Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: gMkBJ8FLRXhzWFG0gBE9ww6MZOsdFL/CWJg6id8ar/I=
Subject key identifier: 42:A9:EC:C2:42:01:48:EB:CD:0D:3C:78:E8:5E:76:CD:59:A5:5B:05
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019D9B880CE84B7E1A42E07345C20005F1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0C36
Signing time: Fri 17 Apr 2026 13:01:17 +0000
Manifest this update: Fri 17 Apr 2026 13:01:17 +0000
Manifest next update: Sat 18 Apr 2026 13:01:17 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 07XgrY/mqCj/o+gjv/9+fZM1AJQ+qyotcvyrvBsZv6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:0c:e8:4b:7e:1a:42:e0:73:45:c2:00:05:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Apr 17 13:01:17 2026 GMT
Not After : Apr 18 13:01:17 2026 GMT
Subject: CN=42a9ecc2420148ebcd0d3c78e85e76cd59a55b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:72:d7:26:a0:cb:66:2a:ee:60:b4:df:22:
ae:fb:58:60:1c:36:39:ba:2d:7e:14:91:32:e2:69:
fd:89:cd:0a:fe:93:e9:36:3a:43:98:54:c9:03:b6:
c6:61:8a:38:15:8b:38:1a:11:36:7e:bf:35:41:bd:
c7:5b:cf:99:85:5b:7c:47:39:7a:77:73:d6:01:b1:
e3:a2:6f:6b:ee:27:84:d0:43:a3:00:07:41:e4:01:
8c:35:eb:2c:3d:f5:70:80:d8:df:83:9b:2b:ae:b4:
e5:0c:03:8f:4d:51:60:13:0e:21:0b:eb:98:e0:73:
81:81:51:fd:43:ff:dd:67:cb:c6:17:76:bd:65:2a:
64:03:5a:7f:e4:58:c7:a1:2a:39:04:2c:d2:30:c8:
69:66:5f:d4:c8:e8:d8:a7:6d:bf:c6:a9:52:68:b1:
f1:9b:13:0b:de:d8:44:97:c6:ef:8c:b0:82:c8:94:
9a:f0:0a:65:e1:68:ad:27:e3:b1:ad:fb:ad:92:c3:
85:fa:52:c9:66:6b:0e:a7:ba:ea:0e:73:b7:98:d9:
be:7e:de:ac:02:e7:2a:9c:f0:93:2f:8e:28:11:d2:
5d:70:c3:dd:b5:ed:33:f1:db:98:74:a9:a4:f8:5c:
01:21:21:b7:eb:31:c7:e9:ed:55:c8:40:a9:b2:38:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:EC:C2:42:01:48:EB:CD:0D:3C:78:E8:5E:76:CD:59:A5:5B:05
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c2:ff:43:bf:c9:14:ac:7d:2d:16:73:85:22:48:2a:fe:2d:
74:51:cc:b4:1d:5d:98:f4:60:d6:ed:1f:8e:3d:de:fd:2a:4c:
94:70:9d:0a:e0:ab:ee:c2:38:50:9c:ac:38:a2:b5:08:4d:0b:
e7:79:d0:d9:41:7b:f6:c1:af:68:c6:34:de:08:54:c1:3f:b6:
60:bf:e4:6c:15:d1:87:0f:0b:d8:3c:05:a8:8a:8e:11:23:e9:
04:f2:12:60:e9:be:37:e5:5b:7e:c4:19:a1:7b:7a:d9:64:26:
20:27:26:46:06:bc:bd:81:e6:91:b1:8e:90:32:ce:0c:c9:f3:
a3:dc:57:3c:ef:21:19:b0:41:da:d6:79:3c:0b:9a:33:82:4a:
b7:69:0c:2b:4b:b4:6b:51:a6:69:b1:c9:63:e5:83:e3:75:a8:
a1:87:fa:67:11:44:b5:c3:58:77:0a:ba:fa:fb:6e:7e:a1:ec:
b4:0b:5b:c9:22:20:44:b1:40:36:8e:69:0d:bd:4d:e7:70:bf:
e5:52:82:00:82:8c:da:03:b8:af:5d:42:d7:0d:fc:02:f2:f8:
50:bc:0d:d3:a9:98:54:61:eb:35:1e:47:0d:ee:6e:c7:15:67:
4c:ed:61:f3:99:cc:2e:fe:bc:09:60:96:38:92:03:7a:7d:d6:
31:27:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:33 2026 by rpki-client