Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: 44+w6xKKlWAt8QjHMTiKAXnNUdeQjARL0EoUHQhvFmU=
Subject key identifier: 6E:74:4E:19:C0:03:75:40:90:0E:44:B6:E4:BD:98:74:D0:DD:05:FF
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019D371BCE7665A7097D4E40638ACBC4F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 11F0
Signing time: Sun 29 Mar 2026 01:01:02 +0000
Manifest this update: Sun 29 Mar 2026 01:01:02 +0000
Manifest next update: Mon 30 Mar 2026 01:01:02 +0000
Files and hashes: 1: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (hash: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: qac4wpXxxB6QRSODWblpdwLddw30Ju1XWwrlJLuUkHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ce:76:65:a7:09:7d:4e:40:63:8a:cb:c4:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Mar 29 01:01:02 2026 GMT
Not After : Mar 30 01:01:02 2026 GMT
Subject: CN=6e744e19c0037540900e44b6e4bd9874d0dd05ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:11:5d:ec:37:0f:cb:01:54:71:19:a7:b2:
27:a6:62:d5:37:d7:9c:71:e1:59:84:a5:5e:97:f6:
87:a5:23:7e:e9:e7:c0:c7:d6:c1:04:52:27:f6:26:
36:2a:80:58:71:c3:38:02:ef:c4:94:af:3f:64:bf:
24:36:94:1d:80:dc:89:f9:1e:78:8c:ef:c6:25:50:
84:d2:96:a8:c1:73:13:15:53:0a:dd:74:7a:69:30:
71:0c:d3:35:e6:11:b7:07:de:4e:7b:80:27:2a:2b:
c3:93:da:04:18:da:1a:d2:f4:70:f7:73:b7:01:42:
9a:33:8c:cc:c2:b8:b0:77:61:8e:df:90:fa:57:f5:
41:f1:c2:94:20:b0:a8:65:a6:b1:b9:d7:e5:de:3b:
da:34:c0:85:5e:28:4e:19:90:30:29:4d:2c:ea:b3:
7a:d9:5a:49:74:bb:4d:e7:9f:6b:7e:72:f1:99:83:
f4:e8:ea:3e:4d:d6:4f:10:54:9a:5a:ca:70:33:da:
6b:69:0e:e4:83:11:b0:80:4c:fa:a5:43:58:27:d4:
14:f9:52:54:f9:27:e6:1e:ec:cc:af:ee:b4:ba:fe:
d2:57:bc:4a:c4:4b:85:b4:e9:23:e4:1d:a2:ce:94:
1a:3a:9b:02:ec:73:9c:cd:e0:de:d1:c8:1b:ea:6f:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:4E:19:C0:03:75:40:90:0E:44:B6:E4:BD:98:74:D0:DD:05:FF
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:77:ff:1b:df:c1:55:66:ee:3e:f4:fd:9d:81:a3:57:fc:
fb:9f:81:22:ae:5d:f8:3d:40:be:65:17:0d:fe:c4:57:31:16:
d3:2a:40:cb:f5:1d:59:82:bb:63:68:dd:6a:7f:91:1d:6c:1d:
4a:7f:42:8c:92:29:58:e6:92:2e:d7:09:30:26:dd:eb:da:5c:
5f:53:6a:1a:94:9f:a0:1a:9b:16:d1:e1:35:cf:39:77:35:72:
a2:96:12:0e:22:71:f9:85:e6:2d:c1:19:15:08:ea:75:09:c5:
5d:a8:92:00:2f:d4:b6:5f:7b:31:79:24:ff:c7:dc:e8:cb:29:
ce:d1:b0:c1:22:cd:9f:48:97:e4:2f:fc:cb:30:c6:c4:05:a8:
88:88:af:4e:22:91:b1:64:6d:c9:a4:fa:4f:7e:c5:d3:9a:8e:
37:08:f5:18:f6:8c:8c:a9:11:75:f0:f0:c7:91:aa:28:d5:94:
39:6b:2c:42:03:e8:a5:6e:e4:03:ea:aa:3e:f7:7e:da:78:df:
7c:7e:c6:6f:08:a6:e6:ca:cb:7f:49:0b:d0:60:14:b4:78:10:
42:5b:a0:e2:bb:de:c5:40:c0:5f:b3:3c:13:30:9e:33:6f:be:
e2:19:cc:1c:e9:b4:28:8b:13:fe:ee:16:13:46:3a:9e:a1:cb:
a2:73:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:21 2026 by rpki-client