Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: +dd7o8Ec95SRrhi6o3+YwLAWqDCJVp8nwQygv/lfXvU=
Subject key identifier: B8:B0:1D:65:2B:F3:03:10:54:F9:8F:A8:E1:83:19:22:23:20:96:43
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019CAD59EA1F800D8CEECF32350951521C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0899
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: 6thFfOGbh-U8AJJ26hDlrT3Bcrk.roa (hash: KCOPaIHLr+pxyqgE343O1xjtqPMzdKkZmLUGGeiIpxU=)
2: TDnGx-yWDIFqFi83TRDVauCdL-0.roa (hash: vGAWyhTZc4YYRF0r4iG8JBgBRr3OJEchixvO3ETaTDQ=)
3: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: 4o6LTr0k/CvUOGtlrIsYBp1ThyYJat9vg3ikaWs0vjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ea:1f:80:0d:8c:ee:cf:32:35:09:51:52:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=b8b01d652bf3031054f98fa8e183192223209643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:c2:ef:04:dc:0f:11:0e:bc:1a:d0:84:ae:
87:d3:84:ab:25:10:cb:48:d2:3c:78:be:5d:57:40:
46:6a:c9:44:b0:b6:ab:9a:f0:8e:f6:24:ff:b5:f0:
0c:49:54:22:3d:fe:db:d8:a5:01:49:eb:0c:8e:e6:
38:60:10:aa:7b:67:a6:2e:82:ad:36:6f:12:50:46:
b7:0d:3d:c7:47:53:c1:d4:45:22:79:2d:aa:8e:00:
a6:75:b8:66:b1:99:03:42:8a:e9:f6:b3:d4:ef:0c:
17:c4:c4:87:43:12:54:ad:1e:5a:69:c0:c3:cc:d4:
6b:c1:d2:7b:04:76:92:2a:be:1b:32:d1:d0:dd:33:
90:7b:8e:d6:c4:d6:fd:33:4d:b5:1d:34:bb:91:51:
3a:d8:4e:f5:55:ad:21:ce:6f:ca:44:a2:57:0c:84:
40:29:2d:89:7a:36:d4:4b:55:09:19:af:55:75:39:
d6:33:22:c9:b6:78:f2:9f:79:34:80:eb:d1:20:b7:
ba:e5:25:e5:2b:78:22:76:3f:fc:1f:fd:99:b1:c6:
c1:6a:b0:f0:68:6d:40:bf:59:15:30:24:ee:c6:3d:
ac:96:fe:87:a6:aa:cb:a3:6e:43:e4:78:45:36:67:
85:c5:9d:d9:71:d5:41:2a:98:1c:70:97:21:8b:8f:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:1D:65:2B:F3:03:10:54:F9:8F:A8:E1:83:19:22:23:20:96:43
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f1:69:07:1b:9d:40:f8:09:b9:f8:a1:0e:6e:0f:14:89:ad:
9e:11:2d:47:15:c6:4d:d4:a8:93:4f:8a:02:92:59:93:bc:2c:
f0:d0:85:08:9f:85:a5:88:72:71:6d:c4:0c:70:19:f8:21:82:
3e:bb:6b:8c:76:28:aa:2a:38:33:eb:6b:9e:63:5d:02:12:d4:
38:0c:49:56:c6:58:41:ed:b2:81:58:78:60:df:2a:3c:c7:29:
32:05:b8:66:a2:37:8a:d7:2f:f8:bb:08:5d:dc:5b:70:85:21:
35:b7:71:78:b4:ea:c9:fe:be:65:65:54:95:6b:6c:5d:6b:00:
ed:6d:9a:8e:57:2c:ad:25:02:6d:a6:56:c0:ff:dd:e9:af:5a:
50:e9:d6:18:12:c8:f5:20:96:10:be:42:d6:dc:b6:99:9b:7f:
2f:19:ca:95:9b:fb:09:14:9e:22:28:20:de:13:d7:42:77:be:
3c:4b:bf:00:5b:81:4c:92:69:23:d7:ab:cf:c4:65:3a:76:61:
d9:14:73:ae:39:b1:81:97:a9:0e:e0:67:e3:0f:f8:1b:03:36:
92:df:b0:2a:ea:9a:dc:d7:9f:ad:a0:f8:67:13:d1:84:a6:c9:
b7:b1:cc:62:6b:12:2d:0c:be:ca:66:d3:87:51:71:b9:70:d3:
f6:e3:10:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWeofgA2M7s8yNQlRUhw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0
MzcwMDUwHhcNMjYwMzAyMDcwMTE2WhcNMjYwMzAzMDcwMTE2WjAzMTEwLwYDVQQD
EyhiOGIwMWQ2NTJiZjMwMzEwNTRmOThmYThlMTgzMTkyMjIzMjA5NjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdLC7wTcDxEOvBrQhK6H04SrJRDL
SNI8eL5dV0BGaslEsLarmvCO9iT/tfAMSVQiPf7b2KUBSesMjuY4YBCqe2emLoKt
Nm8SUEa3DT3HR1PB1EUieS2qjgCmdbhmsZkDQorp9rPU7wwXxMSHQxJUrR5aacDD
zNRrwdJ7BHaSKr4bMtHQ3TOQe47WxNb9M021HTS7kVE62E71Va0hzm/KRKJXDIRA
KS2JejbUS1UJGa9VdTnWMyLJtnjyn3k0gOvRILe65SXlK3gidj/8H/2ZscbBarDw
aG1Av1kVMCTuxj2slv6HpqrLo25D5HhFNmeFxZ3ZcdVBKpgccJchi4/8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiwHWUr8wMQVPmPqOGDGSIjIJZDMB8GA1UdIwQY
MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt
NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2
LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvFpBxud
QPgJufihDm4PFImtnhEtRxXGTdSok0+KApJZk7ws8NCFCJ+FpYhycW3EDHAZ+CGC
PrtrjHYoqio4M+trnmNdAhLUOAxJVsZYQe2ygVh4YN8qPMcpMgW4ZqI3itcv+LsI
XdxbcIUhNbdxeLTqyf6+ZWVUlWtsXWsA7W2ajlcsrSUCbaZWwP/d6a9aUOnWGBLI
9SCWEL5C1ty2mZt/LxnKlZv7CRSeIigg3hPXQne+PEu/AFuBTJJpI9erz8RlOnZh
2RRzrjmxgZepDuBn4w/4GwM2kt+wKuqa3NefraD4ZxPRhKbJt7HMYmsSLQy+ymbT
h1FxuXDT9uMQOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:33 2026 by rpki-client