Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: /gNRV1YokwE5HoY2BTRbcOKkx0YmuZsOyvaNmUDBvQc=
Subject key identifier: 63:E1:43:D8:C0:EB:70:12:28:9C:02:A8:AC:84:07:9B:D9:7C:2A:3E
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01A0CF361016D25BDA1B8D1473A12416EB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0EB4
Signing time: Wed 23 Sep 2026 17:00:21 +0000
Manifest this update: Wed 23 Sep 2026 17:00:21 +0000
Manifest next update: Thu 24 Sep 2026 17:00:21 +0000
Files and hashes: 1: Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa (hash: 1BJkjJJzRJsgJ9P5xD0C2TGUD819GX/LrEbI55Wb35Y=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: SUN7Y4lDIpw4C/pyMGRtYdjYJo04K67JqfzQ3cqjAvo=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: zrzevlWk8nYV2cUksY99V_qlScY.roa (hash: AheS3Jn9vrwMVAXUOcAlokukhhQZQDpg2R6hmrLu6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:10:16:d2:5b:da:1b:8d:14:73:a1:24:16:eb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Sep 23 17:00:21 2026 GMT
Not After : Sep 24 17:00:21 2026 GMT
Subject: CN=63e143d8c0eb7012289c02a8ac84079bd97c2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:a8:87:cc:01:40:aa:eb:d2:03:16:f4:3e:
3b:d5:ff:bc:c9:2d:fb:84:82:d4:82:b8:5c:a8:82:
fc:0c:38:35:08:54:60:bb:5b:96:7d:c7:c8:c7:fd:
83:38:94:3a:13:a6:6a:90:44:23:34:6c:a1:92:e0:
7e:0d:f6:69:04:02:fd:35:27:e6:d0:d2:3d:75:22:
46:3d:d6:93:d1:ca:81:34:f9:2f:3d:ff:ec:09:ee:
f8:56:79:e6:ff:61:fa:37:b8:33:c0:33:69:05:e3:
7c:3d:4c:68:c8:df:30:0b:64:15:b8:27:fb:68:48:
a9:4c:1d:29:e5:72:9b:50:4d:d2:17:69:df:19:5c:
ba:ff:be:da:20:4e:f0:d9:95:e6:6e:c5:87:19:65:
4c:d4:84:0f:9b:a0:20:a2:05:c7:3a:c1:bb:b5:29:
0d:34:71:0b:1a:e3:d2:55:dc:77:77:6b:b7:56:79:
79:f1:6b:b4:84:c0:62:71:61:44:be:a9:a1:6b:88:
8e:57:07:6a:2d:7b:db:10:6c:fe:b3:50:77:88:94:
e6:c7:74:a4:bf:dc:2d:cd:ab:64:20:0f:43:29:ca:
e7:89:e8:4e:dc:fd:4e:34:9f:45:15:e3:b2:fa:78:
8b:13:05:b3:cd:7a:4d:c7:fe:6d:1f:9e:88:00:82:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:43:D8:C0:EB:70:12:28:9C:02:A8:AC:84:07:9B:D9:7C:2A:3E
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c0:b4:8e:e0:ad:99:91:b3:8d:37:01:4e:85:72:b1:05:47:
d6:89:92:8a:84:ce:61:6a:8e:69:57:23:6b:6b:c7:80:e0:e5:
a8:d1:59:d7:fa:0e:d9:98:33:7e:61:60:4b:ee:6d:08:00:37:
46:f8:c9:49:5c:49:6c:09:5c:99:d7:02:10:8e:64:89:e5:80:
12:5c:1f:46:bc:12:02:e4:aa:85:38:f2:86:6a:52:13:c7:98:
54:c8:db:91:cb:01:72:32:42:58:02:59:9c:0c:3b:30:43:14:
e9:7b:84:ad:e5:69:b7:3a:9e:aa:93:7e:3a:ae:a4:61:d9:65:
5f:66:1f:45:0f:25:4d:08:e4:db:c9:bf:65:3b:2b:57:89:28:
24:e2:a0:20:9b:40:65:b0:8b:0a:51:c0:03:05:22:03:a9:13:
79:69:50:b9:a6:39:42:36:55:5b:09:25:85:15:d7:ad:df:77:
d4:01:40:ef:cf:60:e0:5f:29:b5:fb:e1:38:fd:76:92:5b:df:
af:e8:37:da:27:52:e9:c8:5c:96:b7:97:2e:1d:c7:36:53:51:
39:a9:86:f9:67:be:f9:81:b9:7a:8d:73:32:d3:9e:0b:8f:54:
44:d7:81:15:c7:e6:0d:f3:c0:48:2b:7c:34:e7:d9:7f:ed:ee:
cd:55:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:29:30 2026 by rpki-client