Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: E1L4eKpx8vcIjT1DIrW4lshAD5uR7DYbu7FXizM0UeE=
Subject key identifier: FC:0C:6D:69:B3:A6:10:62:89:70:ED:71:65:C9:39:59:33:83:AA:5F
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019D352CE523CD060C74046AA2B0E0A73F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 10C3
Signing time: Sat 28 Mar 2026 16:00:27 +0000
Manifest this update: Sat 28 Mar 2026 16:00:27 +0000
Manifest next update: Sun 29 Mar 2026 16:00:27 +0000
Files and hashes: 1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: kU0WMpxf8ABzlbCqvzDuVmygZS99zTuZZNIthr3tczw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2c:e5:23:cd:06:0c:74:04:6a:a2:b0:e0:a7:3f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Mar 28 16:00:27 2026 GMT
Not After : Mar 29 16:00:27 2026 GMT
Subject: CN=fc0c6d69b3a610628970ed7165c939593383aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b4:8c:29:f0:08:93:6a:9b:21:c2:14:62:ad:
bc:80:02:4a:a1:5f:c5:cc:37:ab:1f:0f:7d:e0:e4:
78:11:d5:ab:5b:e6:f9:2c:86:b5:bf:99:9c:2f:cb:
a3:fb:56:09:38:d3:54:97:dd:36:81:5f:8a:45:be:
37:3c:31:e5:51:6c:4c:e5:df:0a:e5:93:80:53:1a:
dc:96:ee:dd:02:0f:de:38:06:a1:e3:dc:06:b8:24:
1a:30:c3:d2:b1:a0:01:55:bd:6e:49:96:19:20:34:
98:f4:b9:ac:9b:96:ad:0e:f8:98:9d:2b:6c:5e:38:
db:a9:a6:89:99:d7:84:bf:af:b2:6c:34:c1:82:53:
09:6c:88:64:9f:68:56:6b:8b:b0:c3:8c:f9:d9:72:
5c:57:49:c2:fd:26:c1:a1:ac:c3:3f:3d:aa:71:b9:
35:d0:de:0f:54:76:a8:46:87:a4:77:05:04:d4:8e:
59:73:36:2b:c8:34:6e:25:15:db:3b:b4:ba:26:1b:
74:2d:71:fb:4a:e7:b6:13:e2:85:a4:70:83:1b:99:
e1:68:5f:f3:61:2a:c0:e7:ce:91:1d:02:5a:15:78:
b9:52:d6:ea:73:ca:36:78:4d:bc:af:c8:3a:f9:8c:
e8:ab:5b:0a:40:93:3f:3a:82:3f:57:1b:a6:73:5d:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:6D:69:B3:A6:10:62:89:70:ED:71:65:C9:39:59:33:83:AA:5F
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:fa:09:72:27:7b:40:78:6e:f0:08:3e:7c:6e:fd:a5:21:
1b:da:f3:e4:03:cc:bf:72:24:53:ff:1c:20:42:40:4d:10:25:
25:a5:67:7a:bb:5a:ab:c7:93:b9:34:8c:21:bf:1c:1d:5f:10:
68:47:8e:96:f3:4d:c2:97:ec:40:6f:88:00:d3:75:4a:29:a1:
fe:05:e0:ab:20:45:c7:c4:16:fc:be:55:09:eb:bd:9b:b0:05:
ff:47:5f:d0:a0:a4:ef:19:83:6d:8e:ff:dd:d9:c6:1b:51:fa:
42:f3:52:00:7e:61:d6:d6:ec:c4:90:6f:93:39:71:e5:0a:f8:
f4:a5:c0:2d:28:ea:1f:2a:ea:50:f2:aa:4d:24:3d:9a:ec:a8:
01:25:0e:10:b6:87:42:4b:cd:35:b6:bf:b0:d8:d5:bf:34:0a:
01:dd:4e:4b:88:cd:b9:8e:fd:20:f3:ad:e8:f1:e6:8f:87:cc:
da:4b:76:e9:16:78:3c:8f:1b:71:5f:2b:e4:b4:a7:16:ab:30:
bf:4a:58:2e:2f:7d:d1:9c:1c:cb:bc:74:06:ad:0d:55:a9:40:
fd:6f:37:24:a0:e2:7f:fd:e1:86:8a:8f:8a:a7:19:de:67:a1:
4b:d0:de:c2:10:e3:7d:8f:0e:8f:dd:d3:51:95:52:98:59:c2:
d7:7d:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:24:46 2026 by rpki-client