Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json)
Hash identifier: T+Ua+kGWlmk3m1810IgoaI2zDkfOk3xsSqx5H6yRoTU=
Subject key identifier: 88:81:9B:6A:B0:83:24:55:F8:83:D1:A0:5D:E3:D3:D8:6A:B4:F5:02
Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Certificate serial: 019CABD9A018260A621B14DD6635CFF61E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
Manifest number: 05D6
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: 6DYQyU1SL1LMvaa65DMCw3z4hO8.roa (hash: JrefBnA8RHFlhcRliMFJw03ONHlUFhDp419thhgo8CE=)
2: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: Jf5uvLTRos6pEkDpGlWVbf1S7rtY0Q1D3Yyoz+F9HvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a0:18:26:0a:62:1b:14:dd:66:35:cf:f6:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=88819b6ab0832455f883d1a05de3d3d86ab4f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:bd:47:51:bb:af:7a:f9:ed:60:d9:07:65:
05:46:b4:5f:bf:20:d4:c2:aa:c9:b4:47:ce:ad:24:
10:a3:77:77:01:eb:c6:ab:b2:04:78:d0:b9:6c:e1:
00:89:ac:85:06:8b:3e:33:2d:19:9e:4e:0e:a5:01:
ef:7a:1e:9a:09:db:86:66:9d:2b:cc:d7:47:fa:bd:
12:2d:6b:7d:17:29:19:2e:91:c3:78:e8:87:5b:01:
8e:24:a6:6a:ba:d0:4c:5f:de:e0:6d:f3:71:06:b4:
74:00:df:fb:78:25:83:d1:eb:df:45:d5:71:c3:bc:
29:63:ed:f6:38:27:04:c9:a2:38:7a:78:64:f7:0e:
69:19:e7:a5:bc:f6:3a:13:b6:0b:b7:39:76:ad:f7:
46:7d:28:30:17:b4:8b:48:e2:3e:f8:2c:bf:7b:50:
d1:fb:5c:6f:39:fe:5c:7a:a4:0c:ca:bf:e4:cc:77:
c0:b1:2c:c6:78:c3:b1:66:11:2c:60:90:1b:69:14:
29:59:76:de:a4:9e:40:f4:b1:c9:a6:3e:4b:2c:f2:
75:9b:fa:29:de:14:be:27:1a:d6:ab:32:44:e2:c0:
90:11:80:46:a5:90:33:4f:90:ad:c7:74:47:b5:9d:
83:6c:19:91:7b:ff:0c:47:72:81:ef:a9:06:e9:39:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:9B:6A:B0:83:24:55:F8:83:D1:A0:5D:E3:D3:D8:6A:B4:F5:02
X509v3 Authority Key Identifier:
keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:98:25:f9:50:c0:34:dd:51:4e:fa:1e:1b:59:d1:6d:78:94:
88:64:aa:28:94:4b:ae:94:48:2f:20:23:28:ac:52:3a:dc:db:
72:72:9d:db:6a:87:74:a5:3e:7d:b3:25:a7:76:ea:19:7e:f7:
81:a2:3b:29:cf:78:3e:44:d7:d5:3c:4f:07:b3:6e:94:88:b7:
a1:2c:22:9d:37:ea:53:04:2e:7a:df:56:f2:e5:0d:bb:b9:d5:
ce:9e:90:06:49:a5:ee:f4:0a:59:ae:79:ac:45:16:8c:27:66:
5d:61:e5:00:f7:0e:77:81:39:6f:3b:3b:34:32:a1:0f:9a:70:
0a:a3:2c:cc:2a:d2:af:d6:8d:5a:74:9c:07:32:78:11:9f:e9:
49:77:2a:45:34:1e:1b:eb:61:eb:75:ac:0d:15:22:a2:d7:34:
cd:27:d1:ae:53:29:ac:56:43:0f:18:2b:cd:9f:db:e0:8c:d6:
83:2d:4d:2e:74:84:61:96:41:af:e8:d7:23:76:2b:c1:56:67:
7b:54:56:ec:42:c2:b8:ad:f4:71:8d:4c:8f:3c:a5:31:26:05:
f0:5b:c4:d1:78:a2:c2:c7:c9:20:98:83:40:79:7f:92:16:20:
98:94:04:74:0a:8e:7f:d5:52:64:f7:fd:e4:6d:0c:3b:d1:66:
c4:a6:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:41 2026 by rpki-client