Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: kSgi3d881LiC63JpaQUa1rxB4MXUOZcDNdcMxReo1Es=
Subject key identifier: 05:5C:23:B2:14:E3:A4:FB:60:8D:BC:3D:A2:D7:C5:24:56:8D:A6:ED
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019D38D3D5075B26B6E7EC5E05A0BEA6B85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0BA9
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: DjCL4W37Sb9AShUNkGeN67En4WhkNxGDaLzgwGumO+Y=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d5:07:5b:26:b6:e7:ec:5e:05:a0:be:a6:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=055c23b214e3a4fb608dbc3da2d7c524568da6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:2e:dd:e2:5c:c3:8d:24:40:9e:d2:4b:32:
68:5c:c4:6d:47:ec:e8:9b:80:4d:91:90:31:ce:62:
78:bd:78:94:ca:f3:25:d0:a3:60:a5:5c:f0:0f:15:
9f:5e:b6:46:49:40:47:fd:d8:b1:a0:95:c7:13:7b:
d9:bb:9a:c0:f7:db:a9:b4:12:ed:b8:3a:3f:6f:7e:
2f:7f:3f:60:da:f0:31:77:88:5d:b3:54:cf:e6:18:
a3:0b:77:40:2a:d0:d6:7c:1f:8f:fa:e9:92:c0:0a:
d0:9c:4c:76:a6:a1:99:48:52:22:4a:d7:9a:95:31:
3b:ca:74:68:43:17:75:a4:29:6b:5f:68:64:39:6b:
36:ac:20:6d:b1:db:d7:1c:1d:28:d2:81:50:a2:c4:
c2:b9:ac:91:97:34:ba:d0:93:42:87:58:e2:f6:e1:
87:5c:c2:8f:b7:54:ea:91:1d:5f:e8:fb:fb:14:c2:
9d:20:f2:fa:82:2f:7c:21:3e:46:18:8d:d1:33:26:
3a:aa:19:b6:77:88:4b:9a:09:45:f0:dd:f3:09:d3:
71:87:a8:1b:f8:44:c5:1b:78:20:80:19:08:15:18:
23:34:ee:c9:b9:52:23:f6:0f:20:1d:d5:33:7a:de:
8a:6c:4e:26:bc:49:65:68:3c:fb:6c:5f:de:45:ea:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:23:B2:14:E3:A4:FB:60:8D:BC:3D:A2:D7:C5:24:56:8D:A6:ED
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:fa:ca:73:ca:82:55:5d:0c:49:ba:9a:3c:c9:06:08:7f:
3f:4f:41:2f:37:6f:1a:a0:8b:63:77:f5:4c:65:ad:ae:22:12:
e5:b7:76:92:8d:0f:5c:27:e0:9d:c4:57:13:a7:a8:1c:58:ce:
9b:0b:25:18:1e:06:10:12:da:02:90:4b:ea:ab:59:82:d2:55:
c5:51:cb:c6:b8:21:bd:07:75:68:d5:e8:3e:27:7b:94:5b:2b:
72:45:cb:ce:d2:de:16:7d:da:27:ff:74:dd:50:e4:90:33:00:
d1:28:fd:e3:09:71:8a:0a:bc:99:18:4c:98:83:69:0c:eb:93:
83:8a:91:ae:6a:a2:89:a7:c8:3c:06:db:3a:35:e3:2f:8f:6f:
4d:5b:2b:b4:0d:9a:7d:bd:31:be:b2:c3:a4:70:39:09:d9:2d:
14:46:4e:86:30:db:99:88:9a:bd:fc:a3:5a:06:f0:f0:8d:cc:
19:b0:15:15:39:c2:ce:19:73:5d:9a:34:0d:7f:ad:df:96:c9:
df:68:81:d0:37:8b:95:8d:b3:5d:1a:a0:9d:e4:85:1d:64:a8:
49:e6:5e:c6:29:b7:d6:48:0f:b6:9c:f3:1b:25:37:83:8d:52:
36:6e:a7:f8:54:82:76:71:e9:37:15:82:f2:fa:ca:75:aa:89:
ab:19:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:08 2026 by rpki-client