Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: Pjewi+KRVlCNStmSc/HGCqg1l4tBqu60rCvF9MYFp4A=
Subject key identifier: A7:59:BF:FE:34:81:CC:0D:59:C1:1C:F1:EA:96:5E:9F:46:7C:B3:63
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019D29978AA19B7AD7D054EBC0807BD1D36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 11E9
Signing time: Thu 26 Mar 2026 10:01:30 +0000
Manifest this update: Thu 26 Mar 2026 10:01:30 +0000
Manifest next update: Fri 27 Mar 2026 10:01:30 +0000
Files and hashes: 1: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (hash: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: m7AY/cvqKcxS1vrLBRQGsprigIkenzDbw6wuCb+Mius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:8a:a1:9b:7a:d7:d0:54:eb:c0:80:7b:d1:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Mar 26 10:01:30 2026 GMT
Not After : Mar 27 10:01:30 2026 GMT
Subject: CN=a759bffe3481cc0d59c11cf1ea965e9f467cb363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:94:34:82:da:63:f6:ab:4d:62:12:58:91:
30:e4:71:d4:00:fc:12:2e:4d:b3:39:f5:19:37:f5:
c5:02:2c:57:b5:a7:d3:e9:73:45:8c:5a:a2:21:15:
8e:25:de:92:29:51:75:64:a9:7b:da:c9:ec:90:0d:
a0:e0:3b:c9:93:1c:50:0d:a3:ce:ff:33:39:0c:7f:
57:48:9e:70:c7:9e:45:db:ae:80:f2:2a:be:8d:fe:
cc:e1:2f:72:a8:54:9d:b4:bb:5c:6c:e6:a9:17:29:
ec:da:32:2a:1c:de:79:dd:5f:35:67:5c:c5:ba:19:
bf:60:29:8d:34:d2:6c:77:83:a2:92:07:c9:be:ea:
8b:34:d0:ce:65:8c:e4:ba:88:40:c7:80:ad:a8:a1:
09:9a:1e:a7:15:19:18:bc:38:02:89:65:ea:0a:ba:
b7:2b:34:4d:d1:58:29:08:ce:74:61:a8:0a:05:b8:
06:63:a7:89:21:cd:16:9c:be:1a:48:26:d7:dd:20:
37:f0:74:9a:05:91:a8:31:48:97:13:e8:e5:22:c1:
2d:bb:59:d5:75:36:9c:21:aa:eb:4b:f9:d5:b9:71:
75:1b:92:76:32:bc:2a:83:a4:8b:84:ab:53:88:c2:
7c:5a:39:08:27:ff:b6:01:a1:f2:4c:fa:b8:48:79:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:BF:FE:34:81:CC:0D:59:C1:1C:F1:EA:96:5E:9F:46:7C:B3:63
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:4b:31:8f:09:a9:1b:99:e9:10:a6:74:9b:18:23:54:6d:
c9:7e:46:c3:ce:6c:9a:7b:ec:f2:0a:29:59:66:fd:76:9f:70:
70:72:92:ea:76:05:6b:59:7c:1b:cc:91:6e:54:b2:95:57:78:
91:12:03:8e:82:42:60:47:5a:ce:d8:12:2d:a7:5d:cb:e1:6d:
a3:8d:c5:2d:a6:c4:8e:75:48:20:e0:a4:a8:61:fc:0b:57:59:
ab:89:c8:17:56:de:5d:60:a2:f2:90:31:6e:c8:7f:64:a2:4a:
ce:44:fd:44:a1:03:c6:7d:8d:72:1f:8f:f6:e8:fd:dd:09:00:
00:a8:82:65:ed:b7:6b:3f:f5:53:70:b1:11:36:d2:ae:a0:39:
31:d8:c7:53:71:b7:61:91:0b:04:1f:dc:33:43:81:83:56:88:
cf:09:29:f2:56:4e:eb:35:98:d5:51:33:a0:4c:a6:1e:e4:75:
48:a6:71:d8:a9:45:14:3e:96:2e:f6:94:e2:92:b1:27:de:ab:
38:94:00:d3:e3:bc:da:19:95:35:f0:83:75:8d:0d:db:b0:d8:
22:18:ca:02:90:f3:99:80:d3:c0:d0:76:58:a4:89:00:cf:be:
be:8c:bb:d2:75:6a:5e:95:d8:21:7c:d7:77:4a:99:6e:bc:81:
0b:fc:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:03 2026 by rpki-client