Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: H+eQ+VUw9qxkLnGHoiHsCzWJvVh4xAEThaxp20KnRFE=
Subject key identifier: 29:A0:6B:C4:05:16:0F:3D:1F:ED:9B:CB:D8:74:E0:9C:0F:C3:36:FC
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019EC1B6930D98905AB18B42CD8BCCF623A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0CCF
Signing time: Sat 13 Jun 2026 16:00:28 +0000
Manifest this update: Sat 13 Jun 2026 16:00:28 +0000
Manifest next update: Sun 14 Jun 2026 16:00:28 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 3Z/ZoHW2pYump8VY3m0+TlPJVEOO/R4GcHCZwjZZZ18=)
4: qNWONomvIPPaw1vxRbdPf7PE9Uc.roa (hash: t+YKiZGgYPsEg6VbvrRY3eQ8DDKCYaJgu+YJ080oVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:93:0d:98:90:5a:b1:8b:42:cd:8b:cc:f6:23:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jun 13 16:00:28 2026 GMT
Not After : Jun 14 16:00:28 2026 GMT
Subject: CN=29a06bc405160f3d1fed9bcbd874e09c0fc336fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:99:bd:10:da:8e:3e:3f:38:7b:21:f4:8c:
ac:d2:f2:ba:c4:93:f4:a9:d4:42:63:27:b9:e3:2b:
ac:38:b3:ab:71:b5:f4:87:b6:d0:e0:72:a8:bb:0c:
fd:19:40:1c:41:9c:17:a4:3f:af:15:54:8f:f5:37:
65:15:11:08:67:2e:2f:77:dd:39:f2:bf:d0:fa:44:
58:97:8e:29:a0:6d:29:cb:05:ed:c2:05:16:b1:5b:
52:55:f9:71:4c:37:9a:dc:77:bb:8e:3b:25:13:be:
e3:a9:1d:27:89:08:af:a9:5d:3f:98:50:ea:a1:0a:
4d:80:25:df:7e:2a:08:dc:2c:a1:77:ac:42:30:a0:
84:2f:3d:93:76:c3:f1:be:e3:a3:d3:f5:75:6e:3f:
d0:ec:6b:45:9f:c6:65:aa:01:d3:a5:29:42:53:04:
de:2d:fc:0c:f4:13:54:fb:35:b2:b4:ab:bb:fc:02:
18:1c:6f:3e:19:66:bf:a2:b3:2d:9d:3c:1b:84:e5:
a6:0a:9e:60:f6:22:2a:8d:d4:83:25:eb:af:85:61:
a1:c5:c6:29:db:66:8a:1f:fd:a1:a9:2e:d1:2a:28:
34:45:45:39:6d:5c:22:0d:69:ca:50:af:48:d2:0c:
1e:a8:6b:cb:48:fa:b1:e5:89:b4:c8:1b:fb:46:9f:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:6B:C4:05:16:0F:3D:1F:ED:9B:CB:D8:74:E0:9C:0F:C3:36:FC
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fe:b7:b8:7c:9a:72:60:f5:cd:a0:aa:72:18:70:bb:1f:75:
29:3d:94:21:6b:46:89:6c:45:76:28:be:5b:b5:43:1d:3d:2b:
68:09:6d:53:02:7b:b6:23:20:e4:4c:17:2b:7f:4c:b2:af:44:
c8:50:b0:3d:77:83:a5:13:8f:97:0b:c4:d7:aa:4f:9a:c3:3e:
21:01:7b:ff:cd:3b:5c:ae:b9:5a:22:4e:2b:9a:45:d1:47:3c:
a7:2e:87:a9:56:cc:68:84:14:ef:c9:98:99:6b:19:00:63:7d:
36:22:bd:78:a5:c3:c2:96:d3:e6:62:1a:50:ce:3d:02:a0:49:
78:bb:46:51:48:84:50:3f:e9:b7:dd:36:1c:8c:16:fd:ba:12:
f2:1b:c2:7d:01:8d:91:d2:5c:ac:1f:c5:a3:a9:c8:ca:9d:03:
c3:55:01:8f:db:c7:4a:8f:c3:b6:50:2f:7f:2e:5f:72:c0:9f:
00:c7:d4:b3:ab:4a:a5:b4:d6:9c:39:ba:4b:0f:48:ea:70:f7:
54:31:ba:d9:a9:01:d1:ae:b6:f8:ef:70:6e:96:1b:a3:7e:bb:
41:3c:89:b5:d5:0d:60:8a:6b:bc:a9:69:58:d1:29:3d:1f:2d:
f7:91:3a:c6:06:53:fd:0f:44:89:9a:d3:0e:df:c0:f2:75:04:
2a:13:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:15 2026 by rpki-client