Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: FD5rqTiq9EkkmsMWUu/P6BiK/6TLogoyLMvf6CpFGpA=
Subject key identifier: 95:6D:C8:F5:46:99:5E:36:3D:10:AF:BA:5F:D7:20:FD:32:62:71:1B
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019CE5C948805BAC4955767C4EC041B5ED83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 05F4
Signing time: Fri 13 Mar 2026 06:01:39 +0000
Manifest this update: Fri 13 Mar 2026 06:01:39 +0000
Manifest next update: Sat 14 Mar 2026 06:01:39 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: rZmsjDvlRZI6W/YiewyJOVtL5yjtikRUwhU9SZ3ADqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:48:80:5b:ac:49:55:76:7c:4e:c0:41:b5:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Mar 13 06:01:39 2026 GMT
Not After : Mar 14 06:01:39 2026 GMT
Subject: CN=956dc8f546995e363d10afba5fd720fd3262711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:d1:ad:64:92:6e:00:ae:5a:4d:ce:65:95:
3b:c8:2d:3f:00:75:cf:a5:a4:65:79:32:ab:6d:b1:
99:26:f5:67:3e:fd:15:9b:84:c9:26:5f:f9:35:de:
c2:54:a7:79:e9:2f:07:c5:b2:73:79:36:30:9f:3a:
46:7a:0f:1d:32:a2:ca:87:a8:24:c4:80:20:aa:bd:
56:80:5d:74:a9:77:81:ed:ce:17:26:9c:f8:d0:f6:
46:d2:91:ce:85:48:a9:d4:3d:6d:3e:7f:2d:01:ff:
65:f7:71:03:74:2c:2f:28:3f:89:79:eb:28:d6:ca:
ea:4b:55:1a:44:a8:9c:4d:d2:0b:a7:0d:dc:3c:06:
5b:57:5e:30:df:44:42:51:ff:ff:68:2d:0b:53:e2:
bf:8d:7e:ae:23:9d:2e:33:ef:18:d1:f9:fd:cc:ea:
38:63:c0:02:f2:46:02:05:8c:3c:51:03:16:c5:0f:
a0:b7:f4:5d:e0:f2:98:6a:ec:c4:07:2d:33:24:10:
94:c7:33:01:3e:54:38:54:56:17:cc:ad:1b:86:71:
78:eb:0b:8b:0c:cb:45:4f:50:c4:f5:30:e6:46:ae:
5c:ba:68:87:a6:c7:a9:16:bb:98:7e:a2:4e:6c:f7:
34:1b:ad:60:80:54:3c:20:3f:9b:2d:0e:5f:af:70:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:C8:F5:46:99:5E:36:3D:10:AF:BA:5F:D7:20:FD:32:62:71:1B
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:53:88:93:f7:e4:c1:8d:ed:51:a3:69:a1:60:26:71:fc:ae:
b3:35:b3:25:19:5e:c6:6e:60:2b:b3:c8:00:53:81:e1:b7:aa:
e5:3a:bd:78:71:56:18:db:0b:03:60:91:7b:01:46:50:97:53:
13:9b:4a:b1:d1:cc:56:db:b9:5a:eb:90:c8:9b:89:39:e1:1a:
df:15:8d:2c:1e:24:a0:be:c2:da:29:e1:b5:e4:64:f7:a4:82:
e4:b8:9a:ff:a8:33:41:b1:e2:e8:60:a7:96:23:6e:33:06:19:
54:4e:ca:04:99:01:41:76:01:18:3d:3a:e7:84:0f:32:f7:ca:
39:17:fb:77:f8:ee:79:1f:e7:c1:98:68:e8:89:36:34:00:23:
cc:74:21:fd:85:ee:62:f7:09:05:8a:eb:57:cc:67:34:f2:10:
6b:80:1f:f3:26:88:e8:91:ea:9e:5b:23:56:a3:c6:b7:5e:26:
c8:59:60:cb:60:76:5d:8f:a7:57:db:82:c3:10:f5:22:a3:b0:
93:11:34:9e:62:af:29:62:c9:8f:a6:b3:68:d4:2b:fc:43:51:
fe:f1:17:6f:2e:db:75:40:28:f1:29:b1:aa:ea:23:44:ab:f9:
29:9e:60:5d:e0:30:73:59:c3:3f:e7:c0:6c:28:5d:0e:50:50:
73:e5:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:52:38 2026 by rpki-client