Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: rOZgL4zJ38mmFQ8aJBUQvRLekRLhCMwsRjEzMmUT/rg=
Subject key identifier: 3F:67:F2:2F:47:35:C2:AF:49:26:35:67:80:D4:A7:E3:E6:78:7C:CD
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 01A1551C301013D7003D03C1331D3774324F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 1AB5
Signing time: Mon 19 Oct 2026 17:01:12 +0000
Manifest this update: Mon 19 Oct 2026 17:01:12 +0000
Manifest next update: Tue 20 Oct 2026 17:01:12 +0000
Files and hashes: 1: KJhzEQAWLMV6-n64J1IGurNPXJA.roa (hash: CtHxiuCIKbij596MTURQ2oG9yHp4BtbuHJNvFD8eVFU=)
2: M8HxuDTjeppXENHYtsmDwzIxfqg.roa (hash: ehN4HCrYdAsRJz9J+AoM/g7LUsIA+10CKLm98CDchvI=)
3: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: lP9xT7YjCpciQWDgXS73yh9ZjD6RgM23yXeXCPc9U20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:30:10:13:d7:00:3d:03:c1:33:1d:37:74:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Oct 19 17:01:12 2026 GMT
Not After : Oct 20 17:01:12 2026 GMT
Subject: CN=3f67f22f4735c2af4926356780d4a7e3e6787ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:ec:83:d9:2c:0f:99:b3:cb:b0:06:73:9b:
22:1f:2c:76:fc:1d:09:7e:f8:06:e3:8c:e0:53:93:
5f:f4:94:61:9d:35:37:9d:12:24:d2:ec:75:78:d8:
6a:ec:68:11:6b:3e:34:00:60:4c:5b:fc:a5:0d:9b:
6d:ee:07:19:cf:53:3b:18:2a:5a:56:9b:68:9b:59:
b9:3b:97:9c:83:75:b1:b1:01:79:bb:20:56:c2:b6:
54:e3:93:eb:bd:1c:9f:28:96:a8:7e:3e:99:08:a8:
3e:05:cb:ff:c9:a3:0d:47:e1:49:31:61:e0:a2:61:
26:c6:cb:93:27:2b:c7:99:e0:2c:3b:46:9f:ce:bc:
7a:59:3e:47:78:5d:46:3f:db:ca:ef:76:a0:9a:21:
f5:29:b9:9d:f4:7a:1b:2e:1e:17:ed:c8:bd:64:85:
ab:7c:05:95:ca:08:2a:b1:4a:35:b2:0c:23:9c:78:
38:ac:06:7c:1a:df:35:b1:86:cc:d2:37:03:c4:40:
39:6e:51:59:6b:43:ac:47:88:60:c9:db:d5:c5:38:
8c:01:be:ad:34:d6:0d:7e:bf:d4:fe:fa:1c:44:09:
c4:1f:8e:a2:e6:f6:01:b4:3d:68:1b:a2:fb:d3:c5:
19:1d:39:75:e7:4b:18:58:bf:50:dc:f5:83:86:b9:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:F2:2F:47:35:C2:AF:49:26:35:67:80:D4:A7:E3:E6:78:7C:CD
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9b:ea:43:3b:f9:c9:1f:02:a0:fc:c6:a4:35:4c:30:ec:7e:
17:28:11:f4:2d:c5:fd:8d:f6:8f:e2:e4:f6:1e:ac:1c:c6:74:
10:18:f2:1c:cd:73:81:04:a2:eb:3f:b4:49:ab:3f:bc:dd:ee:
64:a9:dc:a7:6a:44:f7:02:bb:cc:85:4c:72:d6:f7:fc:38:89:
a7:78:d8:22:63:d4:dc:35:1e:ee:29:92:ed:2d:ee:c2:11:e0:
a1:18:70:4a:f8:6e:72:e5:cd:ce:32:25:99:b0:54:bb:1a:17:
e4:12:26:43:24:94:21:ef:fe:93:15:c5:0b:13:b0:9f:30:fb:
37:d6:56:fa:f8:f7:af:1f:29:dd:ef:bf:11:ed:7f:fa:85:42:
98:80:63:88:d7:13:b6:4c:ed:e7:54:38:0f:d7:32:52:42:7c:
13:4e:2c:81:fe:43:8d:ae:f6:1c:ad:5e:f7:0e:0d:97:b5:ab:
06:d9:c8:1e:ab:90:d9:95:46:2b:d0:c2:f2:64:51:a3:42:df:
0a:f1:cf:97:f5:4c:34:d0:3d:51:ea:fa:ac:aa:9c:8e:e4:1e:
23:e6:89:13:28:36:fa:f9:28:db:4e:01:ea:01:1d:65:14:e3:
6a:0e:21:cb:a7:22:1d:11:2d:ba:26:35:9b:97:2d:fc:70:8e:
57:70:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:50:52 2026 by rpki-client