Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: BkVHyM6hNNSeZTqUBJJckGz2hVVLdnmD9GUN7EGVebw=
Subject key identifier: D2:2A:CB:FA:1E:20:E5:63:51:6B:E1:57:C4:1F:46:04:C1:83:69:A5
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01A189774A1713DC47DEF8638B6D8AF825AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 085B
Signing time: Thu 29 Oct 2026 21:00:58 +0000
Manifest this update: Thu 29 Oct 2026 21:00:58 +0000
Manifest next update: Fri 30 Oct 2026 21:00:58 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: 7P9pzFy2DwAU52oNDNUPJB78kPc0vFFns1BSSOyEqLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:4a:17:13:dc:47:de:f8:63:8b:6d:8a:f8:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Oct 29 21:00:58 2026 GMT
Not After : Oct 30 21:00:58 2026 GMT
Subject: CN=d22acbfa1e20e563516be157c41f4604c18369a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:f4:19:68:06:10:61:fd:eb:5a:98:2a:ea:
52:50:20:52:f4:65:de:db:c5:49:37:be:d3:9e:40:
47:19:80:4d:f7:c4:c0:e4:61:9b:0e:db:4f:28:c2:
27:4c:68:57:45:3c:98:5e:da:8d:bf:e9:14:d7:54:
e7:27:51:24:b5:0f:84:01:fc:37:12:71:02:d9:29:
53:13:bd:c9:c9:fc:a5:77:69:01:68:be:46:26:6c:
5c:c0:d4:1b:02:c8:0c:90:ba:7a:eb:bd:0f:32:4a:
9b:42:a0:80:bd:ee:d2:22:80:66:dd:b6:ac:0a:9e:
8a:2b:3b:02:4e:30:a0:07:ed:95:64:79:fc:f9:bd:
56:d9:ac:b1:72:82:b3:6d:3c:06:59:41:d2:7b:57:
de:2f:57:25:b5:be:14:4a:79:39:40:5a:79:13:2f:
32:03:d0:e5:07:bf:6e:6a:73:47:92:24:2b:e6:c7:
af:e4:3c:50:d5:53:7f:36:6d:54:d3:03:86:04:21:
52:26:c5:d4:8d:58:79:6c:4d:7a:b7:4e:18:a6:40:
c9:17:c4:94:20:10:15:2d:3a:c9:a2:f9:07:74:bc:
8d:af:49:d5:e5:eb:52:24:1b:e2:e5:a8:60:6f:88:
cd:07:1b:bc:5a:8a:ae:6c:5d:a2:e6:ee:1f:47:fd:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:CB:FA:1E:20:E5:63:51:6B:E1:57:C4:1F:46:04:C1:83:69:A5
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:9b:76:68:02:37:31:ca:b6:59:e4:8f:e0:f3:07:43:2a:
29:11:e5:90:cb:67:3a:c2:be:a9:17:6e:fc:7b:30:4b:3a:89:
74:f2:16:73:86:da:ab:bb:58:c8:42:c5:da:76:ea:59:a1:95:
26:16:00:9b:7a:30:44:19:3e:72:37:ac:47:9d:d7:84:18:d9:
f7:7a:f8:9f:28:4d:d3:ff:64:ea:ab:27:b6:d9:f5:36:50:d7:
fe:bf:29:72:f5:d7:bb:00:83:b4:28:1b:59:f4:81:c1:ca:90:
23:41:f3:ab:77:49:da:ca:d8:f3:69:37:6a:cb:7e:20:7d:c8:
2d:33:5b:6a:0d:02:fc:a5:15:7f:82:39:9b:ba:58:8e:3e:c0:
ff:be:a9:d9:b4:c8:e6:6d:5d:1c:23:49:f2:2f:7a:c7:bf:19:
e3:32:2b:10:f7:f1:e7:2d:9f:bf:38:c0:18:f7:e1:78:c4:31:
cc:67:8d:af:b9:12:75:f5:52:88:e9:64:8c:d6:44:b5:01:ff:
a7:c1:e0:ea:3a:3f:98:52:16:ac:b5:1e:26:b7:c1:15:9a:96:
6f:80:64:99:ca:b0:88:ae:1a:01:89:68:da:76:6a:51:9c:7d:
13:74:70:5b:a8:d5:32:b1:df:15:5a:ad:f9:a4:2e:ed:f5:bb:
59:e6:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:12:42 2026 by rpki-client