Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: 0EPHGIUnAFmfzeDD/kjeyBrdaJqqR+PTlQ7jMZVAhTM=
Subject key identifier: F3:3E:9C:DF:F3:A3:2E:8B:63:BB:4A:E9:0D:4A:72:46:43:E8:A9:7D
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019D2AE051A2645BCF945F5F06DEF99C056A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 08DA
Signing time: Thu 26 Mar 2026 16:00:37 +0000
Manifest this update: Thu 26 Mar 2026 16:00:37 +0000
Manifest next update: Fri 27 Mar 2026 16:00:37 +0000
Files and hashes: 1: 6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa (hash: KCOPaIHLr+pxyqgE343O1xjtqPMzdKkZmLUGGeiIpxU=)
2: TDnGx-yWDIFqFi83TRDVauCdL-0.roa (hash: vGAWyhTZc4YYRF0r4iG8JBgBRr3OJEchixvO3ETaTDQ=)
3: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: g5dYWrWXdZN7yx1f68LLTfaJkWn0eokT/lX+UQ7Dtz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:51:a2:64:5b:cf:94:5f:5f:06:de:f9:9c:05:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Mar 26 16:00:37 2026 GMT
Not After : Mar 27 16:00:37 2026 GMT
Subject: CN=f33e9cdff3a32e8b63bb4ae90d4a724643e8a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:46:e7:66:36:95:46:9c:e1:f6:9f:d9:c0:
4d:22:04:a3:36:00:59:61:44:a0:23:00:85:25:82:
68:f8:36:30:29:95:8a:d4:e0:8f:76:a4:ca:9e:ba:
92:45:c4:a5:d1:ab:7f:46:dd:13:47:7a:53:3d:d4:
66:6a:56:dc:f8:f3:2a:a9:b2:f1:35:cf:ae:69:7d:
94:08:92:0c:84:b6:4f:64:62:a2:ff:b2:1b:bc:fc:
f8:3d:2a:ac:24:d4:fe:ea:8e:70:d9:82:9f:42:0b:
19:e4:7f:7b:34:1f:f7:2c:98:64:69:01:a4:28:66:
3e:51:f5:8a:c9:fd:67:c8:82:7e:02:e5:c0:75:c5:
3f:16:c2:74:c6:99:f2:db:4e:71:c8:7c:25:be:f7:
59:a2:ae:d5:a0:21:43:00:a5:6d:1f:15:e4:95:d3:
46:6a:df:5f:2c:bb:e6:23:fb:39:ac:9e:84:4e:16:
a8:d8:09:ff:1d:f2:e1:89:39:b9:29:6b:6c:fd:4b:
99:25:3d:f9:05:4c:63:4d:6c:63:c8:26:15:4f:a6:
a2:07:1f:9d:b1:a1:0a:fe:c0:34:0e:ae:6c:64:a2:
aa:ab:02:c3:6b:d7:cb:22:7a:a9:d9:05:8f:1b:5b:
83:5d:dd:58:21:60:47:91:81:55:b8:6b:27:26:47:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:9C:DF:F3:A3:2E:8B:63:BB:4A:E9:0D:4A:72:46:43:E8:A9:7D
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:ae:ad:db:06:e8:f7:2f:da:89:8a:2b:83:d3:e8:5e:e2:
d2:d4:63:83:f2:9a:07:0f:1a:90:2b:b1:e8:e0:8e:42:d0:9a:
2d:9b:90:44:43:a8:fe:b8:bc:9f:7c:19:c3:1b:b9:95:ad:cf:
b0:c4:93:db:7e:f3:98:21:f9:69:f1:99:c6:37:ff:4b:b9:b6:
e6:6f:51:28:ef:4a:1d:0e:a5:26:aa:2b:6f:88:83:a0:9e:c1:
a5:95:45:e7:0c:d0:51:db:96:5f:a0:43:4c:78:04:99:28:42:
25:d9:ff:4b:fe:eb:52:13:35:80:19:4b:9e:df:a0:fb:a3:b0:
76:e4:40:fa:98:54:91:1e:6d:e0:af:82:9b:44:18:60:2d:b4:
af:07:22:d7:62:3f:4a:fe:ce:ea:e8:6d:d0:e9:be:14:86:29:
41:79:21:e2:cc:83:60:e7:e8:23:81:c7:a2:2d:27:23:79:98:
1d:2b:8b:1d:45:3f:12:db:b1:8e:d2:db:bb:d9:cc:96:ed:27:
b8:48:8f:36:23:5f:e4:bc:ea:1c:33:00:b5:9d:ec:8e:2a:d4:
f3:04:84:bb:91:04:e3:7c:16:74:a3:26:93:95:c3:f6:29:47:
98:ab:c4:16:5e:12:4d:cf:7c:76:f5:00:51:bd:33:b0:5f:26:
7d:24:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:00 2026 by rpki-client