Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: wMTtCC2xYBlEE8I2VxCQ62Lj07jkHxtvKow5nDiyisc=
Subject key identifier: A4:EC:16:E3:D1:CD:CD:87:2C:46:D1:6A:E2:AC:66:C3:69:AA:09:8D
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019D99991F47E70809B35191152E6F66B753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0963
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: 2CRTQGOFOuHAdUMw0CnUDHZr4RvNTMgXFf2WL/KN/CY=)
2: qnWwXhhJcnVpMqzX0sS_LBIgc-Y.roa (hash: fSr8iYHzRyz3og2XeC386xHwKA+y9giY/k8ghEC9Tks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1f:47:e7:08:09:b3:51:91:15:2e:6f:66:b7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=a4ec16e3d1cdcd872c46d16ae2ac66c369aa098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:e2:1f:ee:b1:7f:32:fb:05:d2:b5:ba:ec:
32:e7:36:8e:96:e5:85:b2:c5:17:34:6c:4a:49:aa:
17:da:11:44:ba:29:94:9b:86:5e:b5:cb:66:45:ea:
da:48:ff:b0:94:12:1a:13:fe:ce:07:81:90:88:a3:
82:99:6c:84:af:a5:88:4a:9a:69:bd:72:e7:31:27:
10:cb:be:22:11:da:f8:18:72:b5:da:bf:36:d4:e8:
eb:fa:96:c9:3c:bc:ba:51:84:3f:d6:bc:b9:aa:e2:
f6:3c:30:3b:5c:a0:8f:59:93:d1:1c:ca:69:ca:a1:
e5:92:96:07:54:42:a1:55:c8:08:9e:93:a4:6e:fe:
23:d9:3f:fa:21:d3:5d:d5:fb:43:2a:81:0d:a0:30:
42:eb:82:4a:33:81:2d:22:d3:08:3c:44:37:48:16:
de:33:95:83:07:2a:c6:c0:6d:2e:9c:b6:cf:21:d4:
bd:2f:94:fa:33:76:af:f3:3a:60:51:cb:a9:5f:e3:
ea:09:bc:ee:ce:12:0a:23:1b:5b:0e:4d:f5:fb:24:
c7:dc:0a:ae:08:a8:68:50:06:fa:f4:e1:f3:33:a0:
16:ac:f6:a7:6f:33:ef:d0:dc:d4:19:b7:85:96:48:
6b:d4:ae:29:9f:f2:66:8c:40:db:40:9f:c4:0a:b4:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:16:E3:D1:CD:CD:87:2C:46:D1:6A:E2:AC:66:C3:69:AA:09:8D
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:16:a2:1c:8f:93:ce:70:86:74:cc:9f:7e:47:b9:26:bf:23:
05:2c:51:62:2b:d4:e1:a8:a8:9c:fc:ee:47:4d:a5:77:59:61:
c4:7c:a1:51:76:45:a7:30:e7:00:80:22:1c:73:79:0f:66:6f:
cc:79:42:42:16:cb:71:49:cf:86:6f:75:dd:36:89:5d:4c:9e:
9e:ba:09:5f:3f:a0:ae:fb:37:7a:32:b4:e7:0f:7b:0d:0e:51:
23:16:70:ce:da:bb:02:b7:e9:4c:a0:ae:df:b0:42:73:74:a2:
63:c8:14:c6:ad:2c:2d:4d:75:44:1f:38:8b:9f:a1:12:1d:db:
aa:bf:ae:46:1b:ed:73:86:d0:67:08:f2:b9:bf:80:cf:c7:b8:
39:3e:97:18:35:4a:16:02:70:ac:cd:13:8f:2b:3a:67:98:2d:
46:0e:2b:f1:85:e1:b4:fb:52:07:f7:20:c2:4d:2f:f1:f7:96:
7d:b0:be:67:9b:85:dc:4e:12:3d:8b:f0:31:4c:14:86:76:a5:
e7:8a:37:0e:12:b8:82:f7:a9:3c:31:92:f7:a3:61:02:48:ec:
bf:48:8e:06:46:e1:81:6a:70:34:bb:5c:17:bf:5e:0e:e7:25:
8b:5e:e6:d3:58:a4:41:d2:97:11:a7:b6:5a:87:b1:19:a3:8c:
76:5f:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:01 2026 by rpki-client