Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: 4mDR402T8zV9vq4h4tOFhvX+ANMtTdLmk//VcR49ssk=
Subject key identifier: CC:89:C3:AA:AA:3C:DE:37:09:C1:76:44:29:4B:DA:73:3E:78:6F:EB
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 01A0E964C1BA7F9DDF7584AD48075F6FC805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0B1A
Signing time: Mon 28 Sep 2026 19:01:29 +0000
Manifest this update: Mon 28 Sep 2026 19:01:29 +0000
Manifest next update: Tue 29 Sep 2026 19:01:29 +0000
Files and hashes: 1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: OlQPoVsuQRxAD8CVrqhX6A3L1HRvzUsCSXc+IwrW5vc=)
2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:c1:ba:7f:9d:df:75:84:ad:48:07:5f:6f:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Sep 28 19:01:29 2026 GMT
Not After : Sep 29 19:01:29 2026 GMT
Subject: CN=cc89c3aaaa3cde3709c17644294bda733e786feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:6c:87:e8:97:99:ff:bb:23:04:f3:f3:47:
54:49:c1:9d:62:0b:24:a4:ce:9c:8d:57:a8:dd:7a:
a6:a2:f4:39:80:74:2b:bd:83:e4:5b:c6:f6:f1:43:
0c:32:e8:52:e1:e8:b9:b0:09:8e:52:d3:59:d4:a4:
bc:bb:56:fa:66:06:c4:0c:ff:80:ad:fa:c0:ce:6e:
3a:95:0e:c1:14:1d:a3:03:58:da:af:00:32:5d:c5:
12:42:f0:23:dc:2a:ae:4f:1b:38:e5:a1:f8:b6:6c:
c2:85:c1:c1:4c:6a:e0:e7:23:44:4e:08:f4:ab:cb:
f3:69:a1:80:6c:8c:a4:41:d0:a9:0f:80:54:77:80:
4f:4d:a7:7b:cf:f0:2a:ca:d0:fd:a4:a8:66:43:7d:
42:ad:1e:07:18:c3:78:5a:60:39:ce:45:18:40:05:
65:d7:ea:96:ff:68:4d:a3:f8:4d:2b:63:27:a9:d6:
2a:13:ae:6b:c1:1a:e5:96:db:de:ab:07:44:1e:90:
0d:3e:23:b9:62:80:31:25:2b:2e:26:1c:41:d5:20:
3f:10:72:38:62:57:db:a5:ea:53:db:62:22:30:6e:
2e:20:77:9d:71:67:3a:99:68:ee:1d:57:0d:d7:42:
81:02:27:86:a7:b2:10:6a:1e:4f:06:da:06:50:3d:
41:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:C3:AA:AA:3C:DE:37:09:C1:76:44:29:4B:DA:73:3E:78:6F:EB
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:56:cd:7a:10:44:46:fa:cc:aa:2d:9b:4e:89:f8:3c:40:
97:99:8b:fc:43:bc:34:77:f7:f2:cf:4f:bd:9c:6f:80:21:1d:
13:a0:f4:4c:68:9f:37:c6:ce:bd:00:7c:12:48:e0:05:86:51:
60:a5:5f:2e:07:eb:79:03:43:eb:69:31:ec:06:66:bd:a2:58:
59:80:f0:0a:45:7b:55:18:5d:29:ab:ef:1a:25:05:c6:45:b4:
0c:8d:fa:0f:0a:f3:e1:7b:79:a1:86:de:d8:11:d5:ed:c8:34:
86:fe:92:5d:13:30:6d:0a:bd:04:bb:14:dc:e6:90:7d:91:df:
f3:94:ca:09:1e:2c:c6:8e:55:5f:ca:de:c3:e8:e5:af:33:40:
5a:0f:35:21:23:3a:09:f2:f6:55:72:ff:87:27:c5:f5:ec:ae:
79:34:64:90:00:13:54:3c:53:c6:fe:c8:c2:3f:b1:c6:75:02:
95:ed:6f:bf:29:0e:d6:d9:c9:e5:b0:6e:b6:d1:24:4d:0f:fe:
dd:62:b1:d1:ca:99:e5:ae:66:23:50:2c:23:8b:46:ef:1b:0f:
de:c6:57:b9:2e:33:e6:a0:e6:53:b1:48:bf:c0:09:78:f9:68:
b9:2d:bb:d0:0b:38:84:7f:d4:b5:13:b5:3f:47:10:36:3b:db:
70:5e:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:16:40 2026 by rpki-client