Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: mozPlCZskyGbN9oK6QbKkRThC2jCKeizcXFdiRtGTHk=
Subject key identifier: 1A:1A:CF:D9:99:DD:80:58:2B:83:9A:25:81:40:A0:03:87:7A:E5:9F
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019F943766A2BB1FED8B37B6DFD511B452EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0D3C
Signing time: Fri 24 Jul 2026 13:01:26 +0000
Manifest this update: Fri 24 Jul 2026 13:01:26 +0000
Manifest next update: Sat 25 Jul 2026 13:01:26 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: K1e0X13btouxLWa2jVQgcF1SHiTwZ4UlHjM2wSP8eFc=)
4: qNWONomvIPPaw1vxRbdPf7PE9Uc.roa (hash: t+YKiZGgYPsEg6VbvrRY3eQ8DDKCYaJgu+YJ080oVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:66:a2:bb:1f:ed:8b:37:b6:df:d5:11:b4:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jul 24 13:01:26 2026 GMT
Not After : Jul 25 13:01:26 2026 GMT
Subject: CN=1a1acfd999dd80582b839a258140a003877ae59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:c3:a5:eb:ef:17:3a:5e:2d:12:c2:6e:97:
6d:3c:42:a5:4c:49:87:08:22:b9:ae:65:e0:54:0f:
f6:ce:5f:b8:5f:61:87:ea:26:e6:5b:79:16:48:42:
22:20:1b:22:f2:73:0e:d8:9b:d4:f6:29:8f:cc:25:
af:62:d4:d6:f9:b0:95:b5:5c:c3:ed:b9:05:26:1a:
f8:27:35:06:82:c0:11:dc:50:0e:ba:e7:04:59:9f:
46:08:31:22:56:95:d7:52:7b:4b:ad:c5:53:ce:76:
98:7a:3c:60:65:a7:12:8e:db:43:63:e4:4e:ac:13:
a7:1a:9a:3d:ef:03:a2:68:59:f7:bc:f7:13:05:ed:
06:8d:e6:1b:74:81:57:16:3a:70:0d:28:f1:1c:91:
fa:52:48:7a:2a:7e:72:1d:8a:ab:55:cf:18:50:91:
94:90:e3:e4:c8:20:c8:ba:84:70:dc:e5:61:ee:1a:
9f:9a:c4:ec:fe:1f:ba:69:b7:5b:b5:d9:5f:fc:fd:
db:dc:e3:e2:3f:65:5e:7c:7d:bc:e2:25:37:70:e0:
21:bf:b1:2b:cf:e5:4c:e4:a3:9a:14:7a:1b:15:8a:
b4:6f:1b:04:00:d0:d4:91:ca:da:51:17:56:ee:6f:
2e:91:7b:21:c7:8f:df:f8:1d:bc:aa:6c:f3:72:02:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:CF:D9:99:DD:80:58:2B:83:9A:25:81:40:A0:03:87:7A:E5:9F
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:23:be:5d:40:b2:fc:83:c5:b0:d8:b8:50:cb:ea:01:a2:
ce:b9:39:7a:ed:63:72:4d:30:8e:a6:f2:33:3f:ba:50:f2:3f:
77:df:f1:ed:be:ed:ac:11:5f:e1:2e:da:fd:5c:0a:f3:a9:14:
16:04:ed:a3:5b:bc:b4:a3:ad:50:31:5e:18:5d:51:71:7f:a9:
65:83:da:19:3a:c0:bf:97:e8:aa:18:6b:2c:8d:3b:e3:b8:1a:
0f:56:a9:9a:78:63:37:80:ce:c7:52:65:cf:a2:46:d5:68:fe:
b6:c6:8b:08:89:e3:6d:b0:3a:3a:62:8b:96:64:b9:ea:3f:f2:
e6:6c:39:9f:e7:7e:64:f2:e3:73:03:09:3b:25:fd:01:ee:eb:
fc:e3:5c:48:56:47:98:01:95:1b:40:4a:61:71:ff:60:39:3e:
2a:46:5d:d3:27:bd:78:49:35:62:de:cc:0f:60:c0:44:80:f0:
e7:62:36:55:90:8a:dc:e5:ff:91:30:3f:83:60:5e:24:5b:bb:
ea:b5:9b:47:b3:fc:1f:90:b0:df:49:ce:66:31:ad:62:aa:5e:
c5:92:00:18:59:09:7c:27:0a:0a:a0:29:a2:d5:1d:5b:44:b3:
25:f4:f9:cc:6a:db:6b:1c:eb:5c:b0:75:ad:f5:3f:f8:75:91:
2b:f5:3f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2aiux/tize239URtFLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2
YjQ2ODAwHhcNMjYwNzI0MTMwMTI2WhcNMjYwNzI1MTMwMTI2WjAzMTEwLwYDVQQD
EygxYTFhY2ZkOTk5ZGQ4MDU4MmI4MzlhMjU4MTQwYTAwMzg3N2FlNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlXDpevvFzpeLRLCbpdtPEKlTEmH
CCK5rmXgVA/2zl+4X2GH6ibmW3kWSEIiIBsi8nMO2JvU9imPzCWvYtTW+bCVtVzD
7bkFJhr4JzUGgsAR3FAOuucEWZ9GCDEiVpXXUntLrcVTznaYejxgZacSjttDY+RO
rBOnGpo97wOiaFn3vPcTBe0GjeYbdIFXFjpwDSjxHJH6Ukh6Kn5yHYqrVc8YUJGU
kOPkyCDIuoRw3OVh7hqfmsTs/h+6abdbtdlf/P3b3OPiP2VefH284iU3cOAhv7Er
z+VM5KOaFHobFYq0bxsEANDUkcraURdW7m8ukXshx4/f+B28qmzzcgLyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoaz9mZ3YBYK4OaJYFAoAOHeuWfMB8GA1UdIwQY
MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt
YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw
LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlcjvl1A
svyDxbDYuFDL6gGizrk5eu1jck0wjqbyMz+6UPI/d9/x7b7trBFf4S7a/VwK86kU
FgTto1u8tKOtUDFeGF1RcX+pZYPaGTrAv5foqhhrLI0747gaD1apmnhjN4DOx1Jl
z6JG1Wj+tsaLCInjbbA6OmKLlmS56j/y5mw5n+d+ZPLjcwMJOyX9Ae7r/ONcSFZH
mAGVG0BKYXH/YDk+KkZd0ye9eEk1Yt7MD2DARIDw52I2VZCK3OX/kTA/g2BeJFu7
6rWbR7P8H5Cw30nOZjGtYqpexZIAGFkJfCcKCqApotUdW0SzJfT5zGrbaxzrXLB1
rfU/+HWRK/U/ZQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:12 2026 by rpki-client