Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: O0eAGB1IS4eA3jSV6UV+recmsTFzSCixF18Ys1CBGus=
Subject key identifier: B3:B0:5A:20:09:CF:79:83:7A:8B:56:27:80:F8:03:6B:08:5E:F7:C0
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 019E1D9115A29D3EB729205658ED3C3B6E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 1310
Signing time: Tue 12 May 2026 19:01:47 +0000
Manifest this update: Tue 12 May 2026 19:01:47 +0000
Manifest next update: Wed 13 May 2026 19:01:47 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: jSVnJ0DXHMCkO4e1o2+hHNpl79HAfmJ0KDOGvr04G8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:15:a2:9d:3e:b7:29:20:56:58:ed:3c:3b:6e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: May 12 19:01:47 2026 GMT
Not After : May 13 19:01:47 2026 GMT
Subject: CN=b3b05a2009cf79837a8b562780f8036b085ef7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:08:ef:40:65:32:9a:a7:15:15:89:29:3f:
4f:fc:ed:e1:c8:2d:05:dd:f8:9a:63:9a:af:46:23:
e6:8f:a8:27:79:6f:b8:ba:08:57:1d:84:70:9d:3f:
39:c0:7e:b2:1d:23:7e:98:4f:46:77:cb:28:e8:fa:
97:a1:65:ab:1a:9f:d0:9b:38:3a:7c:bd:ec:40:15:
63:77:05:43:8a:90:87:27:44:02:32:19:8d:17:2c:
91:b0:1a:f4:75:28:d7:8e:4a:a6:8b:d2:21:5a:8d:
8c:d9:1e:25:17:ce:28:bd:24:73:10:15:5f:89:03:
33:0d:c2:47:22:f6:62:58:bb:8b:ad:ef:88:e6:d9:
f0:c0:cf:a5:d4:63:c5:c9:d8:b0:53:ff:d7:a3:b6:
90:59:f2:41:e8:a9:7c:55:21:19:28:38:34:b9:76:
55:0b:4b:96:4f:f8:40:6e:ee:1e:30:00:7c:20:cc:
4e:d9:8e:18:65:7a:eb:d3:a6:13:e1:e1:8f:eb:0c:
f7:00:63:ee:59:cb:63:46:cf:d6:81:20:8e:bd:af:
66:4a:9b:19:bb:78:56:d5:09:05:51:33:3c:7b:5d:
27:7b:e4:2b:75:2d:c8:9b:91:9a:b6:82:56:f2:ad:
20:c4:28:dd:e9:b2:91:d2:ad:22:aa:f1:69:68:ef:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:5A:20:09:CF:79:83:7A:8B:56:27:80:F8:03:6B:08:5E:F7:C0
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:53:57:95:8c:85:c1:d8:3c:70:89:f5:d2:71:cb:af:6f:
aa:e3:c4:15:5e:78:00:43:c3:13:c5:f9:50:67:86:82:fd:c2:
bd:fd:ce:9e:0f:27:56:11:68:be:a2:a9:2e:ee:7e:10:33:7b:
26:66:5c:fb:c3:e1:e5:f4:9d:c3:56:ab:e5:b8:ae:19:4b:2e:
10:9a:78:77:23:b8:7e:a3:5d:0f:c4:13:38:38:16:7e:d6:0d:
98:71:62:10:70:7a:2a:d6:83:6b:e1:bd:33:0b:b8:29:bb:86:
34:aa:79:68:ac:b4:6c:76:31:cf:56:07:ac:9f:b2:9f:e3:d2:
ee:b7:3b:af:4d:23:e6:cf:8b:a6:5d:dc:69:29:0b:60:36:6a:
d8:1b:30:fd:05:41:fd:6c:d9:69:48:63:dd:bd:58:3d:23:97:
a3:c2:50:06:8c:1b:9a:60:5f:fb:05:14:fd:36:1f:04:c6:57:
4a:4b:3e:0a:fa:23:a1:3c:0d:61:4a:26:2f:5d:c5:93:f3:c6:
5f:b5:15:7e:21:d1:42:9e:00:95:1f:e6:2d:3f:44:b8:0d:06:
4e:d4:ff:fe:e8:56:0e:2c:91:05:3f:78:a5:c0:c7:0c:23:7f:
be:79:b0:3e:f1:50:8c:80:0b:ee:c1:10:5f:02:95:69:a9:d5:
81:f1:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:31 2026 by rpki-client