Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: //ELaph2u9oNpgFGMe8sPdYSO/3gkqjCVX/oeemvRck=
Subject key identifier: AD:F2:DE:69:E2:0B:94:12:2E:8C:A2:3B:74:52:AF:95:B0:21:EE:89
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019E1EA3FBD1CFBAF6730E46B12779DFF9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0C20
Signing time: Wed 13 May 2026 00:02:03 +0000
Manifest this update: Wed 13 May 2026 00:02:03 +0000
Manifest next update: Thu 14 May 2026 00:02:03 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: FOYbSoej5Nu0WwYAE5/uGqhB+y/ohDnfBflAc5NKDH0=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:fb:d1:cf:ba:f6:73:0e:46:b1:27:79:df:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: May 13 00:02:03 2026 GMT
Not After : May 14 00:02:03 2026 GMT
Subject: CN=adf2de69e20b94122e8ca23b7452af95b021ee89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:4e:e7:87:f1:bc:ec:f5:96:33:47:49:13:
e4:b1:79:72:02:94:4f:0a:7b:f5:7b:9e:db:7a:c7:
44:15:ad:2a:6b:a2:53:7d:40:28:d0:61:f9:d6:d6:
3b:16:93:30:71:a8:d0:30:e7:f4:1f:31:1d:0f:64:
6d:9e:78:01:73:4c:7f:32:b9:4d:0e:17:b0:f5:36:
16:ca:8f:e0:43:82:77:6a:30:69:ba:49:e4:4d:59:
e4:ad:54:3b:67:de:26:69:9e:92:6e:16:73:04:fb:
8e:99:7e:e5:30:6f:4e:d8:78:63:52:64:e8:7f:47:
43:57:c8:6d:2b:92:cf:53:8e:13:37:44:65:88:f9:
7e:33:c5:bb:de:36:d4:2f:ed:df:92:36:4c:aa:0d:
e0:5b:cc:2c:df:d5:7e:3f:2b:5c:2f:1f:68:27:a8:
70:93:d0:dd:a6:48:3e:04:4b:89:95:6c:24:a3:c3:
33:b9:5c:62:72:09:cd:31:6b:d3:b3:7e:ec:ff:4c:
f3:7e:93:ad:72:81:ec:4a:84:cd:35:7d:2b:7b:ba:
39:10:4e:ec:27:d6:65:27:91:10:4c:0c:0b:6c:39:
30:40:c0:e1:0f:0d:c5:b9:d7:dc:fb:6f:be:a9:08:
59:d0:6a:0e:fb:b5:72:12:1f:24:e2:f2:74:75:ec:
f4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F2:DE:69:E2:0B:94:12:2E:8C:A2:3B:74:52:AF:95:B0:21:EE:89
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:a2:d6:db:ec:86:4f:dc:93:a1:2b:60:01:48:c0:16:5f:
5f:e2:5c:b7:18:08:89:2f:a8:50:9e:75:67:c5:57:4b:a2:b1:
34:a1:d1:61:d4:8e:1a:cd:a3:b3:07:48:c3:0a:fa:f0:3e:8d:
33:29:13:3d:e8:c7:ea:71:ce:03:26:89:62:c5:dd:6a:41:57:
66:14:70:63:82:37:7c:85:2b:bd:df:9c:62:b9:f1:5d:a6:ed:
3c:ea:45:68:68:5a:da:c4:fa:b3:9b:19:72:28:f7:f6:0d:66:
b4:55:e7:2d:a8:c2:5f:ef:1f:15:74:b5:90:27:e6:08:6a:8b:
ab:8e:b0:5e:d8:da:be:1e:ed:12:39:a8:ce:e6:e7:38:7c:44:
31:d3:48:1c:b7:83:bc:4f:29:d8:e5:db:58:1e:e4:d6:6f:1d:
b3:02:2e:9b:e9:97:af:c3:61:cf:31:46:aa:53:74:ae:c0:89:
02:ce:ca:b1:b6:4f:8b:da:14:69:57:30:3a:da:49:80:89:68:
d0:81:93:95:e1:99:ac:f6:00:9e:49:7b:c1:c0:c2:b4:70:0e:
4a:8f:3f:21:61:47:b8:43:b8:d6:c3:fd:02:23:b0:a8:d7:00:
a9:a2:6f:42:f6:fd:8b:dd:42:10:aa:64:21:bf:3d:47:51:a2:
17:a4:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:35 2026 by rpki-client