Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: 7zp8vJH4FwIsHUEVXWsTIzvk/beQvYNMIUBeP4HhxfI=
Subject key identifier: 0C:B5:38:4D:13:EF:1C:B1:DE:9A:9F:4C:61:6A:5B:7B:4C:37:4F:3C
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019D27A8CC7AF2FF98B5FE6AC1CD8BF039F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 10BC
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: mMrIZXiBIZoquzdCKwR8yf6nIHjwp4mmw9iB4lSuRls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cc:7a:f2:ff:98:b5:fe:6a:c1:cd:8b:f0:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=0cb5384d13ef1cb1de9a9f4c616a5b7b4c374f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:3d:3a:03:5f:77:f2:fa:1a:4c:7e:86:14:
2a:f1:8d:fd:7c:73:32:e2:35:89:03:af:2c:38:4e:
a3:bb:47:11:4f:b4:f7:92:55:34:71:41:65:5d:0b:
aa:db:0a:60:a7:03:ea:2d:fd:bc:14:e1:b7:6c:a9:
47:bd:8f:2a:e7:4e:ab:4a:e5:fc:c3:bc:a0:96:f2:
d9:4b:b0:a6:58:89:95:34:fa:b1:1f:4f:39:cc:82:
55:51:6d:a9:2f:b2:79:c1:fa:14:27:88:b5:58:cd:
8b:61:dd:a4:c2:64:ef:24:32:4d:6e:98:ef:42:cb:
cf:a6:f9:8d:fe:b3:b5:11:4c:61:c2:a8:77:1c:9c:
9c:78:bd:43:67:68:44:f9:68:00:71:75:bb:bc:99:
dd:08:65:5b:8d:0a:68:b1:ae:d5:d6:7f:91:7a:44:
5a:ef:a0:2e:6d:e9:ef:f1:f0:dc:29:91:16:fd:38:
7a:b6:3e:59:83:92:92:8c:9f:08:78:71:df:09:f4:
72:3b:2f:63:d2:bc:66:60:5f:ac:5c:3c:5b:3b:14:
eb:ec:56:14:54:f5:8f:78:59:d4:3c:9a:a6:cc:7c:
a6:15:5f:8f:25:27:f5:cb:07:d9:94:eb:85:42:cc:
c3:85:04:fe:72:68:3c:97:b9:8e:bb:59:17:fe:6e:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:38:4D:13:EF:1C:B1:DE:9A:9F:4C:61:6A:5B:7B:4C:37:4F:3C
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:9d:b4:3d:cb:35:a9:85:8d:2f:ca:c3:1e:fe:dc:50:fa:
e6:67:e6:ad:63:be:ec:78:b9:3a:65:42:65:39:95:2f:ab:8c:
98:2e:0b:43:b5:93:16:43:41:af:b9:fa:c9:3a:11:71:49:94:
29:b4:a2:68:e8:ce:61:92:b4:89:50:05:00:49:fe:1d:e6:26:
d4:e4:70:8e:68:25:3d:39:19:ac:12:76:a1:e1:b0:e9:e9:e0:
d7:35:b4:94:b4:26:95:77:4c:92:6c:8c:1d:33:36:25:20:da:
2a:cc:c3:69:f1:d0:23:73:72:66:53:ed:e8:44:c0:7d:53:e5:
0d:d5:f8:85:2a:ff:e6:ac:32:2b:04:c8:a6:cb:4f:e3:dd:6a:
94:94:f7:3a:56:b2:de:92:2c:2f:71:c8:d2:8d:53:09:c8:22:
79:7e:96:9b:0a:fc:b6:6c:c2:be:f9:a4:ee:38:25:3d:07:63:
89:64:a5:65:97:c3:df:c2:c4:54:d0:77:33:b4:4c:0e:0a:ee:
45:af:6e:c1:64:a1:90:de:da:ec:27:e7:7d:ee:e6:d9:0c:59:
6b:1d:e7:c8:ee:4e:59:9c:23:21:5c:85:12:d8:e8:39:75:48:
8f:30:0c:78:be:13:32:27:a6:40:33:d6:37:d0:f6:6d:19:32:
21:ec:0e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMx68v+Ytf5qwc2L8DnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh
ZDNkZGQwHhcNMjYwMzI2MDEwMTA2WhcNMjYwMzI3MDEwMTA2WjAzMTEwLwYDVQQD
EygwY2I1Mzg0ZDEzZWYxY2IxZGU5YTlmNGM2MTZhNWI3YjRjMzc0ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Q9OgNfd/L6Gkx+hhQq8Y39fHMy
4jWJA68sOE6ju0cRT7T3klU0cUFlXQuq2wpgpwPqLf28FOG3bKlHvY8q506rSuX8
w7yglvLZS7CmWImVNPqxH085zIJVUW2pL7J5wfoUJ4i1WM2LYd2kwmTvJDJNbpjv
QsvPpvmN/rO1EUxhwqh3HJyceL1DZ2hE+WgAcXW7vJndCGVbjQposa7V1n+RekRa
76Aubenv8fDcKZEW/Th6tj5Zg5KSjJ8IeHHfCfRyOy9j0rxmYF+sXDxbOxTr7FYU
VPWPeFnUPJqmzHymFV+PJSf1ywfZlOuFQszDhQT+cmg8l7mOu1kX/m63oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy1OE0T7xyx3pqfTGFqW3tMN088MB8GA1UdIwQY
MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt
NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl
LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0GdtD3L
NamFjS/Kwx7+3FD65mfmrWO+7Hi5OmVCZTmVL6uMmC4LQ7WTFkNBr7n6yToRcUmU
KbSiaOjOYZK0iVAFAEn+HeYm1ORwjmglPTkZrBJ2oeGw6eng1zW0lLQmlXdMkmyM
HTM2JSDaKszDafHQI3NyZlPt6ETAfVPlDdX4hSr/5qwyKwTIpstP491qlJT3Olay
3pIsL3HI0o1TCcgieX6Wmwr8tmzCvvmk7jglPQdjiWSlZZfD38LEVNB3M7RMDgru
Ra9uwWShkN7a7Cfnfe7m2QxZax3nyO5OWZwjIVyFEtjoOXVIjzAMeL4TMiemQDPW
N9D2bRkyIewOpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:51 2026 by rpki-client