Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: e8h+V2anY/oFHnSAV0ajSFPlQQvRTizt/Rf95EAu8zY=
Subject key identifier: 58:44:C9:A4:7E:7D:71:D4:03:98:C2:BA:BF:5D:8F:BB:CF:3A:52:3B
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 01A128E86C75706EA3C900CDF336D0B159EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 0829
Signing time: Sun 11 Oct 2026 03:01:23 +0000
Manifest this update: Sun 11 Oct 2026 03:01:23 +0000
Manifest next update: Mon 12 Oct 2026 03:01:23 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: 2+z9lT992FDVua7B8EnQMcbzFM4X7o42PtVcTFTb3Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:6c:75:70:6e:a3:c9:00:cd:f3:36:d0:b1:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Oct 11 03:01:23 2026 GMT
Not After : Oct 12 03:01:23 2026 GMT
Subject: CN=5844c9a47e7d71d40398c2babf5d8fbbcf3a523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:3d:d2:40:93:58:a3:5a:23:c1:ed:0a:fb:
02:93:9a:c1:22:8e:9c:4b:f8:c1:a3:70:ca:25:c2:
2a:f0:c2:e2:0a:b7:6c:b4:e5:76:18:ef:fb:e8:a4:
84:08:be:ff:a4:be:97:c8:99:78:8f:24:46:e5:12:
4a:37:e8:2c:78:b3:fa:3f:31:f1:8d:dd:cb:64:f6:
90:a5:70:e2:a6:90:c7:28:bf:6f:bc:64:6c:3f:79:
01:d5:85:06:73:49:79:97:e0:67:a9:e8:5b:45:2d:
1d:c0:c2:c8:59:3b:5f:b9:aa:61:b3:8b:df:ed:fe:
e5:94:b4:5d:c4:c3:ab:ec:2a:4c:ae:7b:e8:56:d6:
b7:53:5b:c6:9b:17:fa:8b:96:9c:fc:bf:74:3e:07:
89:b7:2b:42:86:49:f1:bf:ae:d8:4b:e9:e7:23:b3:
1c:94:d0:cb:e3:82:ab:57:9a:f4:a7:65:71:98:c0:
a4:90:70:34:30:fa:30:9e:cf:c8:b9:d8:c2:ef:d4:
eb:8a:9f:23:06:08:f9:05:73:c9:d8:39:cb:6a:6d:
4b:09:65:24:84:47:d6:98:f7:3d:43:4d:e6:8b:6e:
c1:69:76:e4:68:3b:ad:23:c6:d2:75:a6:02:2e:38:
e4:be:22:f6:ad:c5:8d:86:8a:ed:a8:8a:f7:3a:7f:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:C9:A4:7E:7D:71:D4:03:98:C2:BA:BF:5D:8F:BB:CF:3A:52:3B
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:f1:38:a4:6e:c8:e8:ec:c5:cb:ec:19:16:31:45:5a:83:
16:47:c5:f2:94:71:7b:e2:52:55:f5:1c:e4:9f:3b:6f:f3:85:
f2:c2:e6:77:55:fa:b1:be:74:ed:c8:79:68:ce:4c:3b:88:c2:
d5:f6:12:cf:11:8f:ad:57:c9:2e:52:62:fc:ee:61:b6:b4:85:
16:09:d8:5c:2b:00:c0:d9:c2:8e:db:43:33:ff:fc:35:d3:5a:
58:6b:1b:cf:70:36:92:b4:31:af:82:98:df:c2:15:98:69:33:
bb:b1:df:38:df:19:61:26:ff:cd:1b:1f:7a:e0:84:fa:ae:97:
3a:5b:a0:67:5a:9b:0c:d8:f0:91:f9:6c:34:ea:fa:39:81:6c:
f5:51:a9:a0:35:da:5c:e3:14:75:9d:7d:6c:40:35:8b:15:51:
e9:b3:20:f2:a6:24:ff:46:a4:da:b1:dd:1d:d5:18:17:17:7a:
6b:b0:5f:af:db:95:6a:23:5e:af:c4:d6:60:28:2f:90:a4:81:
11:67:04:6d:16:df:96:10:c1:9c:c7:ad:9a:90:f0:20:c8:81:
40:dc:fc:5f:c8:d3:bc:41:20:1b:aa:84:ed:3e:4e:39:30:13:
a5:56:72:f3:27:d7:58:b4:dd:59:02:0c:d2:b6:5e:ce:42:3e:
b6:80:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:02:56 2026 by rpki-client