 20 Apr 2026 22:01:59 +0000
Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: HIDBkSvHYVz1CjXv/yjOkvF4Or1LCNfqr6U3w1SlTxY=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:c3:c8:72:d0:16:70:81:a9:8e:f6:9c:d5:7e:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Apr 19 22:01:59 2026 GMT
Not After : Apr 20 22:01:59 2026 GMT
Subject: CN=da3f7c8ce9d438b0752cd515f340ef291c77aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:98:df:eb:6e:c9:1c:4b:2c:49:c0:aa:fa:
c8:6a:5d:2d:a3:b7:24:91:98:58:41:db:c2:22:2b:
d4:b7:e4:5f:77:d0:0e:80:44:fd:26:4b:3f:d9:ee:
82:a4:dd:59:36:ae:b6:18:9c:c5:f8:01:c6:a4:8c:
ff:92:06:14:5b:e6:53:32:9d:9b:a3:b3:15:bc:97:
81:d1:74:81:2a:26:a8:84:aa:a9:67:40:1b:37:df:
64:79:ab:85:f7:99:e3:a9:e6:39:7f:6b:7b:95:13:
cc:7e:c0:a2:97:2d:df:b2:a3:32:be:93:c3:db:d2:
4a:5b:af:f4:23:6c:ea:a7:9d:15:02:2f:4f:31:d5:
cf:35:27:b0:5a:86:66:e8:4d:9e:b4:8f:dc:b5:da:
92:1f:33:17:b3:09:54:5b:94:f9:03:1c:1f:83:35:
15:dd:96:21:a0:d8:b7:c7:ee:6f:8a:a7:4c:b4:0a:
df:48:07:60:56:4f:a7:97:60:ef:5b:9d:89:06:bd:
8d:79:49:eb:76:1f:c0:8b:02:24:70:42:41:3b:9d:
99:06:04:d2:7e:7d:3b:8f:9c:dc:26:39:90:3b:98:
a8:5f:49:43:34:d9:2c:a1:ac:1d:9e:7c:0b:22:5d:
50:71:e0:4d:6a:83:3f:c1:94:ba:ad:08:b4:f8:81:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:7C:8C:E9:D4:38:B0:75:2C:D5:15:F3:40:EF:29:1C:77:AA:FF
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:6e:f8:db:2b:fe:b1:75:1b:9c:c9:ee:89:c6:9c:be:f1:
73:5b:af:8b:31:75:d6:6a:c5:41:18:8c:e7:71:69:71:05:65:
a2:3b:ec:ec:51:d4:2d:7f:74:78:62:85:7d:cf:fd:8c:e4:0b:
bb:fc:4a:ec:54:fe:ff:57:db:b8:38:b5:0c:cf:72:ea:95:2d:
4c:78:4b:7b:c9:2c:b6:57:64:7b:5b:fc:bc:8b:d8:d7:70:1f:
c8:c4:7e:72:bc:2b:4f:8c:29:d2:27:82:4d:93:55:da:05:71:
dc:52:1d:92:89:15:55:0d:e7:8c:35:75:af:73:12:78:4f:df:
ac:18:2b:9c:7e:a7:d4:d7:08:e9:55:0e:19:f9:68:f3:a8:4b:
2c:65:3f:a4:77:1f:31:e1:e0:0b:96:ec:c4:36:ba:d9:13:57:
1f:21:32:cb:94:91:e9:15:a2:31:27:55:8f:91:a0:8b:6f:fc:
69:75:74:07:77:61:ef:9c:31:ba:9b:4a:99:68:ae:e7:f1:a7:
6d:7d:0b:c5:29:d4:2e:98:54:ef:81:61:98:51:fa:69:bf:14:
2e:8a:17:3b:f8:95:e7:81:d8:15:26:c9:96:a3:0d:02:01:ba:
bb:7a:d9:0a:cd:44:62:b0:27:69:4f:91:0b:af:75:25:3b:14:
25:4e:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:27 2026 by rpki-client