Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: DhjjzosroaLCKKvREyhmCSK1+Pp4sUNVYSkJU0xvuhA=
Subject key identifier: AE:51:D4:8E:0C:A0:D9:93:6B:61:59:DB:ED:9E:4F:4E:03:FE:27:F1
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01A09057DCAD93620049C606B88B8228A135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 07DA
Signing time: Fri 11 Sep 2026 12:01:12 +0000
Manifest this update: Fri 11 Sep 2026 12:01:12 +0000
Manifest next update: Sat 12 Sep 2026 12:01:12 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: LQWJjehmXMeLUPxzdgy12mGs9E8M6ewd+k80jmvIRxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:dc:ad:93:62:00:49:c6:06:b8:8b:82:28:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Sep 11 12:01:12 2026 GMT
Not After : Sep 12 12:01:12 2026 GMT
Subject: CN=ae51d48e0ca0d9936b6159dbed9e4f4e03fe27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:68:ab:26:cc:06:95:a1:bd:b2:d7:19:89:
ea:21:e8:46:83:f5:d4:de:e8:22:48:61:46:a5:00:
d8:79:ed:07:46:9b:2b:a0:7c:d3:5e:f1:63:b1:14:
b2:29:52:1e:a3:6d:3c:c5:fd:82:2a:e5:d2:39:47:
e2:6f:12:c9:6f:5e:07:6d:b3:46:03:78:5a:01:23:
99:87:4f:f5:ec:69:7c:23:14:f7:25:a8:ef:a4:e7:
1a:d9:ce:cf:c0:1d:53:bc:55:2d:a2:9f:31:a1:86:
ec:11:5a:12:08:e9:19:d4:2a:50:d2:41:73:b5:cf:
42:ac:a5:15:4a:79:46:b8:b2:c5:72:7f:4f:04:f8:
d7:37:60:cb:7f:4d:c6:2f:6f:57:59:bd:c4:72:21:
21:cb:d7:57:93:a4:f0:31:be:2a:95:e4:43:e5:4e:
8b:3a:d5:81:87:d6:a0:da:61:d7:b7:1e:13:01:b1:
56:87:1d:42:ee:7d:a7:a0:84:f5:53:fb:17:73:2c:
4b:57:57:23:b1:a4:71:7c:dc:e7:c2:7e:da:3e:5c:
48:15:b0:e0:5d:7c:f7:b3:c7:c0:3b:4b:8a:96:45:
a4:a1:79:cd:ef:c1:3a:81:12:e2:95:8c:53:ee:df:
64:4b:66:f5:0b:56:a7:bc:74:4d:6c:bd:a5:25:5a:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:D4:8E:0C:A0:D9:93:6B:61:59:DB:ED:9E:4F:4E:03:FE:27:F1
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:42:a3:5b:f8:9a:09:c2:c6:d5:df:f0:6c:54:7e:dd:aa:e6:
af:39:1a:da:a4:5c:58:40:16:ca:ce:67:e1:3b:cc:da:ba:80:
93:95:9b:fb:d4:cc:7e:2f:7e:e3:1c:b9:ff:ff:46:61:8c:c9:
43:bd:b1:a1:53:ad:15:96:cd:db:a9:37:ca:3b:78:74:30:fa:
40:02:83:09:26:df:a9:18:36:9e:d7:4d:cc:97:bf:24:29:e8:
a7:7b:ee:c4:a8:72:b2:89:23:18:d8:50:de:d7:e9:9d:2f:07:
e2:f1:e6:4a:fc:38:7b:13:d2:82:cd:f5:b8:12:be:59:be:4d:
65:85:2a:e3:b9:4d:c3:27:67:7f:64:d6:5a:de:04:7e:ae:af:
2b:50:aa:7c:6a:81:42:35:e8:c8:3c:b8:da:78:46:a8:60:15:
b6:a2:30:33:75:61:69:e5:e5:53:8b:db:2b:51:48:f4:0e:aa:
de:7f:c8:de:78:12:29:d1:a2:fd:65:37:d9:19:c2:1f:0d:e4:
95:4a:5e:53:68:8b:4c:a2:7e:5a:93:81:9a:8b:1b:5f:00:06:
2a:86:31:9e:0f:37:e8:72:ee:a7:ef:04:2a:8a:5a:fe:ca:a8:
9a:33:95:77:b7:30:b4:2e:e8:d5:a1:8b:75:fa:06:72:d8:27:
03:c5:3c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQV9ytk2IAScYGuIuCKKE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDMxYThiNmEyODk0MGM3OTM2YmE2ZTc4MmI5NGEwOTYy
YmZiMjcwHhcNMjYwOTExMTIwMTEyWhcNMjYwOTEyMTIwMTEyWjAzMTEwLwYDVQQD
EyhhZTUxZDQ4ZTBjYTBkOTkzNmI2MTU5ZGJlZDllNGY0ZTAzZmUyN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwdoqybMBpWhvbLXGYnqIehGg/XU
3ugiSGFGpQDYee0HRpsroHzTXvFjsRSyKVIeo208xf2CKuXSOUfibxLJb14HbbNG
A3haASOZh0/17Gl8IxT3JajvpOca2c7PwB1TvFUtop8xoYbsEVoSCOkZ1CpQ0kFz
tc9CrKUVSnlGuLLFcn9PBPjXN2DLf03GL29XWb3EciEhy9dXk6TwMb4qleRD5U6L
OtWBh9ag2mHXtx4TAbFWhx1C7n2noIT1U/sXcyxLV1cjsaRxfNznwn7aPlxIFbDg
XXz3s8fAO0uKlkWkoXnN78E6gRLilYxT7t9kS2b1C1anvHRNbL2lJVquIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5R1I4MoNmTa2FZ2+2eT04D/ifxMB8GA1UdIwQY
MBaAFJwDGotqKJQMeTa6bngrlKCWK/snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQt
ZjAzZWI4NzQwYzNlLzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQtZjAzZWI4NzQwYzNl
LzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEKjW/ia
CcLG1d/wbFR+3armrzka2qRcWEAWys5n4TvM2rqAk5Wb+9TMfi9+4xy5//9GYYzJ
Q72xoVOtFZbN26k3yjt4dDD6QAKDCSbfqRg2ntdNzJe/JCnop3vuxKhysokjGNhQ
3tfpnS8H4vHmSvw4exPSgs31uBK+Wb5NZYUq47lNwydnf2TWWt4Efq6vK1CqfGqB
QjXoyDy42nhGqGAVtqIwM3VhaeXlU4vbK1FI9A6q3n/I3ngSKdGi/WU32RnCHw3k
lUpeU2iLTKJ+WpOBmosbXwAGKoYxng836HLup+8EKopa/sqomjOVd7cwtC7o1aGL
dfoGctgnA8U8Vg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 18:09:51 2026 by rpki-client