Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: vtn6cA9nWRZpdaZ+xWIkRzjAMUaKsCBjnwkkRoxDWF4=
Subject key identifier: 36:AB:7C:C6:8B:78:4D:FD:4A:48:D7:A2:CC:21:EE:A2:FB:A8:4A:51
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019DCF75CB308C333494EFD385565778F316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 066D
Signing time: Mon 27 Apr 2026 15:01:36 +0000
Manifest this update: Mon 27 Apr 2026 15:01:36 +0000
Manifest next update: Tue 28 Apr 2026 15:01:36 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: MUUlBizF8Kp/u5+4Vqvg0pIgDt2hm1SObRkTqIMMjCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:cb:30:8c:33:34:94:ef:d3:85:56:57:78:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Apr 27 15:01:36 2026 GMT
Not After : Apr 28 15:01:36 2026 GMT
Subject: CN=36ab7cc68b784dfd4a48d7a2cc21eea2fba84a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:5c:4f:f5:cb:9b:1e:6d:d3:d6:58:7e:74:
f4:16:b7:a1:bd:71:08:48:63:24:6b:c6:e8:b1:76:
e2:43:08:0e:a2:94:40:98:61:47:86:90:fb:20:75:
5d:2d:ca:98:cc:5f:52:e9:a4:93:d1:cd:d3:54:d6:
f8:cd:b3:53:f9:83:72:56:28:22:17:77:8a:47:0a:
35:58:12:b4:b2:4f:24:61:64:fc:50:aa:f4:ea:e4:
26:e3:3e:8a:42:b4:e0:80:0c:91:1c:74:99:13:82:
59:f3:db:e4:c5:1f:cd:79:54:f9:a9:2b:8b:51:ce:
34:0c:8e:df:23:21:b3:d9:3a:f0:e2:10:40:a0:5f:
86:39:41:62:87:71:7f:d4:51:37:b1:4d:cb:c7:eb:
3f:f9:8e:dc:1b:57:ec:f2:21:8d:11:45:f3:44:21:
2b:3e:c3:df:98:a9:e6:ec:71:3d:75:1b:a5:83:63:
dc:b8:3f:1d:92:5c:47:85:ed:b6:3a:b3:9c:cb:08:
2e:02:1f:b2:24:cf:05:c3:f9:51:a1:2d:a3:23:94:
a5:18:09:d4:5b:b2:e7:4c:b6:ef:6e:af:d7:7d:fb:
75:fa:41:b5:96:77:e5:26:24:83:6f:a7:d5:c0:16:
38:cb:49:5d:f7:72:45:b7:c9:a6:bb:7e:f6:a6:08:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:7C:C6:8B:78:4D:FD:4A:48:D7:A2:CC:21:EE:A2:FB:A8:4A:51
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fe:79:bf:41:3e:44:38:2a:4b:fe:68:af:30:bc:d6:7b:26:
67:2a:88:b7:5c:18:53:78:cb:29:26:c8:8f:6b:35:f7:88:57:
29:59:01:1c:eb:d9:ce:b1:55:ea:fe:11:96:b4:d6:0b:03:25:
f6:1e:f8:a9:0f:c8:52:e6:91:90:f6:0c:d0:7c:f8:fc:a3:11:
d5:1a:68:50:5d:b2:c6:7f:75:06:39:99:54:a3:ad:0d:29:a7:
20:42:ed:61:6d:ba:c7:82:9a:39:84:27:f3:72:d8:45:08:09:
8e:e7:cd:08:52:74:0e:7c:99:dc:a8:7b:0e:b9:42:cd:f4:e6:
c2:f1:e2:34:86:22:50:63:21:d8:b2:28:86:38:bd:b9:02:60:
49:6a:d2:63:b3:ee:fc:df:b6:5a:e1:af:6e:0a:a6:28:5c:3e:
d5:a8:87:c8:0b:af:8b:54:b3:8c:77:ad:c9:06:d1:b4:71:a5:
5f:54:e7:be:38:6e:fd:de:ec:e7:e6:9e:e0:5f:28:64:89:c3:
98:9c:0d:aa:86:05:39:45:b3:74:f3:c8:5c:32:99:af:9d:cf:
b0:63:fb:cb:05:32:97:91:ac:b5:13:38:26:d5:49:65:04:33:
9d:3d:5f:dc:13:7c:48:04:e1:f3:d2:56:72:7b:1e:4c:35:5b:
0f:2f:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:15:16 2026 by rpki-client