Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: zF9J5LpTK4Ot1C99YkzXucNoh0oSYGM4crI6wlV1scY=
Subject key identifier: 29:4E:1C:A5:70:AD:3F:59:D4:AF:28:F1:47:72:F8:CA:93:94:6C:D1
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 01A17C292E638493D07879F2D7443F025D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0B66
Signing time: Tue 27 Oct 2026 07:00:35 +0000
Manifest this update: Tue 27 Oct 2026 07:00:35 +0000
Manifest next update: Wed 28 Oct 2026 07:00:35 +0000
Files and hashes: 1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: Q95wZG4fwEmMP9KVyuCQx5pLwQUu1875teFfYaSNHI0=)
2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:2e:63:84:93:d0:78:79:f2:d7:44:3f:02:5d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Oct 27 07:00:35 2026 GMT
Not After : Oct 28 07:00:35 2026 GMT
Subject: CN=294e1ca570ad3f59d4af28f14772f8ca93946cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:55:36:a2:b4:96:84:3e:5c:75:fb:3b:81:
8a:75:52:4b:8a:99:da:fe:35:3f:2f:5c:0c:01:82:
1c:7b:96:62:6f:b7:e8:31:58:fc:d3:75:ad:10:5f:
56:ec:cd:37:24:74:30:17:66:5d:a9:4a:a0:a5:25:
d1:3b:d7:87:bd:d8:b3:ed:52:a4:11:ef:34:2b:cd:
ae:65:60:84:e4:1f:e6:3a:78:a5:79:1d:05:c0:08:
fa:fc:f3:90:ce:e7:95:78:33:ac:ca:99:d4:a8:81:
82:55:33:e5:43:4b:b8:28:09:c2:e1:fb:46:fe:3b:
df:d8:eb:ce:27:f9:97:2b:1a:fb:33:09:34:40:79:
fb:2f:e3:b2:98:61:fc:3f:70:15:cc:91:cc:dc:02:
d0:e7:45:8d:bc:ba:c5:48:75:1e:ee:b0:65:ea:0c:
77:96:2e:55:ed:61:e9:2c:25:54:15:b7:69:19:20:
d7:0c:c1:a2:9e:ef:0d:38:50:ab:f6:c5:4c:42:d1:
a4:f7:cb:d9:cb:48:77:0b:d4:4c:a3:f7:86:a6:2f:
79:d5:09:c2:0a:63:44:aa:55:23:c3:29:52:30:77:
8d:f6:53:1f:20:18:d6:ef:68:9c:0c:ab:83:8f:67:
be:77:4a:5a:65:59:ed:6a:af:12:2d:ad:f7:6d:54:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:1C:A5:70:AD:3F:59:D4:AF:28:F1:47:72:F8:CA:93:94:6C:D1
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:1c:08:eb:89:07:ef:74:b0:a9:98:30:7b:95:bc:18:2f:
07:29:cb:bf:f9:06:a3:9d:0c:13:2a:bb:bc:c6:49:2f:23:ae:
a2:a3:ad:9a:25:4c:fd:f8:4d:40:e7:ff:6c:68:be:c3:57:f9:
c4:56:23:8a:ac:ec:49:79:49:5a:ef:3c:4d:8b:0a:60:02:c7:
6c:07:25:2b:15:0b:cf:ce:82:ad:aa:45:d1:fe:cf:60:c3:63:
5c:94:f2:cc:bf:55:ce:3f:a1:94:f0:e9:12:b4:1d:8c:f3:8f:
f6:92:da:69:80:32:1e:0f:62:eb:e6:0e:88:66:db:d5:5f:fc:
6f:61:5c:df:89:67:60:31:a5:6b:8e:e4:c2:dd:85:c8:9d:3a:
44:64:d9:01:28:9a:6e:58:9e:8a:ff:7d:e5:c9:01:7a:05:e7:
67:38:23:aa:75:a0:93:f2:25:f0:5e:0e:57:c4:4d:6e:b3:16:
07:c1:76:97:a9:83:c5:50:89:7e:6c:dd:a5:f9:c5:3b:eb:e1:
3d:b5:ed:f1:90:14:47:15:21:8d:e9:e4:af:48:e5:2f:89:56:
0a:3f:e1:c3:08:aa:3d:21:e8:f6:54:09:b0:b4:62:eb:ac:e3:
c8:b5:a7:bb:c1:9f:b4:db:ac:65:28:11:65:7c:2f:c1:11:c0:
0e:8f:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:45 2026 by rpki-client