Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: sQ5imujS6FGWgkXb/6s4YwPac143lpPxbNNqrhPXUwY=
Subject key identifier: 4A:AD:BC:2F:0D:88:5D:A2:A0:A3:22:C5:05:4B:E9:59:E2:C7:C6:A2
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019FA2CE55A24FF8B260BC343B4BAA332D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 075F
Signing time: Mon 27 Jul 2026 09:00:59 +0000
Manifest this update: Mon 27 Jul 2026 09:00:59 +0000
Manifest next update: Tue 28 Jul 2026 09:00:59 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: d+pDng6/kR/lXd/q1Trd7IaSHk/mG/8PbfdZkODmF0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:55:a2:4f:f8:b2:60:bc:34:3b:4b:aa:33:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Jul 27 09:00:59 2026 GMT
Not After : Jul 28 09:00:59 2026 GMT
Subject: CN=4aadbc2f0d885da2a0a322c5054be959e2c7c6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:fc:5d:0f:0b:07:13:95:27:bf:e7:d4:a5:
59:ab:dd:2b:df:ee:77:de:a2:ea:ac:af:cf:b5:61:
f0:69:43:00:4b:a5:9a:86:65:51:0f:57:42:00:99:
a0:ca:dc:0f:ee:b6:3c:7e:72:d2:78:84:c4:40:79:
22:98:5d:ea:cc:cf:6a:57:dc:d5:bd:ee:bb:90:eb:
d9:48:be:8f:99:f4:53:de:3e:c8:5b:a6:ba:bc:46:
05:94:b3:7c:7d:e8:e0:d8:d2:c5:e1:05:df:ee:19:
3b:72:13:23:c6:c5:25:82:ee:51:d2:2e:6d:07:05:
a1:24:1e:3f:1d:b6:ba:82:fb:e0:ec:c0:98:2f:b7:
2f:ea:9e:44:8d:7c:25:8d:18:96:20:65:71:db:ca:
d1:2b:27:4c:49:0c:16:31:8a:8e:cb:df:8b:6a:62:
52:38:11:7f:63:e2:ff:b9:34:30:2b:2a:4f:e2:ee:
2c:89:0e:48:22:71:67:3a:05:9a:b6:1a:68:a9:b5:
72:b8:1c:52:c1:27:33:3f:bd:f9:95:ff:93:aa:5a:
ba:70:00:76:89:72:b3:43:3e:e1:b9:f2:ea:c6:26:
3f:9d:4f:2b:56:93:a6:62:52:7d:69:aa:c6:a6:79:
55:37:ec:9e:8c:8d:75:b9:bb:f3:f2:31:89:de:a5:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:BC:2F:0D:88:5D:A2:A0:A3:22:C5:05:4B:E9:59:E2:C7:C6:A2
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:69:83:fb:a5:b1:50:6c:7a:87:74:ee:f7:7f:da:6c:30:
64:b4:45:92:c7:bd:8c:4c:4e:09:a1:f2:5d:ae:8c:28:a8:93:
db:92:15:ad:87:07:4e:c1:22:b6:0d:a7:30:95:98:74:a8:be:
cc:21:08:67:cb:33:5a:4b:70:6c:e7:ff:00:6f:f2:a8:33:c3:
2e:9d:78:ae:de:32:ae:c6:ac:c6:36:44:e8:b4:25:3a:16:48:
f2:89:2b:cc:44:99:74:43:ae:6b:81:77:05:8a:33:c4:e2:4d:
2e:a8:fe:df:82:d5:84:8c:d5:f3:13:18:ab:31:f9:7f:ba:38:
e4:e8:aa:bb:9e:6b:15:61:a5:79:41:a1:6b:5a:a0:34:60:3e:
2d:6e:0b:b7:3e:1b:b5:12:e2:b2:9f:9d:8a:3d:ad:2b:ab:b4:
4c:1a:d8:b3:df:6c:dd:8e:a1:0e:08:cb:c0:be:fc:92:be:74:
a4:ce:b9:9d:df:44:5d:8b:42:5b:55:9a:25:0e:e3:fc:0f:8f:
6f:d2:91:71:78:0f:5f:b2:1f:74:c1:6e:17:48:dd:f0:ca:fe:
74:85:e1:54:97:6e:b0:4c:db:28:88:34:05:7f:40:f1:37:56:
f2:c2:a2:f2:14:15:de:19:ad:78:de:6b:e6:64:65:42:d9:79:
34:17:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:54:31 2026 by rpki-client