Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: 1EksZq8OU+UuW+oNK1sn+hBecY7ODJzq7Ymv4v0Aw04=
Subject key identifier: 72:E6:4B:9C:06:39:9C:51:07:AB:D3:15:99:3C:57:AD:75:1F:73:AA
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01A0D7CCCE0689F01D3AD45085ADC0F0ED76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0D89
Signing time: Fri 25 Sep 2026 09:01:58 +0000
Manifest this update: Fri 25 Sep 2026 09:01:58 +0000
Manifest next update: Sat 26 Sep 2026 09:01:58 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: TDzlejF3mqyVY8hiId3pouLhr84zjDGDM9MU2BG9vHA=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:ce:06:89:f0:1d:3a:d4:50:85:ad:c0:f0:ed:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Sep 25 09:01:58 2026 GMT
Not After : Sep 26 09:01:58 2026 GMT
Subject: CN=72e64b9c06399c5107abd315993c57ad751f73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:24:e6:64:c8:a3:bb:56:a4:03:d9:f2:9c:
77:7c:c1:c1:2f:2e:ff:23:be:f2:85:70:8f:6b:28:
76:e2:f3:5a:38:2a:9b:ff:8a:58:0b:ee:f7:c1:24:
fe:4e:e1:a0:a0:93:a8:22:37:22:34:7d:10:6c:cb:
87:34:02:25:92:22:15:68:c1:73:d1:51:19:38:2b:
12:fe:fb:09:f7:7a:e3:9c:15:79:96:5c:b9:9f:df:
bf:06:68:ea:f4:58:a4:5a:0f:ce:a9:e8:1c:be:ea:
34:b5:ca:fd:79:10:ad:ab:0b:d8:ce:af:19:6b:21:
85:ad:ea:f8:45:19:5e:10:c5:91:d2:c8:9b:a8:c9:
1f:a8:5c:e8:77:93:67:8b:3a:bb:02:26:fd:de:16:
59:79:91:eb:11:73:65:52:a3:bf:2f:03:67:5a:96:
8f:b4:3e:44:f9:a9:3b:8f:90:ae:e3:7c:92:49:9d:
36:39:75:b1:e3:d5:46:9f:0f:29:f6:87:a5:9d:2d:
f9:b5:f5:18:97:8d:28:a0:ca:ab:ff:10:2e:a4:f6:
a5:1b:4d:55:ca:db:0b:2a:59:ee:b0:5f:d4:65:bb:
79:8c:60:99:d9:c5:11:37:a2:9d:89:57:a2:9e:54:
45:1b:06:83:5e:27:aa:57:0b:9d:7b:40:38:fd:42:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E6:4B:9C:06:39:9C:51:07:AB:D3:15:99:3C:57:AD:75:1F:73:AA
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:08:4a:1e:fd:20:c9:30:0c:ac:ff:31:55:9a:7e:88:a7:0b:
0a:6f:00:30:c5:b5:9a:1d:23:f3:2b:8b:89:75:a7:4b:74:6a:
9e:3d:75:96:ac:0e:f9:76:99:a6:0a:ea:81:bf:c1:ab:65:ce:
40:37:f7:d4:fc:c5:8a:51:73:af:2d:ac:a1:d9:83:ec:e1:b7:
9a:00:ba:8c:6f:6c:33:b6:1d:aa:75:04:a6:c8:66:d6:c4:24:
7e:86:cf:26:53:51:f9:f7:d0:f6:e8:0b:ce:10:4c:d9:22:55:
8a:66:f8:56:c4:b8:0b:9c:64:2a:71:23:6b:19:b5:50:6f:e8:
1b:0f:d8:9f:46:f4:2b:6b:7a:5d:ad:bc:bc:7a:f3:b4:f3:f0:
34:74:ff:8c:dd:49:c1:e1:9d:73:85:54:a4:97:75:cf:95:72:
7d:eb:38:e3:db:81:3e:d4:be:42:dd:cf:8d:e8:b0:6d:db:f0:
30:97:dc:ce:a2:f4:5d:6d:c0:28:ad:55:ad:19:c5:03:f7:61:
71:2e:67:cb:a1:f3:cb:a7:9f:86:2c:f9:fb:c1:25:4b:97:f5:
03:6b:d9:82:79:e0:20:6b:08:8f:88:14:f6:68:2c:89:ef:c2:
c3:6b:fe:e8:7e:a7:ab:d5:cb:87:eb:22:f0:6c:d9:3b:75:18:
32:5c:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:36:49 2026 by rpki-client