Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: LbShSJkQreXhUDbzb5kesh7FqXTZUkkFriHOxkpsYO4=
Subject key identifier: EA:8F:FF:71:42:45:A0:9B:20:4D:99:FC:EE:0F:52:79:54:5B:5E:21
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019D39411AE9F3B920F496634D513288E22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: XjOsjbNyG_7Z0Y40E5Yh6TkZfqk.roa (hash: 9owU8FSQINO3lTfR9sqtsGohFZw4GCK7SpkPSGYFxPs=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: oJ/S2xuXZKzLSUDlj9rApLLoBBatC/EQXIcsxyrTZBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1a:e9:f3:b9:20:f4:96:63:4d:51:32:88:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=ea8fff714245a09b204d99fcee0f5279545b5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:1f:f8:8f:92:af:3f:da:fa:0f:b9:a9:cf:
c2:e4:01:93:cb:44:2f:51:59:8b:27:fd:4f:f7:11:
fa:b0:72:27:7d:77:ce:68:ae:da:ef:ea:5a:ef:0b:
1e:9f:b9:23:15:4d:f9:e5:08:a1:a5:21:bc:d1:4d:
1c:65:1f:81:34:14:f3:1a:e7:d5:6b:11:03:16:5f:
53:e1:3b:46:e9:49:4f:2e:1b:dd:8d:17:c8:4a:4e:
8e:08:fa:44:ff:fa:fb:00:06:a9:18:75:07:2a:fd:
a0:eb:a9:a7:c5:fa:b8:56:f3:3d:43:07:1c:42:56:
56:8f:78:cb:0b:9f:ee:89:d7:30:88:01:70:72:f3:
0e:5e:fb:32:3e:a4:e7:1d:81:78:8d:e5:2d:6a:32:
0e:97:89:22:72:a4:17:d1:bb:1c:f6:63:5e:77:a9:
6b:c3:44:d5:37:66:b4:43:0b:b0:ea:7a:99:ec:24:
4d:11:53:f7:ad:0f:4f:d1:79:88:3a:80:ea:40:da:
ef:d5:07:1e:23:48:1b:4a:0e:ad:cc:ae:71:49:a5:
32:d1:2e:1b:19:7f:15:be:e7:97:39:fd:b0:4c:60:
33:3b:e5:84:92:7a:34:6c:ce:1a:2f:b4:92:6d:80:
12:45:2e:58:3b:01:29:4a:4f:59:8b:57:57:31:d2:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8F:FF:71:42:45:A0:9B:20:4D:99:FC:EE:0F:52:79:54:5B:5E:21
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a6:cc:91:f3:32:d2:de:69:5a:f0:e1:48:04:68:0a:f1:c8:
59:3a:dc:8a:bf:54:91:f6:75:a2:86:1d:ff:a1:8f:21:07:85:
e9:f9:7b:b9:84:63:8e:cb:be:05:48:a8:cf:30:04:90:80:0e:
e5:93:c3:3d:7d:c5:17:34:45:a5:79:c4:34:28:a3:0b:95:e2:
f0:81:8e:1f:cf:b0:fd:20:67:0f:8d:ac:e9:45:75:3e:d8:e7:
ec:af:ed:54:49:0b:35:ef:83:78:5d:ad:a2:ed:fe:ee:e0:a0:
5e:d5:40:2a:34:7f:95:52:04:23:d5:b2:14:da:37:e3:13:71:
2c:d8:eb:7d:13:b2:b5:80:66:f5:aa:32:e5:21:9d:c1:58:91:
54:32:92:16:1f:26:c9:84:e0:59:57:3a:a2:ac:d0:92:48:5b:
b9:d5:0b:62:d3:1f:28:f8:15:6c:ed:8b:1f:f7:93:d2:10:f2:
58:85:e2:a0:a6:5b:ef:99:63:96:18:1a:e1:16:cd:2e:5e:8e:
c7:ce:2b:b1:8b:09:b3:6e:95:58:ce:25:ea:1a:bb:23:ff:18:
66:34:a0:01:4f:28:9a:73:c4:67:99:c6:89:81:d3:98:56:23:
c6:eb:20:dd:b9:ac:17:61:e2:bb:dd:ba:89:73:6d:bd:5d:f3:
52:d9:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:17 2026 by rpki-client