Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: z9L4FE3OvlnpB8CMrQfFzoPlQnXmmwTqM3ZVM1MT06U=
Subject key identifier: 3C:F9:B0:C5:95:3C:33:37:9A:94:8A:0A:25:42:C3:5C:2D:E6:9D:21
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019DCCE18D4C45B0D1D3D03B56C955844738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0FB0
Signing time: Mon 27 Apr 2026 03:00:26 +0000
Manifest this update: Mon 27 Apr 2026 03:00:26 +0000
Manifest next update: Tue 28 Apr 2026 03:00:26 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: s04zsyYQ56mFgzPVBKgJlJCf8N5K1EjyxGfTN6DwLMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:8d:4c:45:b0:d1:d3:d0:3b:56:c9:55:84:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Apr 27 03:00:26 2026 GMT
Not After : Apr 28 03:00:26 2026 GMT
Subject: CN=3cf9b0c5953c33379a948a0a2542c35c2de69d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:7a:42:34:5e:f6:a4:08:24:d3:94:3f:2d:
eb:26:80:05:c2:30:e7:1f:fd:3b:f0:9a:e0:82:22:
bb:f4:75:59:4b:fd:dd:e7:16:89:e7:cd:38:37:f4:
4b:bc:61:05:65:9a:f2:32:3f:1b:1e:e7:f7:64:7c:
c7:ea:38:6b:e8:40:a3:0e:52:05:48:17:29:ad:b7:
0c:2b:a6:a7:d7:af:22:16:88:e7:41:46:02:a8:d1:
85:7a:6b:2e:6c:78:5e:cc:8c:df:f1:61:d0:d6:09:
9e:64:c7:2a:de:4a:69:6a:a6:e2:0c:8a:3e:67:4f:
45:9b:43:8c:cf:51:d5:5e:2f:68:a8:ca:ef:37:d1:
c0:f8:f6:6b:ae:bc:b3:00:aa:05:77:24:ae:84:44:
4e:2a:09:59:62:67:e4:2a:1e:28:ed:57:3d:83:0c:
84:c1:02:c6:20:d7:f8:0e:87:91:9c:c4:ca:0d:ec:
9a:89:db:4f:cb:f1:fd:cf:6a:cb:14:5b:c3:aa:4c:
b9:21:97:4c:f9:0d:9d:f5:3c:68:f0:25:4a:60:9c:
a0:83:37:fa:73:8a:67:45:28:58:68:ff:88:57:15:
f6:ac:bc:72:31:90:58:34:74:d0:0e:08:02:17:9a:
d4:79:d6:0e:ee:2a:b3:db:ae:1e:e2:b7:61:cc:b9:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:B0:C5:95:3C:33:37:9A:94:8A:0A:25:42:C3:5C:2D:E6:9D:21
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:b4:79:47:7a:7a:7c:80:ac:c8:1a:14:56:73:fd:39:22:
e3:52:b3:d6:e4:0b:3f:28:d9:86:34:b9:92:a2:09:80:c9:78:
14:8d:94:ec:82:7e:cb:7d:9b:0b:55:59:f2:61:88:c5:5a:8a:
f7:fa:69:61:80:4c:8f:22:f2:4c:5a:ae:a1:0a:c2:fe:e5:f3:
17:ff:da:f7:e5:aa:09:f5:e9:2a:e6:a8:06:2d:26:1e:f7:49:
cd:b1:50:72:a4:e7:8f:e8:a3:95:98:fa:d9:3b:b1:98:d4:b3:
94:1f:5a:f5:c2:ed:93:71:c2:da:26:99:91:66:38:79:c4:a0:
1b:d4:7e:6d:a7:7e:9b:98:75:63:80:1d:96:04:bf:3c:53:03:
3f:3e:b4:3b:a7:75:58:9c:35:7c:cb:dd:4e:d6:f7:84:02:78:
7c:3d:06:ee:25:22:a6:7a:db:28:04:52:99:1c:1e:71:b8:b8:
75:aa:d6:f9:b8:bf:f8:ad:b7:9d:b9:60:e0:1a:3a:e8:3d:0d:
66:cd:95:97:56:3f:36:7a:18:a0:96:82:69:ee:3b:e0:86:39:
82:cd:27:cf:19:2e:f9:5a:e0:15:33:15:96:3c:60:dc:b1:53:
f2:06:8b:15:cc:aa:fb:cc:b4:a2:5b:0a:da:a0:15:03:e2:09:
26:3e:a9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4Y1MRbDR09A7VslVhEc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjYwNDI3MDMwMDI2WhcNMjYwNDI4MDMwMDI2WjAzMTEwLwYDVQQD
EygzY2Y5YjBjNTk1M2MzMzM3OWE5NDhhMGEyNTQyYzM1YzJkZTY5ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0N6QjRe9qQIJNOUPy3rJoAFwjDn
H/078JrggiK79HVZS/3d5xaJ5804N/RLvGEFZZryMj8bHuf3ZHzH6jhr6ECjDlIF
SBcprbcMK6an168iFojnQUYCqNGFemsubHhezIzf8WHQ1gmeZMcq3kppaqbiDIo+
Z09Fm0OMz1HVXi9oqMrvN9HA+PZrrryzAKoFdySuhEROKglZYmfkKh4o7Vc9gwyE
wQLGINf4DoeRnMTKDeyaidtPy/H9z2rLFFvDqky5IZdM+Q2d9Txo8CVKYJyggzf6
c4pnRShYaP+IVxX2rLxyMZBYNHTQDggCF5rUedYO7iqz264e4rdhzLl4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz5sMWVPDM3mpSKCiVCw1wt5p0hMB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDO0eUd6
enyArMgaFFZz/Tki41Kz1uQLPyjZhjS5kqIJgMl4FI2U7IJ+y32bC1VZ8mGIxVqK
9/ppYYBMjyLyTFquoQrC/uXzF//a9+WqCfXpKuaoBi0mHvdJzbFQcqTnj+ijlZj6
2TuxmNSzlB9a9cLtk3HC2iaZkWY4ecSgG9R+bad+m5h1Y4AdlgS/PFMDPz60O6d1
WJw1fMvdTtb3hAJ4fD0G7iUipnrbKARSmRwecbi4darW+bi/+K23nblg4Bo66D0N
Zs2Vl1Y/NnoYoJaCae474IY5gs0nzxku+VrgFTMVljxg3LFT8gaLFcyq+8y0olsK
2qAVA+IJJj6pVw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:33 2026 by rpki-client