
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier: VI5pDsC1oexh19UNbu7g698CvmoadDHwguuQZ46oNsg=
Subject key identifier: 81:61:75:D4:81:61:DF:28:F9:CA:C8:B9:8F:88:8A:19:53:F9:2A:BE
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 019D38D3D097C34EC8FDA452791C9FF4F091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number: 1193
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: blMjfRyOLEyojLj42XPxwXwFTD4.roa (hash: jrLQeO+lNASlqC6IDejHJLnMTZ65htbv+psssgALK6g=)
2: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: KvtugWW8ZiAKRlL5qS2MIV6atB5Oj0tnLKh4NQnf/BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:97:c3:4e:c8:fd:a4:52:79:1c:9f:f4:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=816175d48161df28f9cac8b98f888a1953f92abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:64:84:10:63:3a:a6:cc:91:19:50:d0:81:
bd:25:68:31:63:fe:a1:b1:d5:98:7e:e9:a2:3e:5f:
e8:9e:9c:9a:2b:55:30:ef:de:98:20:c2:3c:9d:73:
56:66:23:ac:0d:34:ea:a3:71:c1:e4:73:70:db:b5:
c1:f1:4e:e9:d1:15:b8:d9:82:46:57:c9:60:a8:95:
2b:a0:dd:68:8a:bc:c4:f5:2a:5d:80:73:d2:6d:5e:
da:7a:bf:6f:0b:b2:e9:67:67:bd:9d:4c:9c:06:ee:
df:dd:45:98:59:49:ee:96:72:ea:3c:e5:35:28:96:
be:bb:ad:f1:07:80:1e:9b:13:d3:79:94:b8:a0:21:
74:05:b1:1a:0a:42:76:c0:f4:09:de:06:c2:a6:4c:
90:ba:cc:6c:2c:6e:d7:de:c8:48:3b:3b:af:46:1d:
c4:9e:bd:65:91:6f:df:3c:46:62:f2:87:1c:8b:63:
6a:f8:28:99:7e:98:1d:05:1b:86:22:6b:a7:54:05:
56:cd:7e:83:b1:e4:1a:e0:d8:3f:83:a6:22:86:ea:
ff:dd:65:86:14:00:ee:a3:6d:40:2f:49:87:f6:e9:
73:d8:9a:6b:02:c2:f1:d9:09:eb:86:f4:c5:1d:3f:
6a:52:c4:d9:6f:cb:f8:98:b9:6d:a8:a1:b2:2a:14:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:75:D4:81:61:DF:28:F9:CA:C8:B9:8F:88:8A:19:53:F9:2A:BE
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:f3:b0:2f:29:8f:7d:12:41:27:19:6a:62:47:d8:8a:f1:
ce:21:99:5f:5e:10:07:93:8e:7a:a2:3f:11:4d:05:76:2a:62:
f5:44:01:0c:c7:21:96:1c:f8:ca:81:5e:f4:5e:f7:55:e2:31:
0f:8b:c7:6a:b0:41:4e:b1:f8:4b:ae:49:44:8b:52:be:85:e6:
e0:65:cb:95:ad:5e:00:2b:b2:72:43:42:8b:c9:f6:6c:95:57:
02:c5:c4:f8:f0:8f:b5:70:3c:d3:4f:20:a4:6a:97:5a:ce:8c:
3b:50:06:44:85:3a:c6:bc:8a:bc:be:5d:e4:4c:50:aa:55:4b:
94:c7:4c:44:68:97:59:54:b4:75:f0:14:8d:01:fe:b8:05:a1:
08:a9:a3:37:7d:6d:1d:4e:ed:e8:e5:2c:37:10:ab:07:1d:97:
e6:ed:85:ad:82:a3:21:e8:b7:79:9e:50:73:d0:11:f1:df:04:
6e:cd:d2:fc:73:2b:33:a9:e2:39:ee:00:18:01:87:83:1f:40:
56:98:25:e7:a5:56:86:ac:4f:65:d1:27:4d:fb:b6:24:cd:62:
54:cd:6f:a2:9b:12:9f:46:c3:f9:c4:69:36:8d:94:da:97:99:
cd:43:6f:5c:e6:fc:3b:f6:f8:7b:6d:81:a8:c9:b6:5a:b2:4b:
8e:2e:96:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409CXw07I/aRSeRyf9PCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx
NTBlM2MwHhcNMjYwMzI5MDkwMTM4WhcNMjYwMzMwMDkwMTM4WjAzMTEwLwYDVQQD
Eyg4MTYxNzVkNDgxNjFkZjI4ZjljYWM4Yjk4Zjg4OGExOTUzZjkyYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHdkhBBjOqbMkRlQ0IG9JWgxY/6h
sdWYfumiPl/onpyaK1Uw796YIMI8nXNWZiOsDTTqo3HB5HNw27XB8U7p0RW42YJG
V8lgqJUroN1oirzE9SpdgHPSbV7aer9vC7LpZ2e9nUycBu7f3UWYWUnulnLqPOU1
KJa+u63xB4AemxPTeZS4oCF0BbEaCkJ2wPQJ3gbCpkyQusxsLG7X3shIOzuvRh3E
nr1lkW/fPEZi8occi2Nq+CiZfpgdBRuGImunVAVWzX6DseQa4Ng/g6Yihur/3WWG
FADuo21AL0mH9ulz2JprAsLx2QnrhvTFHT9qUsTZb8v4mLltqKGyKhShtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFhddSBYd8o+crIuY+IihlT+Sq+MB8GA1UdIwQY
MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt
MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk
LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGfzsC8p
j30SQScZamJH2IrxziGZX14QB5OOeqI/EU0Fdipi9UQBDMchlhz4yoFe9F73VeIx
D4vHarBBTrH4S65JRItSvoXm4GXLla1eACuyckNCi8n2bJVXAsXE+PCPtXA8008g
pGqXWs6MO1AGRIU6xryKvL5d5ExQqlVLlMdMRGiXWVS0dfAUjQH+uAWhCKmjN31t
HU7t6OUsNxCrBx2X5u2FrYKjIei3eZ5Qc9AR8d8Ebs3S/HMrM6niOe4AGAGHgx9A
Vpgl56VWhqxPZdEnTfu2JM1iVM1vopsSn0bD+cRpNo2U2peZzUNvXOb8O/b4e22B
qMm2WrJLji6W6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:55 2026 by rpki-client