Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: Y7r/iXZu2/uelob9AyYwzvgd8Uo+TrbWr4cPCcl/Xwg=
Subject key identifier: AE:54:68:1A:71:59:7C:7F:02:39:65:AD:C2:36:EC:BE:63:6A:BD:30
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 019CADFEA1A31B3A61A093F3D661DBFEFC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0BBB
Signing time: Mon 02 Mar 2026 10:01:11 +0000
Manifest this update: Mon 02 Mar 2026 10:01:11 +0000
Manifest next update: Tue 03 Mar 2026 10:01:11 +0000
Files and hashes: 1: Qm-ojB5dZpQPZIP5vLGbx-B8HzI.roa (hash: dgJjkcZELRuvGpy4Hh7iKii9g2A21viogoew+COrj5c=)
2: jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (hash: Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=)
3: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: e24w2SJS1R089X6T6vy2xKM5R3u0+jCHJ6Rzxtw0NVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a1:a3:1b:3a:61:a0:93:f3:d6:61:db:fe:fc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Mar 2 10:01:11 2026 GMT
Not After : Mar 3 10:01:11 2026 GMT
Subject: CN=ae54681a71597c7f023965adc236ecbe636abd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:5e:4c:cd:6c:06:31:1d:d7:78:90:96:41:
18:c6:2e:b9:66:18:9e:a0:1a:87:59:e5:5e:33:37:
4e:49:66:25:54:aa:ec:53:87:b5:a9:53:79:97:e5:
5f:de:e0:4d:1f:84:9e:14:a2:33:03:de:28:53:f6:
37:d8:24:3c:60:74:c2:a4:3a:87:33:e8:a8:68:54:
cb:d3:6e:d5:67:97:a5:47:fb:7e:d3:0b:83:78:76:
ce:75:53:68:d1:8d:82:6c:07:9a:91:9c:f4:ff:5e:
c8:e9:67:f8:2f:bb:a8:e0:89:a3:21:c5:5e:c0:4e:
ac:4c:16:44:b5:4e:8d:74:13:29:5e:68:71:22:00:
a7:d1:50:5d:18:58:35:bf:c2:01:f8:25:63:c1:4d:
82:7e:01:f9:0e:ac:a9:0e:31:b5:40:03:bc:e1:fc:
cf:da:bf:13:3a:53:39:78:ce:89:52:9d:fd:90:d3:
e4:54:15:c5:57:8c:1a:89:dd:ea:30:da:d4:02:6e:
32:18:d3:10:f7:df:18:84:a3:5f:69:78:f0:85:5e:
79:b5:fc:3e:b6:1d:5e:82:0c:65:03:f5:5c:f4:62:
f3:68:ab:2f:e6:03:a2:69:8e:bc:92:96:8c:b9:a6:
0c:fe:c4:cb:d7:fc:28:a5:d2:37:be:2f:fe:3d:9f:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:68:1A:71:59:7C:7F:02:39:65:AD:C2:36:EC:BE:63:6A:BD:30
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:b3:32:ee:16:b3:cd:98:08:fa:1c:e5:cf:82:82:dc:5a:
25:0f:76:ea:ff:b4:62:f2:2b:14:b3:6b:e2:56:09:7a:d9:1a:
af:e4:a2:e4:60:60:0a:a4:9c:3c:24:77:52:56:d1:28:34:2e:
f0:c2:ec:e2:4d:64:7f:e8:88:9f:f1:93:9f:7d:00:65:51:58:
7b:c4:6c:96:e2:12:26:79:b1:9d:23:63:bb:bb:7d:64:7d:c7:
6c:66:c7:cb:fc:77:95:bd:93:0c:f4:f4:be:90:61:45:7d:73:
69:53:55:a8:21:94:0b:8f:55:de:ca:a4:65:61:31:ac:55:27:
95:43:1f:99:12:6a:35:9e:4e:37:31:0b:30:40:17:1b:1e:12:
99:b3:01:16:e0:69:0b:1a:4e:37:53:2f:44:4e:84:0d:5e:1a:
95:ae:dd:71:2c:43:66:d3:ab:be:c3:5c:80:f0:f7:d2:65:ab:
32:15:bc:1d:c3:ac:93:c9:72:36:bb:f8:cc:10:38:2b:6a:35:
98:f8:2d:3f:1b:d0:d8:55:a3:a2:22:36:12:fc:fe:f7:a3:20:
f1:d0:5f:52:0d:91:83:68:17:7a:2b:8f:9f:16:8f:97:fe:2b:
52:24:53:04:cc:73:f3:e3:58:42:38:19:f1:2a:2a:aa:0c:0e:
d9:e1:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:36 2026 by rpki-client