Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier: AQtvwGYO2Tk1iTjWwkEZEzDhoBTKHHaJc1hBN8Vnoko=
Subject key identifier: 94:52:BA:C5:4D:52:F6:94:67:98:DC:BD:B2:21:5C:F9:E5:53:54:D8
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019EC11191D5BC3924B9074D14CAC12B22B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number: 0DA2
Signing time: Sat 13 Jun 2026 13:00:14 +0000
Manifest this update: Sat 13 Jun 2026 13:00:14 +0000
Manifest next update: Sun 14 Jun 2026 13:00:14 +0000
Files and hashes: 1: 1-ryJIEOqpA8l9RbN7-gklZBdq0w.roa (hash: 4ws6lmAs2NjopGJM8783tZuCfDXl+eALfjhicTQgH0Q=)
2: J4FFEtQcJC3-DBhRRLtMQex6EYI.roa (hash: iaQJuASwGUMU2i6IS0uW5fUdoLz/JbnfzKlvq/DfoBk=)
3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: Fpd3wCv1wWfiEq3CI5BJ2mv9VxVouXTPqpuBTlTM5X8=)
4: qpvV9fOX8ujuAaYFsFown62YW_g.roa (hash: U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:91:d5:bc:39:24:b9:07:4d:14:ca:c1:2b:22:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 13 13:00:14 2026 GMT
Not After : Jun 14 13:00:14 2026 GMT
Subject: CN=9452bac54d52f6946798dcbdb2215cf9e55354d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:86:cd:ba:d2:12:c6:d1:df:76:86:93:72:
8a:b7:d2:a3:65:1f:54:8a:f7:5d:8d:ea:c1:ae:f6:
c9:29:e7:66:25:3d:50:e0:fb:98:e0:e6:46:d3:0a:
f6:b2:8f:18:47:be:6d:7f:38:4a:fc:42:34:9f:53:
6f:73:a1:f8:19:75:e1:ff:26:71:62:5c:38:41:a5:
7c:d9:3a:6e:de:60:55:25:2d:2b:d2:7c:66:be:70:
f8:14:24:ca:72:6c:cd:ca:d3:25:c5:39:75:43:5e:
fb:d7:7a:9f:e6:a1:b8:6e:6f:5d:dc:16:70:b0:af:
c8:82:f4:d2:6b:82:84:0b:c6:f1:cb:f7:da:37:f4:
00:0b:72:3b:53:c2:cf:ee:05:c2:a9:09:2a:4e:d4:
28:47:00:bb:42:db:5e:53:8b:da:53:91:b0:90:9e:
9b:fc:63:7b:cb:9b:9e:14:05:e9:61:ac:12:7f:f2:
73:65:a1:90:3d:98:88:40:be:15:02:f8:81:a9:c4:
a3:73:99:eb:2a:22:47:2f:4c:f5:a1:c5:32:4d:32:
6b:c0:d1:01:79:bf:b3:ee:c5:6e:de:b7:a1:ca:cc:
87:07:82:30:02:35:58:f2:60:08:9c:32:a6:a4:5f:
48:81:7c:2a:b6:e2:3a:23:cf:f5:ed:30:7f:1f:ae:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:BA:C5:4D:52:F6:94:67:98:DC:BD:B2:21:5C:F9:E5:53:54:D8
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ed:90:50:63:59:82:12:1a:b6:15:ef:c5:e7:4b:39:6e:f4:
69:95:5e:78:a6:44:3f:b5:b4:f4:04:55:cf:ff:d1:97:24:ad:
34:b5:ff:0c:8a:d9:07:fc:23:e6:fc:6a:6a:1a:72:cf:f9:b8:
15:03:3b:60:a8:41:32:48:77:47:cb:b3:24:e7:de:18:7c:aa:
6d:d2:7a:30:50:2a:e9:9e:fc:86:74:f4:d1:fd:ba:bf:f5:fa:
71:c2:77:62:4c:7f:88:5c:9a:dc:9e:72:90:d5:5d:ee:3f:33:
18:76:af:ed:30:1e:4d:d2:1b:f3:d2:30:3f:3b:43:74:46:c7:
bf:87:3f:63:9d:c2:a2:7c:7f:38:50:69:2c:a2:ce:c2:33:c8:
8b:21:01:19:b2:11:bf:40:7e:0a:cc:21:d1:63:ec:7d:32:b5:
4e:22:84:20:90:76:59:59:41:be:52:b3:d9:ba:06:ed:fb:5b:
75:01:59:78:9b:09:3f:ec:ed:e4:9a:20:bd:13:8d:60:fb:0b:
da:6c:65:9c:3c:88:ca:f4:25:59:57:fa:b5:2a:47:5d:4b:47:
ca:1d:26:00:c2:0c:81:71:d8:d4:cb:e0:72:0a:db:9d:da:ef:
ab:52:d3:1a:c7:e3:b8:3b:b9:7d:ca:5b:f4:6e:67:3d:0e:99:
92:64:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:33 2026 by rpki-client