Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: Pq0TFKculZZAVK4wcJpiysnelDxKZbUUvDH36hf3t1E=
Subject key identifier: 0B:66:28:07:E8:A1:2D:F5:73:1A:72:97:99:6E:82:27:A7:02:65:F7
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 01A0C88F8EA0A3684FF920CEEB9EE6C4342B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 129D
Signing time: Tue 22 Sep 2026 10:00:46 +0000
Manifest this update: Tue 22 Sep 2026 10:00:46 +0000
Manifest next update: Wed 23 Sep 2026 10:00:46 +0000
Files and hashes: 1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: +EKLDS8+cZ78AabkuR2L0w/+4P2p6AMJA1iheDPQ3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:8e:a0:a3:68:4f:f9:20:ce:eb:9e:e6:c4:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Sep 22 10:00:46 2026 GMT
Not After : Sep 23 10:00:46 2026 GMT
Subject: CN=0b662807e8a12df5731a7297996e8227a70265f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:5e:ba:f5:19:e5:5f:a0:da:bd:19:85:9d:
cb:9b:36:2c:c7:b4:4c:26:38:88:c3:45:5b:6d:51:
18:ec:b1:fc:93:5f:be:e7:96:ca:60:4b:35:e6:03:
f4:d8:32:35:3f:cf:ab:e2:28:d5:81:54:04:87:31:
0b:01:b8:72:c1:fb:24:36:62:f6:79:82:3b:fa:0f:
71:88:b4:99:b9:f4:4f:fa:e0:0d:17:10:89:a1:cd:
ca:05:cc:2c:1c:fa:03:32:dc:08:84:3b:72:68:02:
77:3a:6c:c6:eb:a8:19:e8:df:43:78:9e:17:9b:66:
1b:67:a7:6a:88:4d:51:cf:4c:d3:97:9c:b3:fa:53:
90:ea:29:6c:a8:ec:30:cc:a5:b4:59:a8:5e:85:56:
3d:5f:0a:6f:89:a1:b1:8b:aa:e7:c9:38:93:5d:98:
67:97:2d:a8:71:0e:5d:de:37:48:04:ee:14:34:8c:
37:b6:0a:4e:6d:58:ec:69:4e:44:54:88:3f:b1:ce:
00:5d:e7:c2:fb:03:4f:ad:cd:af:ad:92:b6:d7:1d:
f0:f2:23:27:47:7b:60:f7:9d:a8:bd:57:f5:4d:34:
8d:dc:84:94:2d:2d:fe:cb:7b:87:f6:03:ad:ee:09:
91:2f:20:23:4b:46:49:a2:1a:c3:83:05:ad:63:3b:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:28:07:E8:A1:2D:F5:73:1A:72:97:99:6E:82:27:A7:02:65:F7
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b9:5f:07:80:eb:2c:de:8d:e4:61:fc:53:30:26:76:ce:f8:
6b:ae:e0:fc:7b:f7:fc:85:b0:ab:a4:ae:f7:ef:c6:dd:01:8d:
89:36:a8:e4:84:85:e0:8c:6d:78:6b:54:b7:78:4e:07:a2:f8:
ea:46:49:37:07:b0:d0:c4:d2:3b:9a:2d:79:6e:e5:cc:53:30:
91:66:49:56:0c:b9:e3:58:29:d8:58:29:2d:87:6f:c6:f3:56:
a2:12:ab:29:6c:3d:05:c5:70:e9:e2:f1:0f:9f:b4:df:6d:fc:
53:31:33:e0:35:44:9a:b4:00:71:ea:34:0f:f6:5d:87:0b:fe:
d9:e6:5a:0a:37:be:3f:0e:19:50:05:2a:b3:45:ff:f3:50:74:
c8:fe:af:ca:92:9d:2c:67:ed:a8:79:d4:b4:eb:11:0c:a2:35:
01:e6:4e:13:2a:7f:13:f1:53:53:8a:81:35:33:a8:e2:d3:fd:
81:84:d0:19:39:59:8a:78:1f:98:66:f9:81:4f:c3:72:3c:fd:
44:44:8f:12:39:41:56:ba:40:99:ca:92:62:ec:c6:96:e1:55:
da:94:27:8a:73:07:18:68:8b:d5:ba:b1:97:9e:9d:b6:0e:99:
21:30:e5:85:22:e8:a4:3c:2b:a2:f1:76:c6:19:d8:fa:a1:60:
2a:79:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:07:53 2026 by rpki-client