Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: TRhzqy7fJzFXcJKZjFM0twII4wZLotlyEQguUoT8u7s=
Subject key identifier: DE:A1:78:53:D5:84:2E:D3:B1:D9:C7:F1:FB:E2:89:91:42:2F:F4:79
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019F91A3C013B4CB77119A0DBCC215DD68A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0E0E
Signing time: Fri 24 Jul 2026 01:00:55 +0000
Manifest this update: Fri 24 Jul 2026 01:00:55 +0000
Manifest next update: Sat 25 Jul 2026 01:00:55 +0000
Files and hashes: 1: 1-ryJIEOqpA8l9RbN7-gklZBdq0w.roa (hash: 4ws6lmAs2NjopGJM8783tZuCfDXl+eALfjhicTQgH0Q=)
2: J4FFEtQcJC3-DBhRRLtMQex6EYI.roa (hash: iaQJuASwGUMU2i6IS0uW5fUdoLz/JbnfzKlvq/DfoBk=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: 0ceyYo+kYpFbp+sG73kqMi45mXsMdwG1CCymoQnDlNA=)
4: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c0:13:b4:cb:77:11:9a:0d:bc:c2:15:dd:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 24 01:00:55 2026 GMT
Not After : Jul 25 01:00:55 2026 GMT
Subject: CN=dea17853d5842ed3b1d9c7f1fbe28991422ff479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:f5:20:22:f8:9c:24:64:59:0c:da:4f:7b:
01:bb:ff:e2:82:c5:05:a3:9f:30:61:00:f4:53:5a:
b2:9a:a7:6b:63:0f:09:89:71:77:47:60:4c:45:c3:
54:c2:d7:63:df:46:b7:14:cb:96:df:85:3c:c7:87:
db:dd:6c:f1:8b:f7:64:47:dd:09:d3:41:df:dc:aa:
f8:da:b6:de:5e:3c:cc:4a:a9:3d:ff:12:6d:05:47:
f6:d3:3e:5f:f6:c3:dc:3d:e7:75:8a:5a:ff:0c:a4:
73:01:75:01:91:73:e3:82:ee:80:9c:fe:93:9d:42:
cf:4a:3c:8c:82:0e:ae:a8:d8:8b:7a:06:79:db:38:
0b:18:5d:2e:f5:2b:4b:3a:c9:d8:c9:25:e7:57:7d:
db:0a:c3:30:cf:e9:60:09:4c:4e:21:fc:ca:00:12:
39:35:34:44:fb:66:3d:7a:ff:31:09:2e:0a:a7:9a:
99:ed:3f:5f:83:88:85:9b:6b:36:38:83:bd:61:7c:
31:c6:6f:81:3d:0e:17:bd:1d:a8:60:eb:ac:df:17:
48:0c:ed:e6:08:66:a1:f0:7e:e7:c1:b5:a3:db:88:
76:34:60:18:3f:3e:6d:75:61:91:92:20:03:66:b9:
61:60:88:58:1b:14:86:d7:57:e9:63:b9:0a:3a:f4:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:78:53:D5:84:2E:D3:B1:D9:C7:F1:FB:E2:89:91:42:2F:F4:79
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:29:27:ba:04:b4:ca:10:21:d4:0c:11:d1:32:56:02:91:18:
46:28:fd:1d:bd:ff:2c:2e:ad:9b:d9:48:fb:16:0d:9d:79:15:
a0:37:7e:8c:75:ee:e7:f6:b5:c6:e2:58:7e:4d:6e:df:ac:ec:
ae:e2:d1:59:7b:fc:1a:95:8c:86:ec:98:58:64:50:fb:a5:14:
55:00:9e:e4:87:eb:85:99:e6:01:fa:32:7d:09:fb:27:dd:39:
43:d2:d4:03:e7:35:69:c4:b9:61:3a:28:4b:37:d0:45:57:89:
a0:83:d9:57:49:15:56:76:e2:fb:0b:ad:7e:bb:fc:c0:47:de:
8f:b9:79:ef:44:fa:97:f4:09:0d:5a:ea:71:02:19:47:57:d0:
8a:e8:39:f4:9d:e0:7b:16:f7:80:1c:4e:48:66:a5:6c:14:9c:
59:ab:3c:b2:6a:b1:1a:15:1d:3b:04:12:f7:9c:b7:4c:75:af:
2a:15:ff:fe:d0:21:c8:49:7e:b5:19:34:ea:e1:fd:1e:87:43:
3e:40:06:b2:01:50:c7:7a:cf:ee:89:99:f1:06:f4:8e:13:ae:
68:03:fb:f4:6b:d1:4b:dd:d0:4a:98:3f:89:55:66:94:7d:16:
2c:e3:08:93:17:08:e8:59:78:ed:06:bd:28:d5:35:99:d7:b9:
84:8d:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:39 2026 by rpki-client