Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: 8my5FM2oTdUfF0GwRZ+3zzC67YGop889Hm7il5FvxgI=
Subject key identifier: F8:84:FE:25:61:2F:65:6F:56:B1:E4:84:D8:64:4F:F9:8F:C2:13:98
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01A0ED0B0D822CE49B165591BBB396684A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 080A
Signing time: Tue 29 Sep 2026 12:01:59 +0000
Manifest this update: Tue 29 Sep 2026 12:01:59 +0000
Manifest next update: Wed 30 Sep 2026 12:01:59 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: WrsmLyFcmYsUchacJQHyZkCBh8wdUrzHns1xk6xMIMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:0d:82:2c:e4:9b:16:55:91:bb:b3:96:68:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Sep 29 12:01:59 2026 GMT
Not After : Sep 30 12:01:59 2026 GMT
Subject: CN=f884fe25612f656f56b1e484d8644ff98fc21398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:bf:1a:17:e1:e0:73:d0:7f:ff:18:2f:15:
ab:e4:c0:bd:25:40:75:42:83:d3:c4:73:eb:45:25:
60:71:b3:2d:a7:22:20:44:04:a9:e5:7a:6a:1d:ed:
e1:5c:8b:9f:59:17:cd:70:75:d2:1d:02:ca:d2:eb:
87:27:ad:48:a7:ca:72:56:81:e0:c5:d3:6b:07:2f:
8c:d6:2c:83:e8:29:57:47:f3:98:4b:03:6b:04:d4:
8f:60:d2:04:87:ce:18:c7:8b:b0:d1:ed:c9:ac:60:
a9:35:05:c5:bf:be:97:21:ff:5d:b5:40:05:6d:ac:
01:f5:9b:69:8b:dc:26:fc:53:11:c8:78:da:0f:9c:
65:4a:ef:a9:93:48:4b:7b:19:7f:23:37:63:1f:29:
10:b5:8c:a3:86:2c:53:5e:10:47:72:6f:66:07:2a:
26:49:2e:e9:d7:7b:85:46:14:f8:dc:bf:8c:52:ae:
22:f9:79:be:57:83:d4:4b:89:50:98:ef:95:cc:e7:
65:cc:7c:a3:de:2c:ba:8a:52:8f:45:9d:e6:9b:cc:
e1:29:41:ff:cb:f6:58:bb:5d:74:bc:bd:7c:6b:b9:
2c:46:3f:32:46:23:6d:f0:dd:e3:df:62:4d:a2:af:
85:02:28:b5:04:e3:59:cd:1d:46:be:fc:72:20:3f:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:FE:25:61:2F:65:6F:56:B1:E4:84:D8:64:4F:F9:8F:C2:13:98
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:58:25:f4:e2:45:2b:84:d4:9b:ce:80:be:91:da:a1:cc:ab:
9f:92:dc:09:9a:0e:95:a5:9d:0e:e5:97:03:78:3e:90:6f:45:
9f:cc:ca:f3:10:aa:37:9b:21:3d:37:ae:18:1a:ef:16:75:06:
be:e9:a9:d0:a1:34:d8:ab:b5:67:b3:11:88:da:a1:b1:60:cc:
d9:e4:a1:e8:22:d6:07:bf:d9:e5:2c:ca:48:6a:b5:7c:b0:c7:
bd:6c:94:dc:03:ef:05:36:71:94:a0:32:3a:3e:df:70:b9:bd:
d2:54:b8:fa:af:f5:7a:3b:76:ad:81:d4:b3:b6:c5:78:6b:f2:
77:70:a6:44:45:c9:ef:82:80:a8:10:67:d5:56:d5:dc:8c:f4:
df:47:fe:68:85:02:8c:ef:b8:5a:e9:01:e0:c2:24:f2:2d:b9:
70:14:45:13:99:38:a8:a5:51:40:03:6e:71:27:c1:5a:26:eb:
b0:e1:66:87:42:c4:b0:8f:7c:da:49:fc:f3:35:98:14:c4:00:
24:03:53:2e:4d:65:35:c3:d2:f8:b3:5a:ad:dd:e4:1f:71:d1:
1a:eb:2a:e4:cf:3a:ee:2d:d7:8e:c6:f1:15:fd:a9:15:60:e4:
3c:d6:f5:52:5c:95:db:9c:d8:3b:24:04:f4:dc:68:4f:d9:41:
1b:18:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:43:06 2026 by rpki-client