Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: ZXXgWVdbZ8DkAiod3Y37cva2MSd4uCDOVA32UZ7CnmQ=
Subject key identifier: 02:8E:0B:B7:1C:B2:1A:9B:B8:51:51:65:C5:0D:5E:E3:BF:53:0A:08
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01A0D5DEE44F03C1C8F6FC60663B1743A2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0D88
Signing time: Fri 25 Sep 2026 00:02:29 +0000
Manifest this update: Fri 25 Sep 2026 00:02:29 +0000
Manifest next update: Sat 26 Sep 2026 00:02:29 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: 8Q8N+uuFr1F30pXeECURhNHqJAkhP/XvuPXGcw1NBg4=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:e4:4f:03:c1:c8:f6:fc:60:66:3b:17:43:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Sep 25 00:02:29 2026 GMT
Not After : Sep 26 00:02:29 2026 GMT
Subject: CN=028e0bb71cb21a9bb8515165c50d5ee3bf530a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:45:7f:b5:c0:1c:10:cd:14:a4:ad:13:16:
ea:a5:a9:67:21:d3:08:58:59:ae:65:ee:31:64:ed:
c2:7c:1c:1e:4b:9e:97:9f:2c:15:7e:61:44:c1:44:
74:bb:db:06:92:20:97:95:48:3b:79:97:46:5f:60:
6c:8a:8f:8e:8f:83:e4:fb:c2:a1:b7:a8:4e:3a:8c:
96:9e:89:d1:ad:81:e0:4f:74:eb:eb:0c:35:f2:5e:
3e:b3:0b:ac:54:cc:6e:05:9f:45:81:e8:1b:98:d6:
3a:26:d1:bf:18:ec:06:43:82:cf:c0:34:d2:5c:e8:
53:1c:a1:a1:9c:f2:e4:49:51:a2:af:21:5e:15:d2:
91:3e:1b:d1:11:fb:24:1c:96:9d:ad:16:de:33:92:
0b:ce:a9:d4:59:e2:17:ba:40:88:13:dc:65:72:68:
83:cd:35:7c:82:c3:98:ca:59:f6:b9:75:d3:97:51:
2d:17:b3:47:43:7f:e9:6e:a4:37:c3:95:53:3f:1f:
44:0d:6e:c2:8f:13:89:e4:42:22:04:54:fd:8c:62:
38:f6:e3:f0:da:c6:87:58:65:54:e1:44:bc:71:45:
9d:2a:7d:be:ff:69:62:1b:19:59:f2:a1:0e:0f:37:
14:57:1d:f5:71:2b:3d:bb:7b:ef:33:11:2b:5b:4a:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:0B:B7:1C:B2:1A:9B:B8:51:51:65:C5:0D:5E:E3:BF:53:0A:08
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:2b:14:b0:34:4e:ea:5d:f0:26:e3:08:f2:9d:4e:d2:72:
23:5b:fb:d9:55:63:98:d7:bf:5c:7d:08:50:74:59:46:48:76:
e6:75:1c:b1:d9:c4:31:73:63:cc:20:f2:f6:26:49:1c:4e:47:
73:9e:2c:15:11:ea:e9:6f:eb:de:ac:f4:33:77:c2:f2:26:61:
48:21:89:05:da:9a:c9:ea:b1:50:b9:77:66:17:7a:3a:fb:6d:
ff:d1:b3:71:a9:01:8f:64:09:2f:69:d7:c1:a3:a4:6c:41:25:
6b:a1:6c:99:96:00:99:1e:44:78:57:2f:ac:1a:dc:bb:7e:cb:
b8:a4:16:b5:82:5f:48:b9:92:56:b8:d6:a0:55:e2:3f:96:4f:
0e:09:46:3a:32:3c:f1:c6:76:1f:4f:bf:98:6b:9f:a8:20:f6:
b1:20:13:83:74:97:46:a7:7b:a3:7a:b9:f8:95:7f:37:3f:05:
69:be:7e:02:e4:e5:cf:b4:ed:fa:9e:e2:89:e1:90:29:3f:e8:
16:75:8b:10:51:cb:9c:43:a9:a2:1d:be:1f:49:05:0a:01:c2:
6e:dd:82:b9:19:e9:69:8d:3c:3f:62:64:68:fc:f1:14:bd:23:
bd:fd:28:94:47:eb:f2:00:21:7f:1b:64:bc:6d:68:1d:8f:90:
9f:ec:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:21 2026 by rpki-client