Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: vEw+yU9BbQhwycac15+XZ4FOm0ZUmrWvwktkbXCbL7Y=
Subject key identifier: FC:9D:8D:A8:61:18:57:F9:47:68:4E:DE:B6:F5:28:DF:F8:7B:55:CE
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 01A0CA47694D9A095BFF34C165AEB180BF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0D82
Signing time: Tue 22 Sep 2026 18:01:12 +0000
Manifest this update: Tue 22 Sep 2026 18:01:12 +0000
Manifest next update: Wed 23 Sep 2026 18:01:12 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: fP/rqXJ3kh42fg1arHyvh329TR46e2BaJLgsA332hNM=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:69:4d:9a:09:5b:ff:34:c1:65:ae:b1:80:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Sep 22 18:01:12 2026 GMT
Not After : Sep 23 18:01:12 2026 GMT
Subject: CN=fc9d8da8611857f947684edeb6f528dff87b55ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:ba:6d:14:96:ac:54:0f:b5:00:be:0a:2b:
55:40:a4:ed:3d:e2:55:fd:54:1b:78:94:55:2c:ee:
38:c7:c2:49:dd:5e:e9:ca:29:79:24:95:03:f6:b1:
73:82:e0:97:d5:68:d2:4d:cf:c9:2f:19:fd:0a:b7:
ad:89:9e:74:cb:47:3c:ae:5a:5a:fe:8c:51:4e:b0:
0e:3c:8c:98:97:cc:99:59:87:70:ea:40:46:69:a9:
47:0f:4c:cd:b0:fb:1c:d1:bb:b2:d8:bd:15:8c:08:
80:70:25:b4:e9:36:11:3f:f8:37:51:40:db:39:52:
c4:95:70:2a:4d:9e:92:4c:f7:9f:4b:e0:18:e7:f6:
79:c3:8f:77:39:04:7e:d1:8f:7c:59:39:2a:1f:64:
cf:de:37:3e:7f:3d:b1:25:6b:f5:d5:ac:86:c2:89:
a3:e8:85:ed:53:a1:6c:f9:cc:46:55:ce:4e:59:cd:
07:15:6f:50:b2:3f:eb:a9:fb:d0:a4:98:02:47:d2:
ee:8d:36:7e:0b:7d:fc:b1:0a:8c:57:db:a7:58:f9:
de:ee:44:85:25:39:0a:de:aa:e2:c6:6d:ae:f1:7d:
d0:78:18:55:8a:bf:de:8a:93:11:f4:45:e0:b2:1b:
0d:e8:e0:ad:a8:70:46:91:8e:00:fa:97:be:53:2f:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:8D:A8:61:18:57:F9:47:68:4E:DE:B6:F5:28:DF:F8:7B:55:CE
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:2e:fc:33:5a:d1:fc:df:15:c5:83:d9:1c:a0:55:89:67:
03:ad:22:82:d1:a9:62:ab:8c:0c:e1:6d:71:ee:c8:2b:cd:dc:
f8:60:77:51:a3:53:51:67:cd:0d:2c:0b:c3:3d:78:43:bf:8f:
ea:9d:e5:f0:78:6a:8b:23:00:96:08:35:4d:b2:73:4b:9a:c7:
9b:5e:c0:8b:35:ea:70:e6:4f:c2:3b:ab:2f:9c:2a:00:19:a9:
5a:7f:15:d0:4f:82:f0:c6:5a:d1:54:53:cd:3e:3c:7b:0b:53:
8a:aa:b1:08:f8:e7:5e:fe:ac:9d:8c:bb:5a:61:63:62:b8:53:
79:c8:09:a2:cc:40:bf:e9:5f:33:81:b3:f1:8d:3b:7b:b9:c4:
67:db:2a:53:4d:6d:4b:f0:9a:ce:64:b4:5a:14:02:39:39:dc:
ec:09:92:8c:82:08:0f:57:dd:3f:b1:19:4e:45:a3:da:3a:c8:
76:67:3b:cc:84:a9:2f:15:ef:9d:1e:41:22:80:b1:aa:69:3d:
74:8b:34:f9:5b:af:1c:46:fc:3b:46:29:6b:0f:94:2e:b7:37:
04:32:77:09:d6:15:6d:e3:6b:cc:8a:39:ca:5d:c5:f0:5b:84:
eb:00:68:90:a1:5f:bd:71:51:94:39:e7:c0:ce:1c:cc:cd:5e:
b1:d6:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:58:40 2026 by rpki-client