Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: piVE326l160t9YpxNI7Qc5AovNguZY3qAbB4Uu5kUIQ=
Subject key identifier: FE:9B:3F:A5:D2:3B:F1:74:DA:C1:8A:A5:91:00:58:D4:40:EA:B9:06
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019FAB63D6B5D439E6D6573C53B39A87DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0D48
Signing time: Wed 29 Jul 2026 01:01:14 +0000
Manifest this update: Wed 29 Jul 2026 01:01:14 +0000
Manifest next update: Thu 30 Jul 2026 01:01:14 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: dNmC9dpNP5o4woDNYQkw7QemYUnbhqLdvoz5yIQwMc8=)
4: qNWONomvIPPaw1vxRbdPf7PE9Uc.roa (hash: t+YKiZGgYPsEg6VbvrRY3eQ8DDKCYaJgu+YJ080oVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:d6:b5:d4:39:e6:d6:57:3c:53:b3:9a:87:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jul 29 01:01:14 2026 GMT
Not After : Jul 30 01:01:14 2026 GMT
Subject: CN=fe9b3fa5d23bf174dac18aa5910058d440eab906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:8d:4e:4f:7e:c9:a4:ab:8e:11:7b:56:61:
91:59:3b:ca:c2:c1:74:f0:b6:d7:30:0d:99:55:01:
74:dc:ab:d9:de:3d:8b:03:c2:23:ff:49:3b:3f:32:
9e:af:3b:45:53:7a:d9:56:ec:f7:11:89:e5:21:4a:
74:b4:ec:85:79:9c:51:6d:ec:f7:88:cf:2e:d0:08:
b2:c7:a7:e9:08:e6:12:a3:f0:54:08:e9:50:57:a6:
70:43:46:55:da:df:f4:77:5a:f2:51:ad:32:7d:dd:
05:a2:ab:ce:e7:e6:6b:08:12:9f:a6:f1:50:8c:1e:
a4:9a:42:0f:ea:f4:31:87:d0:61:08:62:a4:b3:19:
45:39:c4:ba:08:bb:86:e6:d6:e3:c5:6d:9c:60:a9:
ef:58:35:00:58:dd:29:ad:73:21:a4:c7:bf:51:4d:
c3:a3:4c:4a:5a:e0:ae:e6:60:12:06:c4:81:f9:29:
8b:eb:97:56:7c:ed:c9:6d:0e:29:ac:7c:2a:b0:44:
0b:5a:94:de:8a:92:b0:27:c2:08:e5:f8:77:86:ed:
9a:f3:00:73:27:f1:47:4e:3c:04:c1:63:14:23:83:
d5:ce:df:99:b4:25:de:c4:7b:a8:07:19:ad:4b:05:
8f:b3:57:43:93:53:b4:f3:0f:8c:0d:b8:c6:b5:87:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9B:3F:A5:D2:3B:F1:74:DA:C1:8A:A5:91:00:58:D4:40:EA:B9:06
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:7f:0e:c9:45:e2:55:1f:c7:d3:a6:16:67:b5:7a:19:2e:
f7:1a:af:fa:04:06:b2:2b:6d:c5:a3:2f:a4:3d:42:8b:62:3a:
91:53:e8:b5:69:da:ec:0a:a3:c5:cd:13:87:42:f1:e7:2e:4a:
03:39:da:c0:96:39:5d:81:8d:eb:e5:1d:39:ca:47:14:fd:f0:
e2:bd:ea:46:b3:91:39:98:d9:1d:09:fe:71:36:44:f6:ed:3b:
6e:22:60:30:42:66:78:c3:66:e9:e0:0f:ee:95:04:90:30:bf:
73:31:4b:a5:34:4f:96:5b:d9:10:4d:a3:f7:76:3f:e1:fe:78:
b2:c9:fd:76:d4:1f:fb:76:2f:83:e9:47:0f:15:95:d0:ab:2b:
ba:31:14:cb:7c:f3:0d:7c:4f:6c:5a:fb:00:d5:06:e8:87:e9:
05:5d:5e:5a:3c:d3:0f:63:b0:d9:66:e7:86:bd:50:87:4a:ca:
46:b7:1b:11:05:d7:12:1f:c4:28:7a:d2:ad:30:c8:93:83:be:
07:da:84:aa:77:40:e8:c6:7b:9c:2c:16:ed:30:65:2f:5a:44:
c6:7b:09:e1:77:c5:a6:0a:d2:a3:5b:95:12:60:a2:c8:1b:37:
b9:f9:11:2c:ca:cb:ad:f2:d4:78:c5:ae:32:56:f0:6e:64:4e:
0b:45:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:26:04 2026 by rpki-client