Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: SOpwI+gF5VeoZOukp2H4ht5V/46eBodELDrp5NkGB30=
Subject key identifier: 40:29:BC:73:5E:E5:64:77:D7:4F:37:F2:18:27:CF:7D:E7:F8:A3:FB
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01A0C96B1C9ECC9A6FF8C5DE3DDE15A74D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0EB1
Signing time: Tue 22 Sep 2026 14:00:35 +0000
Manifest this update: Tue 22 Sep 2026 14:00:35 +0000
Manifest next update: Wed 23 Sep 2026 14:00:35 +0000
Files and hashes: 1: Pt7PIIWOf0Ns_r9GZ5qHjXJMM_M.roa (hash: 1BJkjJJzRJsgJ9P5xD0C2TGUD819GX/LrEbI55Wb35Y=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: xEmVBfc2h9ZYOwKK0WnWQyv01lhwpqDWUHJmPJAjpWc=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: zrzevlWk8nYV2cUksY99V_qlScY.roa (hash: AheS3Jn9vrwMVAXUOcAlokukhhQZQDpg2R6hmrLu6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:1c:9e:cc:9a:6f:f8:c5:de:3d:de:15:a7:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Sep 22 14:00:35 2026 GMT
Not After : Sep 23 14:00:35 2026 GMT
Subject: CN=4029bc735ee56477d74f37f21827cf7de7f8a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:69:9d:27:7a:e1:44:64:6d:5b:c3:aa:d4:
16:60:fa:c3:62:ef:93:81:7c:fb:f9:70:fc:5f:30:
74:e2:e6:00:e7:ee:5e:70:54:1d:54:34:11:b5:76:
d5:00:7f:b3:ad:2e:48:04:18:f8:5b:85:39:f2:96:
4a:f0:e6:24:17:aa:0a:fe:48:3d:03:4d:d1:02:fc:
47:8e:bd:8a:f0:01:f8:f4:2d:0e:78:f3:a1:e6:07:
61:7c:c6:ab:6d:ee:21:ff:25:51:38:f5:13:43:f0:
4d:1f:30:b0:8a:62:0b:97:3a:c8:9d:8d:f8:98:92:
f5:d9:e1:ce:11:7b:82:45:c3:55:89:39:05:57:67:
1d:51:e0:eb:9a:fc:60:37:10:86:60:6f:14:cf:02:
fc:d5:64:eb:98:d6:00:39:72:f0:48:6f:8c:3d:28:
16:38:8e:e0:f4:94:40:69:e6:c5:f3:bb:4c:e9:89:
97:61:6c:50:07:bc:c0:3a:90:6c:f8:c7:e5:a5:0e:
59:e3:23:6b:5e:96:80:b5:e8:70:13:c7:7e:e3:e3:
17:9f:58:1f:ec:c7:3f:40:59:77:2a:e3:ab:a0:ce:
80:ed:ab:9b:e5:02:da:a7:a2:57:e4:50:ca:99:43:
17:bd:e7:ba:85:1b:8d:94:78:6f:16:94:a4:97:72:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:BC:73:5E:E5:64:77:D7:4F:37:F2:18:27:CF:7D:E7:F8:A3:FB
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:42:b0:65:13:14:10:22:ca:d7:26:7b:e9:87:27:26:f4:2c:
07:c8:75:51:8d:5c:42:83:10:7f:04:0b:99:12:c2:6c:52:f1:
1b:de:50:55:07:99:3b:69:96:90:e4:95:88:cd:38:07:60:36:
55:e1:3e:12:9c:85:cd:01:2f:78:19:76:bb:46:03:ae:06:6f:
a3:78:d4:cb:7a:c6:9f:d0:b6:79:0f:db:2d:16:55:f1:61:c2:
c5:f6:15:06:ae:a8:7a:09:8c:9c:6f:8f:b7:9b:e2:f7:28:35:
bb:d4:93:8e:46:71:1f:39:ab:ee:a4:46:05:2b:6f:a5:bd:4d:
c7:52:bd:03:bc:28:20:31:0b:1e:02:ab:52:cf:f4:34:4a:ed:
81:28:c0:08:f8:10:02:50:60:26:d7:79:fb:4b:92:38:d2:a6:
23:ba:b4:70:0e:c4:a8:6a:c7:2e:7d:02:68:73:62:80:9d:99:
d4:60:75:84:8d:30:44:6e:a7:7c:51:df:af:a3:e0:d2:ae:90:
8f:bc:63:93:41:61:11:60:f8:a4:17:39:e1:b2:73:92:6f:a2:
b6:b2:b4:dd:3b:56:5b:19:99:c0:5e:a4:ba:cf:a3:0d:11:7e:
17:20:b0:6c:75:7d:d9:f0:6d:b1:0a:9f:2f:e9:31:a6:09:bb:
d4:a4:d1:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJaxyezJpv+MXePd4Vp00hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjYwOTIyMTQwMDM1WhcNMjYwOTIzMTQwMDM1WjAzMTEwLwYDVQQD
Eyg0MDI5YmM3MzVlZTU2NDc3ZDc0ZjM3ZjIxODI3Y2Y3ZGU3ZjhhM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qppnSd64URkbVvDqtQWYPrDYu+T
gXz7+XD8XzB04uYA5+5ecFQdVDQRtXbVAH+zrS5IBBj4W4U58pZK8OYkF6oK/kg9
A03RAvxHjr2K8AH49C0OePOh5gdhfMarbe4h/yVROPUTQ/BNHzCwimILlzrInY34
mJL12eHOEXuCRcNViTkFV2cdUeDrmvxgNxCGYG8UzwL81WTrmNYAOXLwSG+MPSgW
OI7g9JRAaebF87tM6YmXYWxQB7zAOpBs+MflpQ5Z4yNrXpaAtehwE8d+4+MXn1gf
7Mc/QFl3KuOroM6A7aub5QLap6JX5FDKmUMXvee6hRuNlHhvFpSkl3LRCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEApvHNe5WR310838hgnz33n+KP7MB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUKwZRMU
ECLK1yZ76YcnJvQsB8h1UY1cQoMQfwQLmRLCbFLxG95QVQeZO2mWkOSViM04B2A2
VeE+EpyFzQEveBl2u0YDrgZvo3jUy3rGn9C2eQ/bLRZV8WHCxfYVBq6oegmMnG+P
t5vi9yg1u9STjkZxHzmr7qRGBStvpb1Nx1K9A7woIDELHgKrUs/0NErtgSjACPgQ
AlBgJtd5+0uSONKmI7q0cA7EqGrHLn0CaHNigJ2Z1GB1hI0wRG6nfFHfr6Pg0q6Q
j7xjk0FhEWD4pBc54bJzkm+itrK03TtWWxmZwF6kus+jDRF+FyCwbHV92fBtsQqf
L+kxpgm71KTRZA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:24:46 2026 by rpki-client