Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: xcelNSkP6hg5qHH1HZ+xyz0FNK0eV8QN/CrIDFM/UQQ=
Subject key identifier: 1E:D9:05:CE:B2:F1:C4:E8:3F:6C:EF:64:5B:BE:9C:65:C3:98:5E:5E
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019E3229D77D3834F6CF6951961B997A0232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0965
Signing time: Sat 16 May 2026 19:01:03 +0000
Manifest this update: Sat 16 May 2026 19:01:03 +0000
Manifest next update: Sun 17 May 2026 19:01:03 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: 75HQGypCqXUTZTrGV4sXbx4E7Kv03CLBsKEP2SqLJIQ=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:d7:7d:38:34:f6:cf:69:51:96:1b:99:7a:02:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: May 16 19:01:03 2026 GMT
Not After : May 17 19:01:03 2026 GMT
Subject: CN=1ed905ceb2f1c4e83f6cef645bbe9c65c3985e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:64:ec:99:9f:a5:0d:59:03:63:a4:64:a8:
cc:61:41:76:98:d9:d3:f0:12:b0:7b:16:68:98:7e:
b6:d9:41:10:87:5e:d1:95:f7:fb:d4:e4:68:63:32:
5b:81:e0:38:c2:3d:a6:ef:13:4a:5d:ff:26:67:dd:
3d:d7:6f:57:e6:f5:a9:6a:ff:59:11:07:58:13:91:
9d:b5:df:73:a5:49:4b:d1:de:3e:8f:7f:59:52:c5:
15:8a:b2:bb:16:69:49:c8:c4:a8:74:4a:2c:ff:1e:
79:e9:3a:1c:8a:0f:5f:3b:a8:2e:be:58:b9:45:b7:
18:49:d6:ca:b3:e2:c9:e8:aa:aa:0c:71:d1:12:6d:
9b:32:b0:ea:15:44:6f:4e:f9:70:90:b0:16:f6:0c:
55:f1:ff:c9:af:e4:ce:89:20:f0:5b:db:25:85:94:
2b:5d:aa:85:ef:35:0d:59:b9:55:43:ac:11:5c:45:
79:e4:dd:b0:f0:44:c5:aa:29:4a:2e:97:88:bf:c3:
3e:1e:24:50:84:90:3d:89:10:1f:f7:0c:85:cd:55:
5d:84:13:e3:40:b7:23:6b:a1:a6:7c:3d:2a:56:c5:
e9:1e:6b:60:cb:12:7f:96:91:ae:bb:81:63:1d:fb:
b9:9a:b1:c1:0f:dc:cf:76:ae:80:e9:44:d7:81:9b:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D9:05:CE:B2:F1:C4:E8:3F:6C:EF:64:5B:BE:9C:65:C3:98:5E:5E
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:16:e4:f0:9c:12:60:03:ac:2c:cb:6b:bf:42:a0:eb:07:df:
1c:6e:68:ed:99:3a:c0:bd:9d:8c:26:26:5d:70:e5:7a:61:a7:
1d:98:a1:6e:f0:f9:26:43:2b:d0:d0:5a:7d:61:ca:d2:29:b6:
6d:3c:ca:c3:4b:25:46:fa:8d:1a:b8:82:fa:56:46:b6:55:3a:
f4:da:d2:e0:cf:84:d6:a8:53:3e:3b:5f:db:cb:cc:46:ab:b3:
8a:b4:dd:f4:ac:80:8c:f6:6f:16:76:fc:ca:41:4c:23:24:4c:
e5:bc:63:d3:04:bd:f7:6d:a6:85:ff:2a:c3:30:3e:ac:b8:3c:
41:37:34:69:20:9b:28:ed:76:c0:69:2b:ed:f5:4d:da:b3:0f:
8e:c6:31:1d:36:51:38:cf:fb:74:ec:dc:22:5c:14:8d:5e:8c:
52:3a:19:35:d6:28:4f:67:f9:16:79:ca:15:11:a7:85:83:57:
1e:40:73:a6:e1:de:6c:dc:4f:6a:ba:fc:f5:40:58:ec:fc:fe:
b2:50:82:da:e8:a2:a5:df:bd:8a:29:42:8a:9b:fc:13:d7:32:
b3:7b:91:7f:b4:72:ea:2c:f9:99:56:2d:b2:de:13:21:81:ed:
53:72:4a:83:c0:af:3b:b8:94:61:57:3e:0a:55:22:64:d4:e5:
42:4c:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:24:59 2026 by rpki-client