Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: 3gVGLSfBbBq2FsrVdwNIyzuvYMrsfQUN6BS01BPUDfM=
Subject key identifier: FE:F7:FF:29:EF:81:CE:52:00:72:1D:96:0C:83:96:7D:93:D4:3F:5F
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019F935B22ED9D98AD7407D03DB330FE1BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0CE1
Signing time: Fri 24 Jul 2026 09:00:51 +0000
Manifest this update: Fri 24 Jul 2026 09:00:51 +0000
Manifest next update: Sat 25 Jul 2026 09:00:51 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: hW4ZIDA/D/MuQpLXHJrbMfaS/N5bKW5zO+2uUDW+aFw=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:22:ed:9d:98:ad:74:07:d0:3d:b3:30:fe:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jul 24 09:00:51 2026 GMT
Not After : Jul 25 09:00:51 2026 GMT
Subject: CN=fef7ff29ef81ce5200721d960c83967d93d43f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:3c:0e:83:f1:c1:6d:0f:ea:e9:6c:ac:9c:
4a:3e:83:1a:64:14:07:d1:b4:60:37:74:12:61:1d:
49:71:ef:21:87:45:52:09:93:00:c8:9e:07:86:15:
8a:4b:5d:43:09:67:b8:3d:ca:a5:57:e2:47:fb:dd:
99:04:a9:7f:38:a8:9d:2b:03:a2:fa:6d:d8:d1:22:
40:17:b8:a3:5a:ad:da:fd:97:1a:ea:b0:30:f1:b5:
76:9c:a6:93:b5:cf:de:2d:f6:c2:87:fe:b9:b3:48:
b4:12:65:45:3f:27:03:0d:39:af:bb:26:3f:4d:9f:
91:3a:cb:18:8c:0b:57:2c:57:04:1d:09:5a:ae:0b:
bf:86:14:57:9d:c7:ec:65:53:17:45:00:9e:b3:5d:
eb:01:76:7b:e7:7e:60:29:4a:c6:10:12:7d:75:63:
d0:9a:b8:7b:e0:e9:f2:af:e3:42:5b:98:42:59:6d:
b4:bb:46:e0:59:24:ca:8f:8f:e9:0a:df:1c:c8:2b:
dd:fa:b6:11:f5:d4:6f:17:89:0f:5e:6c:70:7f:39:
27:5b:0c:c7:42:9e:d3:f8:31:bc:a5:04:3c:66:81:
44:42:a1:c2:b1:b4:58:a5:16:5e:41:d8:42:31:5c:
85:16:02:c9:35:7f:10:ed:68:43:55:dc:4a:9a:d9:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:FF:29:EF:81:CE:52:00:72:1D:96:0C:83:96:7D:93:D4:3F:5F
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9d:64:8a:1e:40:9b:7d:34:36:79:2a:f4:b0:55:63:f5:27:
30:04:02:1c:b8:56:ea:01:05:9e:ac:64:95:5b:68:80:79:45:
33:1d:f8:a8:35:39:ac:ec:e9:47:a7:bb:0f:86:a9:5c:db:9c:
b4:7d:4f:c2:46:81:8c:80:7a:9e:d9:5b:39:40:0d:82:75:92:
52:59:e1:b3:e0:6d:74:cd:d7:88:77:30:d5:88:f0:8f:2d:e2:
c0:6d:41:28:0a:05:0c:02:07:90:8e:5b:a1:0b:01:e3:90:3f:
6e:4e:32:a7:32:78:91:6b:73:8d:51:8e:5d:13:41:60:b4:fa:
26:98:24:99:40:bf:b2:d5:14:49:8e:b9:cb:ee:4b:60:10:08:
9d:2c:ef:82:85:d4:cc:27:a7:70:7f:07:f7:b4:3f:9d:bf:1a:
e1:02:8d:be:1d:13:27:eb:9a:81:58:aa:03:60:93:d4:dd:0f:
ad:38:c9:34:9f:56:d7:1b:d1:f3:1e:e3:82:13:34:37:62:3b:
c1:46:bf:2e:81:73:6f:09:61:6e:78:cc:f2:71:8a:3a:44:53:
72:f7:90:92:b2:df:ca:e2:8e:01:3e:e0:75:a0:92:fd:27:c1:
23:d5:fa:27:db:62:56:92:62:ae:42:dc:8d:cf:4c:b5:d5:db:
5c:d3:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:00 2026 by rpki-client