Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: Xq5qhtpM9OWsgwo+9N6SmSPtcRoAsGGRl7lSefbIrF4=
Subject key identifier: BF:6E:8C:1E:9E:6C:ED:11:CA:DD:D1:67:7C:F4:76:0E:67:B0:74:FF
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019CAAC6EA5672395CAB34FB7DC1225AAF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0C8C
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: LW_Y7EoDhmP24HEw6pTq_ypKuxA.roa (hash: dMTZ+onbRLoDPfo9xvgH1qIGCGHl9TZqheiKOL3A8vg=)
2: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: PNjC4uHd4jne3c63yrCscZfVGyGViqn1rmomBF4i4cQ=)
3: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
4: ybvBdzL7WOHo2RTEpKPBJDfbq0U.roa (hash: eJsgTWOdAhxNxeLst/bLBwWiWh2T18RO5lJ0bMj06p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:56:72:39:5c:ab:34:fb:7d:c1:22:5a:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=bf6e8c1e9e6ced11caddd1677cf4760e67b074ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:3c:d7:a8:ef:e1:4d:41:2a:69:a3:d9:48:
32:5c:0a:7e:b4:50:5f:bd:b8:2d:12:91:a6:72:96:
d5:0e:69:e8:9d:74:42:35:19:6b:b4:da:fe:7b:4b:
e8:17:ee:a4:3e:0b:49:e6:19:8f:22:bf:8d:e3:08:
fa:1f:20:bd:94:40:db:55:f8:be:cc:79:ff:64:de:
71:ed:f4:9f:6a:07:9d:f1:28:ea:51:20:27:ee:24:
e2:fc:e6:8b:59:a6:f2:4b:56:fb:92:a4:19:4f:59:
a6:a2:d6:26:8e:73:e6:8b:f6:06:3d:d1:4d:4c:2f:
19:fd:e4:39:1a:fb:f8:4e:51:e6:a0:b5:a0:cd:d4:
b3:1c:2d:1c:e8:f0:1e:7b:5e:0d:ae:d6:6d:ba:8f:
61:83:76:e7:3d:52:d7:42:ae:8a:38:52:ca:41:9c:
75:86:ab:50:77:4c:34:be:48:5b:ad:08:45:72:10:
24:eb:5d:a8:fc:ab:01:49:de:d9:ee:12:69:9d:68:
09:d7:0b:47:62:7f:54:36:1a:09:1b:12:69:77:06:
99:b9:51:24:d8:27:37:ea:cd:32:f5:65:13:43:08:
e4:ca:98:af:61:6f:34:7f:5c:59:90:61:9c:87:12:
72:22:92:68:b5:50:e7:85:34:bd:b6:c0:5b:62:8e:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6E:8C:1E:9E:6C:ED:11:CA:DD:D1:67:7C:F4:76:0E:67:B0:74:FF
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:98:ae:cb:d6:64:3a:00:98:33:4c:59:61:67:0e:23:08:
f3:4c:61:39:40:f2:b7:23:0a:bb:0f:64:20:06:af:e8:70:9e:
35:fc:95:fb:69:46:82:20:5d:7c:60:c8:3d:f1:2e:34:5f:30:
8c:a4:d4:8c:4e:75:7c:4b:17:e6:88:55:eb:69:43:cd:14:4c:
25:d9:37:da:e0:f9:aa:42:4f:af:c7:42:47:d4:ce:d7:1c:bc:
65:84:08:5d:0e:ee:4e:09:f2:9e:86:94:13:25:0d:f2:4d:09:
a7:68:fe:40:e9:c3:13:e8:2d:5a:2a:7e:f6:b8:b5:d8:ca:f3:
b2:fb:ab:3a:55:05:07:8c:eb:26:79:69:2d:d7:6f:bf:dd:01:
fc:db:16:f9:c4:4f:4a:b1:c6:9b:a9:8b:24:55:8e:91:2d:12:
f7:c2:8e:cf:d9:9a:cc:d7:5e:57:30:53:3a:49:c2:76:05:92:
4f:54:ed:92:a6:70:61:de:ec:89:d5:5e:5c:38:b9:85:6b:ee:
6e:af:64:19:09:82:4a:f3:6a:64:18:e7:d0:39:c8:5b:b1:2f:
cc:b3:00:23:34:c4:9b:99:49:8e:51:a4:3b:0c:2a:98:10:4f:
4c:7b:42:b3:25:63:93:05:63:27:4c:7a:1e:28:a7:50:2d:a7:
bd:40:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:08 2026 by rpki-client