Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: QC0pbP/LKvXqanrOPYcF/AyfS51UwQMh/qHhj7QaeoU=
Subject key identifier: 8A:12:01:F8:C1:C0:5F:B9:05:26:1A:4F:B1:90:74:36:C5:28:07:57
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019D25832E3B62323EF7808FBC845B069DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0B9F
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: LiAQfvlM5AjIcvP9qCS+RC34zQC/4ykOyZEQ0Py4Eac=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2e:3b:62:32:3e:f7:80:8f:bc:84:5b:06:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=8a1201f8c1c05fb905261a4fb1907436c5280757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:a9:98:e6:64:99:12:45:a0:ba:43:3c:54:
1d:c4:08:d8:b8:c4:f0:a1:b4:0c:14:b6:fb:e5:b1:
d1:fd:4c:89:1a:56:86:93:b2:c0:e4:17:0f:44:93:
2a:2e:58:5c:33:d7:f3:e4:18:0f:90:68:76:ae:a5:
96:68:a0:1f:7c:52:e2:83:17:9d:c5:59:80:d9:68:
6d:b5:35:f1:1f:de:a6:76:fe:a8:73:78:01:c2:44:
d2:c6:13:c3:84:07:b2:1c:78:4c:e9:90:8f:6e:d1:
ee:e2:72:c1:3f:72:43:90:8c:5b:32:9f:6a:0d:70:
fa:9a:58:a3:ca:3e:4c:ad:9b:e3:cd:70:63:05:63:
40:57:87:df:56:85:93:47:39:1f:65:4d:b9:99:ae:
94:71:08:e2:96:51:3b:8c:7d:7d:ed:f3:20:a7:91:
97:7c:f1:49:67:21:fb:44:99:17:bd:62:e0:4f:90:
00:19:2c:ff:a9:2f:4f:79:f7:b6:51:93:cc:f1:84:
47:fd:f1:8c:6b:08:55:2c:16:28:1a:bb:c5:06:49:
8c:aa:66:c1:97:5d:ea:75:a0:0e:e5:e9:8a:d3:57:
e4:75:7b:fa:4b:1c:49:a7:03:0a:d5:23:46:65:65:
0d:3f:1c:8a:19:1c:a1:40:bc:d4:65:c1:cd:18:dd:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:01:F8:C1:C0:5F:B9:05:26:1A:4F:B1:90:74:36:C5:28:07:57
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ab:cb:39:46:a5:f9:5b:24:2c:a7:c9:bd:f4:05:00:1e:2a:
8c:3f:09:36:e5:b8:1c:8c:a8:8c:24:a9:21:61:33:30:7b:c6:
c0:f4:65:0d:78:31:ab:52:be:2d:ab:7a:37:38:47:c9:e6:5b:
55:32:cd:ad:df:60:02:8b:80:72:9b:50:7c:79:0b:e3:80:c8:
ef:f3:11:44:d6:d7:6d:1e:8c:e7:e3:0b:e2:a9:f6:8b:1c:a8:
d8:b8:31:d1:e0:da:d1:ae:ed:8b:5d:cb:69:bf:83:f0:34:78:
9e:e2:b2:28:6e:98:40:1d:80:cd:6f:d0:dc:e9:65:6f:fc:ce:
fb:5f:c9:c4:14:ef:ab:09:b1:71:16:af:40:3f:0b:71:95:ca:
17:54:6b:ea:c0:88:29:2b:b0:10:85:41:50:e7:3a:a8:c2:40:
d2:4a:23:1c:c4:52:06:8e:91:b7:93:71:41:68:c7:43:31:b4:
e4:56:7e:07:f4:8f:8d:44:98:79:ec:ee:d9:d0:a7:0b:0e:01:
9d:5f:c1:89:88:bb:fe:01:e5:94:e6:32:59:85:0a:c2:9a:6b:
91:4d:23:39:02:52:47:ef:e2:ff:da:29:76:42:d3:cd:b2:34:
56:72:b5:a8:08:d3:1e:95:d0:2f:98:00:b9:7f:f8:24:54:5c:
c7:54:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:48 2026 by rpki-client