Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: 1czbyrY772RPfyOobgKgP8J4KwxKYpb7AgTfkNaeWjM=
Subject key identifier: 58:1F:26:C5:A5:16:76:A1:80:30:AA:0B:BA:6D:3B:D2:A0:15:FB:1D
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019D3677C222D7EC11D44D246E3CB56865E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 08E0
Signing time: Sat 28 Mar 2026 22:01:51 +0000
Manifest this update: Sat 28 Mar 2026 22:01:51 +0000
Manifest next update: Sun 29 Mar 2026 22:01:51 +0000
Files and hashes: 1: 6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa (hash: KCOPaIHLr+pxyqgE343O1xjtqPMzdKkZmLUGGeiIpxU=)
2: TDnGx-yWDIFqFi83TRDVauCdL-0.roa (hash: vGAWyhTZc4YYRF0r4iG8JBgBRr3OJEchixvO3ETaTDQ=)
3: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: onPT+VCZp3rucmKGeqBT5WB9dUqxADNKriQFLG+eurs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:77:c2:22:d7:ec:11:d4:4d:24:6e:3c:b5:68:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Mar 28 22:01:51 2026 GMT
Not After : Mar 29 22:01:51 2026 GMT
Subject: CN=581f26c5a51676a18030aa0bba6d3bd2a015fb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:c1:d1:33:21:5f:32:52:01:54:54:a6:74:
5d:20:28:d9:5b:af:9e:56:34:36:de:f0:49:f7:b6:
35:74:5d:65:c7:31:9f:7e:00:45:85:78:fd:58:4b:
f8:8f:98:ff:8e:b9:00:32:5c:4d:2b:c0:91:d2:0e:
da:c3:ec:09:dd:6b:6a:bd:ce:d3:f8:83:71:7d:bc:
20:5c:21:a4:58:94:86:b9:45:68:db:d3:1c:25:93:
65:1d:64:1c:be:29:dc:3a:23:7e:18:63:79:7f:08:
26:9a:79:5d:de:a8:7e:84:91:41:1e:36:c3:4e:fb:
c5:f9:dd:06:fd:80:f5:10:e1:66:71:46:7c:16:e5:
aa:d8:57:83:1d:3a:70:7c:56:13:be:0b:a1:f7:98:
1b:99:0c:31:df:56:03:f2:a2:60:19:1f:d6:08:03:
d4:e6:59:fc:f9:96:94:e6:c4:21:29:6a:20:15:b7:
21:c4:e0:22:37:4f:60:04:07:4e:3c:97:db:c4:98:
c3:87:d3:23:53:64:99:4f:0e:51:d3:e2:2c:25:06:
42:b9:b4:37:47:f1:39:63:ed:93:c4:6b:21:3b:db:
15:de:55:99:8b:d3:3a:7c:8f:28:f9:4e:2b:53:a9:
8d:9f:27:46:0f:c0:cb:43:f6:3c:af:11:d1:c5:f9:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:26:C5:A5:16:76:A1:80:30:AA:0B:BA:6D:3B:D2:A0:15:FB:1D
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:78:a9:f1:e2:99:5e:dd:70:cb:cc:b1:2e:f6:91:de:d6:
6b:b6:0e:73:db:7c:08:04:c7:b0:ac:49:0a:37:8d:95:9d:73:
af:fb:38:92:54:6a:23:a5:ca:da:26:ef:0e:a1:9a:91:ed:ef:
4f:dd:41:80:b5:73:f8:c9:af:32:9e:f3:f6:0e:ed:47:81:28:
18:5f:10:07:33:14:a8:6b:e9:49:06:52:7c:21:05:ee:18:81:
37:dd:dd:7c:89:9f:23:84:3c:6e:62:93:87:8d:f7:30:f7:36:
d3:f0:39:9e:55:41:eb:36:1b:21:36:f5:7e:58:94:e9:4e:37:
fa:c0:41:9f:65:dd:4b:35:ad:9d:d8:df:08:c1:4b:f5:e1:67:
c2:57:a8:69:f5:25:4c:57:ab:29:b6:f4:c1:05:7c:3f:51:27:
16:09:cf:18:f1:03:30:b0:78:8d:15:3e:b9:f9:d2:b6:49:59:
fa:cb:d3:6c:d5:67:ce:e8:e7:0d:82:db:51:86:b4:3c:03:bc:
fc:4f:d9:08:93:a9:40:f1:59:5e:36:13:a1:65:a1:09:e5:a1:
8d:75:c8:ed:e4:8b:7e:af:04:62:41:17:8a:a1:ff:6d:d7:ad:
e4:2a:85:74:92:ce:23:36:79:aa:f2:19:e7:1f:74:3c:d3:88:
38:48:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:24:51 2026 by rpki-client