
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: Gw1I7GZA/rV7ipIzsxBTP1fYAjWc0AX1g/b5xp1kS9k=
Subject key identifier: C0:70:3C:60:2A:4B:7C:DF:C4:ED:5E:F5:3F:0D:AC:A3:7B:22:86:96
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 01A0A001FD6480200E960AE6DAF6D21FE4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 1288
Signing time: Mon 14 Sep 2026 13:01:19 +0000
Manifest this update: Mon 14 Sep 2026 13:01:19 +0000
Manifest next update: Tue 15 Sep 2026 13:01:19 +0000
Files and hashes: 1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: bviS92l11gqgunyGu0RXERKeXqgEapVoSD3plDuYE1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:01:fd:64:80:20:0e:96:0a:e6:da:f6:d2:1f:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Sep 14 13:01:19 2026 GMT
Not After : Sep 15 13:01:19 2026 GMT
Subject: CN=c0703c602a4b7cdfc4ed5ef53f0daca37b228696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:42:dc:f2:2b:6d:86:ec:25:f7:b0:5e:26:
b9:82:54:13:22:e0:44:a3:59:6a:ae:ea:62:bd:87:
78:89:5d:14:de:55:51:10:39:d5:d6:c5:63:d0:82:
88:54:61:1e:12:a7:a4:a0:b9:bf:3b:29:ef:af:d5:
7d:27:f6:b1:7e:2e:84:39:a4:ef:36:ad:98:f3:8e:
84:81:c6:3d:84:a4:54:c5:1b:16:3d:6a:70:68:a5:
f1:21:43:ee:f2:ca:8e:f9:4b:eb:7e:18:22:ab:f1:
42:12:29:7c:45:79:3c:b5:d2:f4:06:40:4d:53:b2:
dd:51:a7:55:0e:52:03:58:b9:9d:aa:e4:3a:44:92:
a7:52:e9:38:e7:ac:65:3b:0d:ce:b6:52:14:b4:bf:
a2:03:33:f4:34:c7:ce:9f:21:41:92:aa:53:71:24:
96:2e:43:c6:1c:80:96:ad:c6:72:35:8e:5b:da:62:
e0:60:91:1e:62:b8:08:00:ee:60:fc:48:bf:98:29:
d3:7c:c6:42:c3:09:fe:3d:08:c5:ff:0f:ed:ed:ca:
af:58:dd:09:9a:0a:d6:1a:4f:97:19:11:81:a1:15:
d4:19:3d:95:3a:88:93:bf:7d:51:5e:3a:8c:20:48:
13:01:5c:cc:f5:23:d0:b1:c8:a2:35:2c:62:e7:18:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:3C:60:2A:4B:7C:DF:C4:ED:5E:F5:3F:0D:AC:A3:7B:22:86:96
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:f9:16:05:bd:00:02:eb:9f:30:a4:3f:01:8b:fb:ca:41:
b8:56:91:00:b0:b3:3e:a4:bb:05:10:e0:33:e2:40:6b:f7:40:
f0:57:8f:77:a8:ce:04:80:2e:a4:7e:38:a0:31:17:c0:00:18:
2d:2d:3d:dd:df:49:ba:8e:0f:60:16:01:8e:85:28:3b:31:7b:
28:5a:ee:22:57:03:27:f5:02:3b:3c:11:20:0f:f7:7d:07:cb:
0b:05:7c:e7:e8:e3:97:48:f2:4a:dd:34:b2:1c:18:1d:58:bb:
ff:32:22:53:c6:65:19:79:11:bb:bd:50:0d:49:82:8f:56:a6:
8b:93:d7:95:08:45:12:33:e5:9a:ad:b0:55:07:63:1b:f3:06:
2e:14:27:e0:5e:10:e6:eb:9f:8d:00:dc:03:35:00:e9:b1:89:
e3:e2:c4:0e:68:a6:eb:9f:0a:64:5e:43:fc:98:1b:57:46:72:
ef:5a:c1:29:c9:2a:d3:0d:11:0d:e7:92:f9:0b:eb:e1:f7:f0:
c9:82:23:d6:6d:7d:1b:a1:08:e7:88:73:49:d6:9d:e1:91:c7:
b0:09:51:26:5c:7a:17:b4:21:3a:1a:e8:2f:fd:15:ef:76:17:
57:dd:d2:e5:4b:03:42:56:06:ab:54:6b:b3:7c:62:9e:35:21:
9e:33:27:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCgAf1kgCAOlgrm2vbSH+TPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh
ZDNkZGQwHhcNMjYwOTE0MTMwMTE5WhcNMjYwOTE1MTMwMTE5WjAzMTEwLwYDVQQD
EyhjMDcwM2M2MDJhNGI3Y2RmYzRlZDVlZjUzZjBkYWNhMzdiMjI4Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9xC3PIrbYbsJfewXia5glQTIuBE
o1lqrupivYd4iV0U3lVREDnV1sVj0IKIVGEeEqekoLm/Oynvr9V9J/axfi6EOaTv
Nq2Y846EgcY9hKRUxRsWPWpwaKXxIUPu8sqO+Uvrfhgiq/FCEil8RXk8tdL0BkBN
U7LdUadVDlIDWLmdquQ6RJKnUuk456xlOw3OtlIUtL+iAzP0NMfOnyFBkqpTcSSW
LkPGHICWrcZyNY5b2mLgYJEeYrgIAO5g/Ei/mCnTfMZCwwn+PQjF/w/t7cqvWN0J
mgrWGk+XGRGBoRXUGT2VOoiTv31RXjqMIEgTAVzM9SPQsciiNSxi5xgQLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBwPGAqS3zfxO1e9T8NrKN7IoaWMB8GA1UdIwQY
MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt
NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl
LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqr5FgW9
AALrnzCkPwGL+8pBuFaRALCzPqS7BRDgM+JAa/dA8FePd6jOBIAupH44oDEXwAAY
LS093d9Juo4PYBYBjoUoOzF7KFruIlcDJ/UCOzwRIA/3fQfLCwV85+jjl0jySt00
shwYHVi7/zIiU8ZlGXkRu71QDUmCj1ami5PXlQhFEjPlmq2wVQdjG/MGLhQn4F4Q
5uufjQDcAzUA6bGJ4+LEDmim658KZF5D/JgbV0Zy71rBKckq0w0RDeeS+Qvr4ffw
yYIj1m19G6EI54hzSdad4ZHHsAlRJlx6F7QhOhroL/0V73YXV93S5UsDQlYGq1Rr
s3xinjUhnjMnmg==
-----END CERTIFICATE-----
Generated at Mon Sep 14 16:22:09 2026 by rpki-client