Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: AMGvtqgntwzR5qtDcN9sQjzvq+lvTaDF4Ua+XQaxX0g=
Subject key identifier: 3E:04:9C:16:0C:E4:5D:94:38:DF:35:FB:6C:FF:B4:A0:37:A4:AA:4F
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019D390A0A288B7E958FCE174E9EDB7B1016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0931
Signing time: Sun 29 Mar 2026 10:00:52 +0000
Manifest this update: Sun 29 Mar 2026 10:00:52 +0000
Manifest next update: Mon 30 Mar 2026 10:00:52 +0000
Files and hashes: 1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: yPeVtmhWphhPC/bba/VAR3YDtKoG33C80vF7eXNw6cs=)
2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0a:28:8b:7e:95:8f:ce:17:4e:9e:db:7b:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Mar 29 10:00:52 2026 GMT
Not After : Mar 30 10:00:52 2026 GMT
Subject: CN=3e049c160ce45d9438df35fb6cffb4a037a4aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:b3:7e:29:6f:12:90:7a:9e:c7:1d:ea:28:
c2:44:86:82:5f:19:1e:ed:93:84:93:73:66:de:98:
63:c0:53:f0:0d:56:38:b6:a9:76:3c:9e:af:1b:e2:
d8:5f:d9:9d:12:0f:56:2b:6f:80:15:67:2c:a6:12:
a0:5c:2e:43:f0:d2:d0:21:07:34:90:33:76:ce:60:
4d:5e:fa:33:9c:bb:69:a9:53:4e:6c:1e:3b:c3:8d:
4f:34:94:3e:05:f2:c2:81:70:71:0d:58:1a:cb:fe:
e4:65:d3:7f:96:dd:58:5c:87:6c:85:1a:3c:48:ef:
f5:27:76:ac:a9:05:17:a5:0e:ae:e0:fe:3d:da:7c:
6f:66:0e:89:57:5e:a8:75:e7:3d:22:95:fa:75:c1:
2c:96:32:2f:e2:34:21:6f:65:c2:d5:b4:f3:ae:93:
9c:89:9d:30:24:25:fa:2a:f5:cc:23:05:c2:40:2d:
ca:94:fc:05:f1:4d:95:f4:0e:11:9e:1a:eb:53:cd:
c8:ed:a5:c4:c7:df:2a:75:7f:07:d6:16:5a:2e:be:
c2:f7:d1:a2:5a:04:81:15:e2:7c:f3:87:fd:ac:ed:
2f:2d:c2:69:39:71:37:65:7f:6f:96:08:e9:88:c5:
4d:d8:a3:ef:ed:ec:63:ec:a5:02:ce:bd:f0:94:a8:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:9C:16:0C:E4:5D:94:38:DF:35:FB:6C:FF:B4:A0:37:A4:AA:4F
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:33:b3:1d:b2:5d:3e:ab:6e:76:be:d1:b2:fc:68:50:1b:
a1:82:1b:f1:c1:09:82:16:b6:29:3c:00:fc:ce:4a:77:f9:d8:
ab:99:c6:3f:4b:27:9a:1c:c6:34:36:0d:37:55:48:1a:7e:cb:
b0:ab:c2:20:00:e8:cb:c0:b0:18:b2:fe:49:03:2e:f6:9c:81:
a1:21:fa:5f:7f:4a:27:44:bb:7a:86:e6:a1:d8:b3:b5:1b:13:
ce:2e:eb:51:39:db:5d:d3:88:79:b2:10:89:7f:4f:1c:2b:8e:
3d:3c:23:ed:d3:c2:89:bc:07:8c:a1:e8:bc:20:db:91:11:78:
ff:84:40:6a:7f:ca:f9:5e:ee:cd:8f:0f:bc:b2:88:a4:30:40:
fe:2e:a9:5a:7d:22:7b:5e:e9:62:86:17:eb:ec:32:bc:06:e5:
78:62:2a:b3:d8:9e:23:2b:17:c4:b4:b3:d6:ea:21:d0:c2:75:
7e:37:36:5c:17:06:74:ff:36:78:8a:c4:42:8b:de:eb:28:d9:
a3:a5:8e:1a:b2:8c:36:de:a0:9c:2b:c2:78:f1:fb:29:d5:91:
5c:53:84:61:58:16:68:02:51:a4:6c:35:34:17:b3:08:26:ec:
69:00:34:c6:11:a0:34:68:b4:ec:72:61:6c:f1:af:1b:8f:2a:
a0:9a:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:51 2026 by rpki-client