Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: oDqv8i8swx9ThFp9sxFJzW6snT/kYxRlNeeoexvg75U=
Subject key identifier: AC:DA:17:8B:D6:C9:B0:A6:42:C8:30:E5:7A:80:DA:82:08:05:BA:6E
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019D984F91CA62D47FE55B78144A65F7DD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0D07
Signing time: Thu 16 Apr 2026 22:00:44 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Fri 17 Apr 2026 22:00:44 +0000
Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: +MNuD3e4/8De67xXicOvOapFGSVHyyu1qb8ofg5pPP8=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:91:ca:62:d4:7f:e5:5b:78:14:4a:65:f7:dd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 17 22:00:44 2026 GMT
Subject: CN=acda178bd6c9b0a642c830e57a80da820805ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:1c:26:f6:1d:1a:c3:43:24:e6:a9:5e:54:
3f:5a:5b:d0:e9:a7:6e:18:bc:91:b1:3e:f6:4a:0a:
0b:0f:8e:8b:7b:86:62:fb:1f:b6:18:e0:b8:af:ae:
48:5e:eb:49:cf:09:6a:d3:0b:99:9f:46:77:57:b7:
2a:3d:97:50:9a:55:0c:bc:e3:ef:ff:2b:a0:fe:24:
91:d3:dc:cb:21:cf:66:20:76:a0:d6:56:0e:d4:36:
c7:01:71:7f:ba:d8:c1:47:68:2c:f1:c5:5c:a5:43:
4e:38:93:47:57:40:71:ac:91:65:40:f6:46:dd:ba:
3c:f2:7b:db:94:51:8e:3b:24:24:7d:79:5c:c3:24:
a0:f6:b2:e6:c6:06:17:44:56:62:66:00:8d:57:81:
01:97:4c:24:61:9e:58:3c:62:18:f2:7b:f2:35:fb:
84:bd:4c:15:d9:e9:4c:7f:b1:49:8d:47:93:5e:d7:
95:c9:8e:e3:1b:f0:76:ad:d2:1c:13:9c:22:6f:6b:
b2:b7:62:6d:dd:3d:1e:50:03:e3:7f:60:7d:e0:35:
a0:d5:9e:fd:13:2c:db:3a:cf:31:4d:4b:ee:15:33:
99:eb:d3:dd:98:29:1d:c7:3a:5d:f7:68:ca:4e:59:
65:3a:a4:3e:58:aa:ed:04:7f:c4:df:bd:c7:24:cf:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:17:8B:D6:C9:B0:A6:42:C8:30:E5:7A:80:DA:82:08:05:BA:6E
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:0c:c0:4e:f5:d8:fe:8d:30:ce:04:91:6a:9a:8e:92:5a:be:
29:b9:e4:e3:84:54:28:4f:d7:cb:36:06:e8:2f:99:c5:67:69:
50:1e:f8:0d:39:fb:c7:d2:b4:05:0f:97:32:5c:cf:d8:89:a5:
60:10:fb:d4:4b:86:e0:e0:d2:9f:ca:0a:7c:30:67:41:88:44:
c3:dd:cd:f2:6c:55:e0:3a:d6:3b:e9:97:52:4f:80:d4:f5:d2:
76:e1:d6:96:5e:5a:06:a4:e7:d4:45:37:33:e9:81:a3:75:8e:
6b:d9:7b:29:1a:7d:7c:43:2c:02:31:30:ef:28:3e:92:27:60:
f7:29:f3:e1:1b:69:9a:d7:a1:7a:62:13:ea:21:9f:12:59:e3:
94:b0:38:d7:22:1b:6c:b3:64:98:17:04:50:87:a9:47:ca:54:
19:63:76:d1:f0:f8:81:40:9d:0c:e8:85:16:bf:75:3f:95:3b:
af:a7:dc:5a:7b:ba:b1:05:9a:4a:83:57:07:82:f3:f6:9b:c8:
73:ea:65:a8:88:cc:bc:72:2e:99:be:67:83:66:90:97:85:09:
ee:ac:39:b0:0c:1a:db:a3:b3:08:a0:94:6f:96:78:6e:66:6e:
ee:d9:b8:10:06:81:6c:76:e6:b4:7e:fc:22:1d:01:87:fe:ea:
18:99:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:41 2026 by rpki-client