Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: s1uLquNR/yDI+96TywoHcqxVYSPZAz3J8CVlsJGe7PA=
Subject key identifier: 85:52:82:5C:46:C7:43:CE:71:69:17:69:04:41:4C:CA:08:C8:FC:7A
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019D9962BAFB01C36B5DF118BA2AEBA531A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0BDB
Signing time: Fri 17 Apr 2026 03:01:17 +0000
Manifest this update: Fri 17 Apr 2026 03:01:17 +0000
Manifest next update: Sat 18 Apr 2026 03:01:17 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: YocZaIEqAEqE4m8w2e2N3hhrJOhXkYcCcsacnD/4f7c=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ba:fb:01:c3:6b:5d:f1:18:ba:2a:eb:a5:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Apr 17 03:01:17 2026 GMT
Not After : Apr 18 03:01:17 2026 GMT
Subject: CN=8552825c46c743ce7169176904414cca08c8fc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a9:40:d4:86:bb:49:70:29:37:98:24:68:8f:
c3:7d:16:6d:01:39:54:f6:f1:1a:d0:52:51:5c:59:
fe:aa:d4:37:d5:96:bb:9e:cc:37:00:9b:8a:02:bf:
21:9a:c0:b3:39:8a:ee:dd:0f:66:e6:83:db:75:74:
a2:f9:d2:10:67:1b:a5:5e:85:1f:18:aa:df:d2:07:
c0:47:68:61:63:a8:ec:a9:55:ab:98:ec:d4:a6:06:
fd:6d:58:ee:44:92:b5:ce:58:1c:22:4f:ac:5b:d0:
2a:b8:bb:a1:8a:5b:ca:fe:b2:9b:7e:d1:69:ab:64:
a1:93:af:65:66:73:5f:e3:e0:40:b9:86:38:2c:ee:
fc:4a:03:0e:58:72:18:af:36:b0:46:a6:00:9c:fc:
86:0c:0e:78:81:9c:b3:b4:3a:65:f4:61:60:24:c9:
db:13:c5:b8:ab:b8:38:aa:e1:84:da:ec:93:a5:8a:
40:e5:f1:ca:20:92:6c:f5:34:05:0c:52:9a:11:04:
71:93:31:66:39:06:b2:61:04:2d:45:bb:98:5e:c7:
27:54:58:cd:00:d8:cc:9f:da:78:f1:10:7e:f2:b8:
85:6a:b8:69:d7:88:e4:2a:7c:40:e9:e7:d4:0c:d9:
e7:ec:0d:e0:76:a0:e8:5a:d3:3b:28:98:8b:34:5f:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:82:5C:46:C7:43:CE:71:69:17:69:04:41:4C:CA:08:C8:FC:7A
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:75:0a:d4:8f:85:5f:b9:92:92:20:7a:36:cc:0b:d6:d8:
14:d1:34:45:79:07:56:5d:36:66:ab:19:e5:0a:77:b5:98:65:
45:ca:58:74:ee:f7:f5:df:fb:98:51:02:c2:ab:b1:63:0e:00:
78:29:8f:96:ef:b9:9d:9a:0c:0d:21:f1:dd:32:64:5f:2d:55:
49:44:e5:5d:9b:c4:f6:bb:44:f8:32:94:5d:82:0f:ed:2a:3f:
c7:42:ad:93:34:f2:ac:51:45:dc:6e:f2:af:3b:14:74:0c:30:
60:7f:4d:bf:5b:81:27:78:bd:ed:6d:99:7f:1f:65:83:bb:c5:
6f:1c:7b:95:1f:89:e1:fa:1c:4d:3d:d4:03:d7:4b:c8:69:46:
be:21:f3:7e:97:29:4c:dc:fc:08:f5:fd:c9:d5:ce:1b:8e:44:
fe:ed:98:31:db:7c:26:d2:68:2b:d2:30:f0:c3:4c:40:d1:b6:
4f:9d:f5:bf:a8:62:9a:66:c7:b2:16:bf:88:8b:ea:c4:4d:d0:
ff:13:4b:cf:11:1e:0a:f3:6b:42:b5:7b:27:82:55:47:b0:8c:
02:3c:b1:44:82:79:c8:63:eb:87:fa:a6:95:ff:32:88:53:27:
cd:9d:bc:d2:77:37:19:d4:4a:46:07:88:ad:11:17:e8:73:7b:
61:b8:e8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrr7AcNrXfEYuirrpTGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4
MzFmNTIwHhcNMjYwNDE3MDMwMTE3WhcNMjYwNDE4MDMwMTE3WjAzMTEwLwYDVQQD
Eyg4NTUyODI1YzQ2Yzc0M2NlNzE2OTE3NjkwNDQxNGNjYTA4YzhmYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KlA1Ia7SXApN5gkaI/DfRZtATlU
9vEa0FJRXFn+qtQ31Za7nsw3AJuKAr8hmsCzOYru3Q9m5oPbdXSi+dIQZxulXoUf
GKrf0gfAR2hhY6jsqVWrmOzUpgb9bVjuRJK1zlgcIk+sW9AquLuhilvK/rKbftFp
q2Shk69lZnNf4+BAuYY4LO78SgMOWHIYrzawRqYAnPyGDA54gZyztDpl9GFgJMnb
E8W4q7g4quGE2uyTpYpA5fHKIJJs9TQFDFKaEQRxkzFmOQayYQQtRbuYXscnVFjN
ANjMn9p48RB+8riFarhp14jkKnxA6efUDNnn7A3gdqDoWtM7KJiLNF+AhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVSglxGx0POcWkXaQRBTMoIyPx6MB8GA1UdIwQY
MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt
M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx
LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzt1CtSP
hV+5kpIgejbMC9bYFNE0RXkHVl02ZqsZ5Qp3tZhlRcpYdO739d/7mFECwquxYw4A
eCmPlu+5nZoMDSHx3TJkXy1VSUTlXZvE9rtE+DKUXYIP7So/x0KtkzTyrFFF3G7y
rzsUdAwwYH9Nv1uBJ3i97W2Zfx9lg7vFbxx7lR+J4focTT3UA9dLyGlGviHzfpcp
TNz8CPX9ydXOG45E/u2YMdt8JtJoK9Iw8MNMQNG2T531v6himmbHsha/iIvqxE3Q
/xNLzxEeCvNrQrV7J4JVR7CMAjyxRIJ5yGPrh/qmlf8yiFMnzZ280nc3GdRKRgeI
rREX6HN7YbjoeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:43 2026 by rpki-client