Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: 1KZ8+wjEhw00CjTYnWgiAknuqOjFqcCvR39R0d33ke4=
Subject key identifier: 85:D1:DF:27:D8:E8:88:FE:6D:79:F4:46:A3:20:53:AC:DA:DC:77:A7
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019E20C83519E30E213E6AADD3891FD554A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 09A9
Signing time: Wed 13 May 2026 10:00:52 +0000
Manifest this update: Wed 13 May 2026 10:00:52 +0000
Manifest next update: Thu 14 May 2026 10:00:52 +0000
Files and hashes: 1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: EbrxEgI0zVgP9uB03Puc6MiVLW3TtSBp0j9dQ7nEoQU=)
2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:35:19:e3:0e:21:3e:6a:ad:d3:89:1f:d5:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: May 13 10:00:52 2026 GMT
Not After : May 14 10:00:52 2026 GMT
Subject: CN=85d1df27d8e888fe6d79f446a32053acdadc77a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:3d:3f:69:87:50:da:64:9f:8c:1b:52:62:
96:43:e2:30:c6:36:c9:60:1f:39:c0:ee:87:74:a6:
ed:64:ef:80:55:a8:49:84:be:97:51:1a:20:01:54:
85:2d:5d:22:74:f6:35:e4:67:e3:17:6a:51:d9:7a:
8b:04:b9:a9:2a:24:4d:20:3a:49:8e:c1:5d:27:8d:
dd:33:bc:ee:be:07:b1:9b:54:63:49:57:ad:a7:82:
7e:43:00:a3:9c:42:71:1d:ca:f7:04:9d:37:15:51:
dc:ae:15:fc:bc:b5:cc:18:2a:4f:b5:e4:48:52:04:
7a:c1:14:ae:f7:a6:64:28:31:f5:39:67:cf:11:37:
0a:17:a7:3d:86:72:42:55:4c:f7:34:dd:94:81:f8:
71:95:86:ba:f5:0f:ac:d0:89:d9:be:e7:3f:9b:48:
1e:ab:09:ea:13:4d:41:32:dd:82:8a:f3:0d:c0:d3:
0f:21:3d:9d:cb:98:b3:7f:35:fb:d4:05:6c:c8:74:
f3:fd:03:c8:30:f3:72:3e:a9:3a:3b:9f:74:24:18:
fa:18:8c:a9:38:fe:60:67:47:de:ee:ec:0e:d1:7d:
ee:62:4c:86:b2:b3:94:eb:00:c4:4a:50:7a:8e:d6:
e5:a4:4c:02:60:69:f1:bc:a0:4a:cd:a9:48:94:3c:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D1:DF:27:D8:E8:88:FE:6D:79:F4:46:A3:20:53:AC:DA:DC:77:A7
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:4d:df:a4:b6:3a:e7:d0:46:ea:c6:08:9c:6b:55:82:39:
0e:b2:65:1a:c9:74:dc:3f:74:d1:5f:32:9a:71:3b:80:39:21:
1b:2b:b1:39:d4:69:ea:4f:ed:68:18:91:55:0f:41:ca:ad:05:
5b:07:de:fe:54:db:79:36:18:76:2c:66:81:6a:a3:45:35:e0:
7a:77:eb:b5:10:72:a2:eb:b4:d9:33:9b:98:b9:37:f3:ff:de:
19:b1:d2:28:2a:19:90:5e:3f:f4:1f:6d:f1:b4:c1:ed:ad:70:
a4:92:8c:9d:dc:7b:fd:45:3c:a6:d4:16:97:b4:be:3c:11:a7:
61:fb:ed:6a:e4:6c:79:03:eb:74:cc:26:e8:d4:96:8d:cf:d5:
ac:ea:c3:74:57:b1:a6:d7:1e:7a:5f:49:d8:b9:c9:39:42:00:
b0:3d:c0:6b:b8:dc:df:4b:72:85:7b:92:a3:9c:c2:64:96:ad:
bf:6e:12:6a:b0:a6:92:c2:56:50:20:1c:b3:9b:ab:21:c0:ef:
83:a7:c9:be:3b:1c:74:09:f0:81:6c:8f:25:d1:bf:07:39:46:
54:d2:09:2a:73:50:6a:d6:e2:65:84:66:e0:2f:7e:c9:c2:d2:
a5:15:a7:f8:b3:7b:6e:bf:6d:6d:01:07:56:67:ab:61:9e:1a:
9e:49:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:30 2026 by rpki-client