Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json)
Hash identifier: +Iuyb66wIjsboO0h27U8XZDN7Etgt3XS0cwC8SDeU+M=
Subject key identifier: 22:1B:D5:DB:8D:CF:A1:8E:D9:12:9B:0C:2D:C6:35:02:E4:A6:96:90
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 019D99992D2596167FCB2F50F4A6D3517C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
Manifest number: 10F7
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: SOgy0vaXDl1qIul-YuWcMXoxFHQ.roa (hash: lN/H+O4i/rNCySyb7U2rIk9cEQw6Mc4Ga+W5WUeEoKk=)
2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: PRJXQYZoCMq8rMNVQq6+sM3zYM4X2b/6ajxv0EHmQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2d:25:96:16:7f:cb:2f:50:f4:a6:d3:51:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=221bd5db8dcfa18ed9129b0c2dc63502e4a69690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:be:0c:75:14:17:ac:92:f3:f5:3a:4d:5a:
96:ef:cf:7f:3c:9b:3e:80:ed:94:95:fd:61:26:ad:
80:d5:52:c9:2c:b5:a3:de:86:10:7f:ab:48:3c:7b:
5c:9a:e3:b2:d0:ce:35:5b:0f:08:e2:d3:65:24:10:
b6:cf:ff:39:c3:4e:03:1a:a0:62:88:0b:ac:3d:89:
57:82:5f:9b:e4:75:8b:0e:0d:53:d2:07:ee:0f:69:
d6:a3:1c:9e:39:43:81:16:ae:24:6f:44:ca:e6:77:
f2:5e:dd:81:fa:1a:83:18:dc:10:1e:0c:d7:db:06:
a7:07:eb:77:49:98:74:61:67:0e:e0:73:58:ee:24:
77:ad:9b:38:f5:cf:03:30:af:d6:b0:96:eb:33:25:
09:d6:5a:38:d6:83:94:7a:94:b0:99:b7:7c:91:fb:
58:4e:95:d9:b0:e9:4b:eb:cc:7e:6e:97:5f:00:84:
e5:7a:b3:dc:45:64:91:fd:0d:2d:56:32:50:1a:a4:
9f:6c:a0:0a:31:df:50:79:92:e7:d2:0c:9c:e2:97:
fd:27:b1:0e:52:56:7b:33:44:eb:b9:87:ce:cc:ff:
ca:1c:cb:3d:13:29:96:2f:e1:e5:7e:52:26:4e:b2:
ca:74:89:a0:cd:c5:84:1f:b8:7d:3d:72:0f:29:94:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:D5:DB:8D:CF:A1:8E:D9:12:9B:0C:2D:C6:35:02:E4:A6:96:90
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:30:3f:12:a5:56:bb:bf:58:19:55:6d:ae:1a:e2:1e:32:
83:49:41:fb:b3:1d:71:e2:d5:a7:af:32:f9:60:39:ec:b1:9c:
1d:ff:73:c5:1e:4e:93:6d:bb:2d:c6:79:66:39:fe:79:ee:6d:
de:65:a4:38:a7:b6:b7:9c:00:88:93:8c:4c:0f:2c:cc:56:67:
1c:81:82:d0:e7:75:35:e6:96:4c:51:1a:f0:68:4c:ae:8a:0f:
1d:48:b7:40:55:28:6a:34:b3:4f:b5:b3:cb:ce:4e:51:d8:2b:
ed:ac:b9:bb:e0:2b:45:91:98:0f:21:18:0e:e1:35:fc:d4:50:
31:b1:94:ff:79:44:f6:ed:21:3c:7a:a2:39:e8:b2:86:17:a4:
13:5c:9c:66:e2:4f:9f:f1:fc:86:67:21:45:54:a7:cd:3d:08:
ae:d3:57:d4:b7:91:fb:b6:df:57:f5:f7:d7:eb:69:6d:19:4a:
c3:ed:30:8e:2f:04:78:54:56:ea:17:0e:71:0c:91:d1:2f:80:
12:53:5e:ec:8e:f4:f7:6d:9b:e7:d7:f2:1d:d1:b5:46:13:9e:
52:18:c2:d9:c2:2e:63:44:21:b9:74:a0:f7:e5:98:eb:05:5b:
f4:e4:55:c8:0b:20:4d:1e:ae:8e:8e:fd:30:a9:34:2a:8f:97:
a0:77:f8:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmS0llhZ/yy9Q9KbTUXxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh
ZDNkZGQwHhcNMjYwNDE3MDQwMDQ1WhcNMjYwNDE4MDQwMDQ1WjAzMTEwLwYDVQQD
EygyMjFiZDVkYjhkY2ZhMThlZDkxMjliMGMyZGM2MzUwMmU0YTY5NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZy+DHUUF6yS8/U6TVqW789/PJs+
gO2Ulf1hJq2A1VLJLLWj3oYQf6tIPHtcmuOy0M41Ww8I4tNlJBC2z/85w04DGqBi
iAusPYlXgl+b5HWLDg1T0gfuD2nWoxyeOUOBFq4kb0TK5nfyXt2B+hqDGNwQHgzX
2wanB+t3SZh0YWcO4HNY7iR3rZs49c8DMK/WsJbrMyUJ1lo41oOUepSwmbd8kftY
TpXZsOlL68x+bpdfAITlerPcRWSR/Q0tVjJQGqSfbKAKMd9QeZLn0gyc4pf9J7EO
UlZ7M0TruYfOzP/KHMs9EymWL+HlflImTrLKdImgzcWEH7h9PXIPKZRD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIb1duNz6GO2RKbDC3GNQLkppaQMB8GA1UdIwQY
MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt
NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl
LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLUwPxKl
Vru/WBlVba4a4h4yg0lB+7MdceLVp68y+WA57LGcHf9zxR5Ok227LcZ5Zjn+ee5t
3mWkOKe2t5wAiJOMTA8szFZnHIGC0Od1NeaWTFEa8GhMrooPHUi3QFUoajSzT7Wz
y85OUdgr7ay5u+ArRZGYDyEYDuE1/NRQMbGU/3lE9u0hPHqiOeiyhhekE1ycZuJP
n/H8hmchRVSnzT0IrtNX1LeR+7bfV/X31+tpbRlKw+0wji8EeFRW6hcOcQyR0S+A
ElNe7I70922b59fyHdG1RhOeUhjC2cIuY0QhuXSg9+WY6wVb9ORVyAsgTR6ujo79
MKk0Ko+XoHf4Gw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:21 2026 by rpki-client