Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: F3yxLm2paix29lahuEX/LmSqoI0PXcTWivq1DNB3o5M=
Subject key identifier: 1B:33:07:80:7F:F8:8D:38:26:76:9F:B0:EE:4A:7D:89:35:3D:AB:FF
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01A06F83F968D8B7DCD3F1435823FA9AFF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0D53
Signing time: Sat 05 Sep 2026 03:01:54 +0000
Manifest this update: Sat 05 Sep 2026 03:01:54 +0000
Manifest next update: Sun 06 Sep 2026 03:01:54 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: t0kuYyUafFiwtPaJVINTx/HaCXnUEQ1ZpQgUhEK2c3g=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:f9:68:d8:b7:dc:d3:f1:43:58:23:fa:9a:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Sep 5 03:01:54 2026 GMT
Not After : Sep 6 03:01:54 2026 GMT
Subject: CN=1b3307807ff88d3826769fb0ee4a7d89353dabff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:8e:fa:c7:02:36:24:5a:c6:f3:4c:25:f0:
93:d6:76:99:b5:dc:bf:2c:45:ad:86:20:be:9c:d5:
61:f3:a2:97:6f:bd:5a:ee:5a:35:9d:0b:21:f2:9b:
e5:44:71:1f:c4:53:d1:41:3d:ad:99:89:9b:57:cb:
c1:c8:77:8f:0e:eb:31:43:cf:e5:75:f5:fc:67:e4:
d6:c1:cf:de:f3:68:a3:15:bc:08:5a:0f:4d:3b:7e:
8f:ca:2c:c1:59:63:a6:9e:5f:fe:d9:c1:21:37:2c:
bf:19:8e:a7:30:5b:75:52:f5:ec:ff:96:cd:cb:bd:
5f:94:b7:4f:e2:59:cf:24:6a:0e:89:e8:6d:3b:e9:
d4:e3:ff:0f:56:c4:e9:55:a2:7b:2d:a4:8d:fe:6f:
2f:bd:cc:35:76:06:7d:10:19:82:fe:f1:9d:49:4d:
c5:5b:0c:41:23:00:43:15:30:86:dc:7c:32:bf:d0:
62:e5:84:a9:92:76:80:c9:d0:7f:a9:c8:3c:ca:c9:
29:e9:37:0c:be:1d:4d:bb:15:28:a8:53:54:db:ad:
95:32:a5:61:0a:6f:46:74:6e:c6:be:00:06:c3:d0:
9e:f5:e2:fd:92:bb:9a:d9:12:11:b8:05:36:3d:e9:
41:6f:04:d1:4d:41:91:f8:f5:c9:56:cd:b7:ba:d6:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:33:07:80:7F:F8:8D:38:26:76:9F:B0:EE:4A:7D:89:35:3D:AB:FF
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d7:2c:6f:62:e4:38:d2:c2:3f:1c:4b:2c:35:13:44:98:ca:
4f:d9:89:1b:b2:7e:20:da:49:77:d7:c5:c1:f4:01:52:30:11:
80:92:11:b4:2f:16:82:f5:62:a7:6b:e2:1b:f4:77:91:06:a1:
a5:10:9e:f2:4f:89:77:78:f9:47:e9:ec:ee:8e:75:b2:b4:98:
1d:54:e7:98:2d:cf:28:52:02:a7:cb:13:08:08:9e:be:e9:48:
a7:23:8d:cc:01:68:cd:e2:e5:f5:60:5c:68:05:7d:1c:c9:6a:
1c:4f:63:20:4e:ae:7a:76:ce:ec:3f:23:12:37:1e:51:be:d4:
76:2c:79:f1:95:95:37:dc:09:d9:5b:5a:8b:01:dd:db:96:ea:
07:a6:53:0a:54:2b:3d:9f:76:91:66:1c:7f:bc:c4:99:2b:23:
36:87:5a:b7:4d:36:be:91:cb:9d:51:2f:69:c9:0c:71:54:9e:
53:d7:87:00:1e:46:15:ab:0a:ee:65:21:06:78:fc:c0:f3:a5:
3e:97:ff:ff:83:bd:63:b6:98:0a:9c:f6:17:e8:00:62:bd:e5:
95:0f:68:08:af:28:e6:fd:99:95:08:b3:e4:53:3c:76:78:34:
6f:e5:58:04:2c:85:1c:24:44:09:ac:c6:dd:85:15:9d:a5:89:
95:a4:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:21:38 2026 by rpki-client