Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: 9X6BLVl/YJlVggC7xvkshNkteU+1ukw0hSD5kFCPkSA=
Subject key identifier: 30:0E:B7:ED:DE:D9:33:44:8F:A1:3F:82:4C:37:3B:27:98:59:63:80
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019D265F650D6A900DD975292DE9612F8A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0CCC
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: VDp2e+lIAxORGVmLQLCUX99aiPGDPp7e8NjcArCwMA4=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:65:0d:6a:90:0d:d9:75:29:2d:e9:61:2f:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=300eb7edded933448fa13f824c373b2798596380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:b3:9d:a4:9e:d5:45:7b:1a:47:cd:3d:9c:
02:e0:6b:dc:14:38:15:0c:88:8f:f7:8c:47:a9:50:
6b:12:ca:f5:28:ca:41:b0:e0:fa:f8:1e:19:01:dd:
6f:8d:50:de:95:99:ab:dc:7b:43:19:dc:14:0c:80:
9a:d8:80:fd:b2:ed:79:79:57:df:3d:3a:92:46:79:
28:53:a6:47:ab:f5:ff:3f:4e:81:9d:aa:0d:f1:37:
4f:90:06:1c:ea:ee:91:d7:9d:15:ab:91:16:58:ff:
a7:a6:f7:e8:9a:99:aa:12:31:e0:3c:d8:ff:99:08:
b2:bb:de:11:8e:8e:24:a5:d4:d0:f3:6e:44:9e:88:
69:ba:47:95:06:e3:57:68:75:d0:bd:b2:73:f9:0e:
b6:b1:2e:5f:e0:86:32:82:6e:55:95:f4:94:54:1e:
a9:c1:5a:ab:4e:1c:18:12:fa:fb:19:0e:c2:30:2f:
42:25:4e:99:ce:08:4a:6a:f2:5e:85:22:63:3a:42:
a1:b9:07:f3:e0:f6:67:62:78:3c:6f:8d:1e:e5:fd:
38:f7:ae:78:0b:67:b5:5f:48:58:2a:98:d9:cc:5b:
dd:ee:53:47:0a:c6:c7:6a:f8:69:50:20:8c:68:2e:
60:42:f1:98:4d:af:69:31:14:86:d7:88:2b:85:2b:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:B7:ED:DE:D9:33:44:8F:A1:3F:82:4C:37:3B:27:98:59:63:80
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:41:8b:4e:1c:c2:28:c4:c0:53:d3:93:60:ae:42:d1:4a:3b:
45:3d:8d:96:06:6f:70:fb:fb:54:a2:41:75:5f:21:7c:5a:ac:
77:82:09:26:5c:a5:5d:41:1c:b9:97:1a:6f:e7:98:97:39:d7:
1a:5c:58:3f:71:ab:19:1f:49:f1:a8:b6:b3:d1:a1:a3:01:52:
6f:df:d2:42:55:24:5e:19:a9:c1:c1:14:2f:a1:1e:dd:41:d8:
3a:b2:30:eb:ef:55:5b:8d:67:54:1f:cf:78:e8:0b:f4:d1:ea:
87:11:7b:f8:24:23:b3:99:16:b0:4f:8b:8b:36:85:97:9a:dd:
96:bb:85:f9:e6:c0:f8:bc:7c:4a:da:dd:c1:79:d2:10:fe:f1:
17:d0:6a:29:de:da:91:4c:45:6a:fc:0b:f5:c6:d5:60:b2:13:
2e:6f:fe:71:c3:66:91:6d:94:a4:61:c4:6e:38:d1:de:69:ae:
6e:51:f9:bc:58:15:05:42:31:3f:6c:cd:0a:eb:1b:59:54:bd:
f3:c5:5a:6d:f3:d1:51:c8:90:59:aa:c4:f5:93:b4:92:33:a6:
9d:35:08:94:47:ec:98:bf:71:9d:27:7d:3b:7d:b5:5b:36:21:
30:3e:32:e6:a2:33:d5:1d:30:ce:91:b6:ff:da:38:83:b9:b7:
40:f0:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:54 2026 by rpki-client