Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: hJzsU+4mnFmVIi5bDTbr1YbCBxCBrfq2FrkjGKgIvjw=
Subject key identifier: F1:A9:50:6F:9D:38:AD:F0:42:E0:AC:61:75:CC:D0:96:F4:FD:92:B7
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019F85D6B0E6B945B28BE9EDB587D02E4ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0CDA
Signing time: Tue 21 Jul 2026 18:01:07 +0000
Manifest this update: Tue 21 Jul 2026 18:01:07 +0000
Manifest next update: Wed 22 Jul 2026 18:01:07 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: U0bDAQM/BlaCBGM7ChDlAiCkBJ9EYJkzxmi+Gt/1p4E=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:b0:e6:b9:45:b2:8b:e9:ed:b5:87:d0:2e:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Jul 21 18:01:07 2026 GMT
Not After : Jul 22 18:01:07 2026 GMT
Subject: CN=f1a9506f9d38adf042e0ac6175ccd096f4fd92b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:92:c8:3e:0d:f4:3a:f0:a5:d4:c8:0f:9d:
fc:80:16:d7:7e:46:04:ff:a0:96:1f:ce:ad:13:43:
b7:73:a9:99:26:a8:01:9a:91:d9:d7:c7:04:75:96:
81:0a:40:90:5b:7a:20:54:24:75:8a:7e:de:7f:d0:
2a:e4:1b:a1:57:a2:9c:6a:fa:89:bb:7e:ea:51:b0:
d5:a2:02:8d:31:8d:a8:18:65:3b:ca:ff:4f:4d:60:
03:c7:fe:e5:af:32:9e:80:34:24:85:44:94:f8:4d:
ab:39:5d:91:e3:e4:5c:56:28:df:05:fe:e4:cf:ba:
e7:ea:95:c8:65:a7:c7:75:5e:60:56:30:35:2d:9d:
23:a9:58:56:e5:e3:a2:4a:28:33:77:d5:a9:f0:06:
61:04:9b:3b:ed:ed:5b:b6:2f:9b:f8:4c:0e:e9:55:
53:43:1c:06:ad:41:e2:01:71:9e:18:54:b0:61:a6:
40:2b:03:45:28:d0:d1:57:4d:9f:75:70:5f:93:d7:
ec:8b:7f:f9:70:73:b6:47:ea:6c:59:ac:0b:94:8c:
a4:45:0b:f9:d6:83:53:b3:47:4c:34:77:85:97:e8:
15:df:bf:b6:3a:2a:9a:41:d5:3c:ce:e6:05:9b:6e:
d3:a0:75:92:7f:08:74:ff:d2:b0:73:52:d3:38:de:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:50:6F:9D:38:AD:F0:42:E0:AC:61:75:CC:D0:96:F4:FD:92:B7
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:0c:60:b9:2c:f0:34:3f:bf:27:ac:17:60:a6:44:15:a5:
8f:73:0d:f4:48:53:36:99:e7:d4:ab:c5:4f:0c:35:82:3b:e5:
41:29:3c:d8:7e:0c:5c:02:30:63:26:5b:1f:40:39:cf:23:f5:
4b:35:cb:b9:29:84:94:3d:d5:ed:c1:22:8f:ae:ab:42:7d:92:
99:1e:e9:e7:4d:72:a7:e1:d8:00:bd:ab:7a:b4:ab:ed:84:1b:
b1:3b:d8:76:85:c2:ae:80:c5:1c:5f:a2:3e:6a:39:91:eb:31:
a1:c5:33:64:dc:2f:c2:3f:0c:09:2c:c0:a1:df:c6:1c:a8:3f:
9a:af:08:d0:19:7c:9f:a8:92:4d:b5:b2:21:e3:70:86:c6:8d:
8d:4d:4d:42:9e:1e:8e:ec:1a:f0:b2:cf:b7:23:a8:16:a9:5c:
56:51:1b:d3:10:df:02:8a:31:99:d4:b6:67:af:bb:f9:a1:ae:
f5:65:ea:b1:00:64:84:73:5b:9f:1e:af:56:50:e6:0e:47:33:
7b:45:57:c5:c0:07:8f:04:f8:86:3d:1a:05:b8:7d:8b:ed:3f:
d8:69:00:f3:68:73:e3:65:a0:46:57:98:ba:02:12:ce:94:27:
84:dc:8e:32:2d:a9:83:90:e8:56:d2:f5:2e:51:b0:54:26:3e:
b8:c7:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:43:10 2026 by rpki-client