Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: v3VxR6rICaEgoYfOGDpR0VpN+jhcFGXOWUITUtw5bdc=
Subject key identifier: 09:25:7C:85:0D:76:0E:47:61:E2:21:49:CD:9A:6E:EB:44:3B:38:5C
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019E20C85A190E8CCD2A1F8BAF825591424F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 095C
Signing time: Wed 13 May 2026 10:01:01 +0000
Manifest this update: Wed 13 May 2026 10:01:01 +0000
Manifest next update: Thu 14 May 2026 10:01:01 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: ReQQpe/wI2DnK0hzD9+1tR4buFMpjobjOhbpNDD8mKQ=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:5a:19:0e:8c:cd:2a:1f:8b:af:82:55:91:42:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: May 13 10:01:01 2026 GMT
Not After : May 14 10:01:01 2026 GMT
Subject: CN=09257c850d760e4761e22149cd9a6eeb443b385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:8e:34:3e:60:75:db:d0:da:6e:c8:ad:de:
53:40:ef:29:5c:90:da:0a:58:9f:11:32:2f:9b:e5:
25:4c:31:96:d3:38:55:92:a1:c2:a8:85:d4:6d:59:
86:b5:ff:03:1b:90:43:e5:48:86:be:2f:94:0e:95:
88:27:13:5b:63:b9:98:fb:26:4e:2d:17:47:7d:a7:
18:d1:79:32:fc:2a:8b:b0:e5:8f:75:28:32:97:be:
2f:5e:7f:bb:86:47:da:ca:52:52:35:83:fd:1a:90:
1e:9d:49:50:47:24:d6:f6:ad:f2:0a:6b:47:4f:71:
f0:5e:02:68:a8:cb:1b:2a:a5:c3:e0:ca:e7:92:47:
d5:10:11:86:40:39:5e:89:39:54:a9:e4:9a:07:01:
1b:34:41:b1:ac:63:8f:92:04:89:3a:ab:cb:cb:61:
d8:50:22:5b:40:32:89:05:b6:15:51:7d:8a:91:7e:
a9:41:9a:c7:86:0c:8f:9d:58:b6:56:2f:e4:3d:d4:
49:c3:47:36:30:23:99:a7:48:25:68:22:cd:11:50:
eb:5d:f5:78:32:95:b4:12:02:af:98:f5:2d:cf:e4:
01:f9:c2:45:9e:7c:d9:7e:e6:d9:6b:cc:15:9d:7a:
a9:86:3f:e0:2b:b3:e8:f5:f1:49:51:e9:9f:57:ab:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:7C:85:0D:76:0E:47:61:E2:21:49:CD:9A:6E:EB:44:3B:38:5C
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:78:1a:a1:80:9f:cf:e9:ef:e2:51:88:ea:c6:a6:fe:e1:
a9:21:bf:2b:ae:bc:1d:61:d5:b1:52:cc:2a:f0:ae:b9:c3:af:
7f:de:bb:b3:96:37:16:d6:23:f6:fb:c0:84:b1:58:b5:f0:fa:
ba:6e:6b:a3:63:e5:ca:b5:47:66:75:c9:25:57:66:64:e4:d4:
7d:2a:12:21:c1:f2:be:13:c5:1a:d6:9f:29:4d:2f:1f:fc:0b:
51:38:a1:76:bb:71:a5:5d:87:9d:a6:3f:bf:7e:7d:4c:61:b7:
af:bb:30:43:0e:ef:2d:04:8e:cb:73:b1:d2:37:73:60:a0:9b:
c7:ff:da:c0:f3:c3:f1:d3:4a:42:97:66:6b:68:af:15:3f:58:
72:ec:33:63:b2:51:94:f3:82:37:66:93:a0:26:12:5c:c0:37:
cd:28:9d:40:f1:9e:48:81:89:03:30:06:b4:1c:11:50:ff:c4:
48:3b:75:35:a6:8c:c1:9a:04:29:03:75:01:7f:bb:2e:ed:28:
64:6c:0e:c5:f4:d9:08:07:23:32:7b:8f:3a:b7:22:80:e3:f2:
cb:bd:4e:16:fb:af:65:21:56:be:e6:7d:5d:c2:db:95:60:d8:
8e:ea:f4:d4:2b:ce:b9:36:97:47:0a:4d:65:98:ec:0d:45:40:
22:19:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:54 2026 by rpki-client