Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: vUe/ssNC6ta4Kb0SjCSgTOi7Cz0+ZvL3De5H+3GS2y4=
Subject key identifier: CE:86:20:F3:35:AB:E5:08:E1:12:9A:03:6B:3A:50:BD:03:E3:62:8A
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019FA03B03C4A53C41D35166C7D51EEAA8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 10A2
Signing time: Sun 26 Jul 2026 21:00:49 +0000
Manifest this update: Sun 26 Jul 2026 21:00:49 +0000
Manifest next update: Mon 27 Jul 2026 21:00:49 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: 6I5jrtm6dDzbXihKseRYthenxZO4u2yV1tXNrZYfH4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:03:c4:a5:3c:41:d3:51:66:c7:d5:1e:ea:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jul 26 21:00:49 2026 GMT
Not After : Jul 27 21:00:49 2026 GMT
Subject: CN=ce8620f335abe508e1129a036b3a50bd03e3628a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:3c:e5:a2:bd:76:ac:e9:12:45:88:a0:ff:
df:3c:36:a3:6c:72:6a:1f:37:21:03:84:15:e7:8f:
d0:e7:47:0f:b5:5e:4c:48:20:8a:b5:01:3d:f6:a4:
b2:ad:14:3d:ac:af:c0:6d:d7:cf:3b:5e:26:da:46:
e2:ab:10:9a:c1:37:e0:fc:12:9b:29:d6:f9:da:11:
7c:ac:1d:33:70:24:f3:88:04:2d:f4:f8:29:93:50:
73:29:72:e2:18:58:a8:7d:48:01:77:88:32:19:cb:
60:ef:ff:78:d0:f0:b6:40:34:3c:00:40:1b:31:3c:
fb:a6:ae:9b:2f:74:c1:48:76:a9:40:00:66:ac:45:
20:fe:48:27:3c:f5:5b:17:34:e9:0f:72:a8:99:66:
2d:71:04:e6:4f:42:4a:ab:f6:5a:00:df:ab:47:5f:
7a:5b:5a:56:98:87:80:82:0e:50:57:59:eb:0b:dd:
8d:da:5b:72:93:72:93:1a:20:a5:f0:c7:2a:ce:b5:
2c:0e:9a:1d:38:f2:65:8d:ec:61:46:3d:1d:a3:f7:
93:41:f2:12:d5:bb:c1:04:f3:3e:af:fd:02:c5:cd:
a6:ba:80:01:c2:69:ee:de:94:33:76:c7:ff:fe:0f:
05:9a:d1:c2:35:2a:21:13:2c:14:d9:14:1b:c0:88:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:20:F3:35:AB:E5:08:E1:12:9A:03:6B:3A:50:BD:03:E3:62:8A
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:8c:2b:a3:b4:91:46:bc:8d:e3:1b:96:14:18:21:61:fa:
e2:b5:a1:23:f9:9e:94:b7:bd:fb:9b:41:73:e2:87:21:a5:23:
76:41:c0:ec:32:ae:e0:9a:24:cf:48:4a:2b:45:57:f6:22:f0:
ee:47:39:c9:df:5c:c8:19:ad:5d:81:8b:cb:b0:06:77:3e:4b:
6f:dd:3a:69:b3:ce:6b:10:ce:3c:87:8a:04:39:76:32:38:4c:
01:d9:4e:50:70:fd:da:c9:8c:9b:bd:d2:1b:e5:57:04:c5:27:
1e:25:6c:0c:9d:6a:5f:2d:2f:c8:c5:28:ce:67:72:c0:3e:17:
c2:a8:8c:e8:b2:35:27:5e:9d:6b:50:9d:dc:e6:aa:5a:18:55:
38:f6:69:fd:67:4e:7d:5d:a3:7d:85:ee:69:06:93:d4:fa:e3:
06:11:23:79:4a:f6:9a:e1:b7:d4:d9:57:16:cb:fc:94:97:f1:
f1:ef:19:7b:65:8b:81:5e:62:7f:a6:1a:38:01:09:26:d8:67:
83:68:48:41:6e:3d:4f:c3:d8:fb:95:81:5c:ec:b5:1a:fe:49:
ae:8f:ac:16:95:c4:07:16:c0:8e:82:cb:b0:95:b7:d3:94:68:
a4:4c:3f:8b:2f:a2:a8:b4:13:9e:1c:85:18:29:c8:d6:15:60:
ec:ba:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:50 2026 by rpki-client