Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: o93x8/jwy6KLTqNpPalrhS5bt8EqGoxN1q+SXvn+wqs=
Subject key identifier: 9B:6C:11:75:EB:65:26:97:E3:C7:5A:C8:8C:F9:A7:B0:25:73:A6:16
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019D2B859B1ACE8EF1A5F2D06D2D250EF166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0BFC
Signing time: Thu 26 Mar 2026 19:01:09 +0000
Manifest this update: Thu 26 Mar 2026 19:01:09 +0000
Manifest next update: Fri 27 Mar 2026 19:01:09 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: eR8lhJvrQkmHUGe4HoAAV/6zBLPEbf4W/eElARoispw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:9b:1a:ce:8e:f1:a5:f2:d0:6d:2d:25:0e:f1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Mar 26 19:01:09 2026 GMT
Not After : Mar 27 19:01:09 2026 GMT
Subject: CN=9b6c1175eb652697e3c75ac88cf9a7b02573a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:16:6b:88:0f:51:13:79:d5:fb:db:3a:93:
e3:e2:df:cb:14:23:4a:e5:8d:ef:c7:47:6d:ad:80:
0e:d5:2d:96:b3:e7:6f:67:17:73:af:45:8c:1b:06:
c3:db:03:f2:60:ed:36:2c:7c:55:a0:75:0e:c2:e2:
05:d3:ce:70:74:64:95:c9:61:35:74:a0:4e:1a:19:
24:c8:cc:0a:91:4c:92:13:16:40:6b:71:1f:b6:94:
96:12:90:93:81:60:7c:fa:28:dd:f4:37:09:5e:fa:
8a:2f:06:fb:58:02:94:a4:19:76:60:18:2c:95:28:
2a:d7:cc:77:30:ca:a9:5e:99:8d:3b:14:e1:72:f3:
ec:d9:a5:90:7c:2f:3b:05:38:9e:9b:80:71:d5:62:
c7:f0:a1:e1:48:0a:8b:a1:5c:47:5a:e9:49:7d:74:
6c:20:40:2a:24:bc:6f:8f:92:7a:99:6b:82:08:f4:
23:a1:37:d9:2a:36:73:7c:76:ae:b4:8b:a1:e2:d3:
d1:e4:a9:df:3b:4b:3b:60:fd:26:d3:2f:ff:a5:5d:
33:50:c6:9d:6a:0e:6a:c0:24:8a:e6:02:03:d8:66:
0e:cc:30:b1:e3:6d:fc:65:cb:8c:6c:63:4c:f3:64:
de:3b:92:99:2b:3c:53:84:3e:53:c8:d7:de:4d:a6:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6C:11:75:EB:65:26:97:E3:C7:5A:C8:8C:F9:A7:B0:25:73:A6:16
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:20:6a:a8:bb:26:30:04:23:3e:d0:68:cc:df:ed:d5:ca:a2:
1c:bd:2c:06:04:c4:f9:a3:f2:8b:55:23:b4:a9:b6:ab:4b:48:
81:03:49:72:f0:4b:41:a6:74:84:27:eb:47:9f:d3:04:93:d0:
e5:86:3c:2b:bb:20:3e:80:3b:b9:85:ee:cc:5b:7e:a2:fc:0d:
cd:42:b4:08:47:d7:bc:d1:40:bb:65:2d:a1:b0:e9:c1:81:a3:
b1:4f:2b:11:3e:12:ea:bb:e3:72:2d:1b:0f:5a:1f:92:97:12:
f0:ac:e6:11:6e:a3:26:ba:1f:b3:b7:30:59:82:18:32:05:2b:
28:14:e5:df:91:f0:5a:ed:5a:f4:67:06:fb:1f:77:49:6a:89:
7e:8c:9f:3a:4a:a1:96:b8:3f:32:05:19:cb:28:6d:83:61:68:
6f:5b:3e:f7:fc:44:f3:52:44:f6:a1:11:b9:1b:74:07:d8:85:
e9:c8:02:b0:92:93:fd:a0:41:7c:34:79:d1:68:7b:3d:5d:d4:
59:17:cf:71:04:5b:47:18:e7:18:dc:f4:cd:d5:7d:29:ba:4f:
49:a8:49:f5:e2:d0:a9:d0:64:76:bd:32:78:0e:24:90:61:75:
cd:f4:48:05:fe:c7:1e:50:a1:f9:3d:f3:f5:cb:3b:eb:86:b0:
cc:55:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:11:31 2026 by rpki-client