Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: oNd4xZ6QPwv2ongHX8NEhfEDRq+eD88JKsDqdJDap0k=
Subject key identifier: 12:B8:78:F7:94:B5:F2:60:42:8A:00:D4:5E:EB:EA:98:CF:D4:8F:44
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01A1724ACAB0F4D1D7A2F6C11EE088AD9418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0DD9
Signing time: Sun 25 Oct 2026 09:01:06 +0000
Manifest this update: Sun 25 Oct 2026 09:01:06 +0000
Manifest next update: Mon 26 Oct 2026 09:01:06 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: 6Mzpfrm6XsUFD6jdWZrqy37DrwAFQpFwxA1gZP/592A=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:ca:b0:f4:d1:d7:a2:f6:c1:1e:e0:88:ad:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Oct 25 09:01:06 2026 GMT
Not After : Oct 26 09:01:06 2026 GMT
Subject: CN=12b878f794b5f260428a00d45eebea98cfd48f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:e1:af:dc:f4:c9:e4:0d:98:b7:aa:c5:39:
03:8e:85:9f:0f:98:f3:66:7e:97:36:04:5d:a3:6c:
53:81:08:95:59:40:a6:9d:34:14:83:80:d8:52:5d:
74:68:bd:a6:ef:cb:9e:24:9a:3a:91:14:a4:ea:90:
cc:9a:28:e8:62:6b:c0:dc:9a:a9:81:75:6e:1a:7d:
6e:a9:b4:d9:35:36:9a:7c:71:21:c4:53:63:98:d1:
32:a7:ac:ce:a5:3c:9a:2f:69:f9:91:39:cc:6b:1a:
36:6e:dc:2e:24:f7:2a:ca:d7:5d:85:a0:4d:a7:aa:
5a:b9:f4:c1:fc:21:16:8a:ce:a3:4f:cc:84:1b:3d:
01:0f:9e:0e:cb:98:d4:93:bd:89:3a:ab:c8:86:4f:
9e:2c:73:50:93:4a:a1:2f:e6:66:d2:02:70:ec:fb:
95:e5:fb:7f:15:32:0b:77:7e:16:34:27:ce:f0:9b:
f0:18:9f:93:41:f0:8f:e7:0d:55:bc:dc:54:15:d7:
a7:63:95:56:0f:00:df:80:ed:2c:69:b3:1a:14:66:
4c:2a:82:9a:b4:6b:43:58:fc:ae:8a:05:83:50:b2:
b1:a5:63:36:49:b8:93:b4:47:45:de:51:0c:54:39:
f7:83:cd:ed:f1:ca:1a:c5:e6:34:78:6a:50:a8:47:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:78:F7:94:B5:F2:60:42:8A:00:D4:5E:EB:EA:98:CF:D4:8F:44
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:0e:71:e7:ad:37:41:7d:28:bb:a0:9d:73:54:25:c6:b2:
01:9b:9b:8d:17:3a:f9:77:3a:56:03:ba:c0:f8:84:40:ca:bf:
a0:65:85:15:bf:f2:fe:a1:33:40:9e:a7:8e:d8:6c:36:a1:d3:
b9:c8:32:81:9d:fd:77:38:64:17:0d:63:0f:0d:9e:91:d2:41:
36:f6:42:d2:e3:ef:a7:ef:7e:9b:6b:c4:41:80:11:b2:a9:25:
44:4e:1c:23:1c:2d:c3:f9:2c:f0:3f:0d:ed:03:42:aa:50:5c:
15:70:f3:4a:87:a6:6d:65:73:54:9b:f6:b1:36:6d:8d:13:44:
a7:a5:37:84:1d:49:54:47:65:b5:6d:3f:c6:74:82:05:c6:d7:
42:a7:0a:f7:e5:bb:03:6b:57:1a:bb:18:b4:20:19:40:c5:37:
0a:2c:24:ec:d7:40:f0:f7:19:14:4e:38:71:fd:19:a0:e2:f3:
ba:8a:c5:3a:62:ae:91:38:14:3e:94:b8:1e:7a:34:d6:d5:7d:
55:7c:8e:33:1d:36:f5:ce:33:ba:ce:67:98:03:b8:f3:87:0c:
c9:63:ed:da:7f:78:6d:d8:b2:9e:66:c1:e7:c3:2a:94:9a:80:
70:05:30:6b:8e:16:43:12:3c:a2:6e:a3:67:12:48:ab:ad:0d:
81:5f:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:54 2026 by rpki-client