Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json)
Hash identifier: BT0jZYBp+2HBL+Hi+JDwNgQtpW4beJzgDz5duAXGugs=
Subject key identifier: 6D:B8:6D:1C:8E:23:09:6C:89:26:B5:EE:00:78:49:F3:EC:D4:78:F6
Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Certificate serial: 019CABD8E92BFFD5534F535E8FE51AC100BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
Manifest number: 0B60
Signing time: Mon 02 Mar 2026 00:00:45 +0000
Manifest this update: Mon 02 Mar 2026 00:00:45 +0000
Manifest next update: Tue 03 Mar 2026 00:00:45 +0000
Files and hashes: 1: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: 8houjhr3MdIRePllqvbZQ0Nvd+gWFewPe777Yorg3kg=)
2: pTe6RHaftrnnJqcuO_8R-de4Nnk.roa (hash: 2ETd3TNiT+suBn8Ic+LH4iwhEGDPCG1CFd8jp6TVX+M=)
3: u0PEXNzG-Lz1SWRMjafr1nS5-Tw.roa (hash: d1jmMavbX9TdbAdO+cxe7EmnXME/viiBD8NVGRKzPWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e9:2b:ff:d5:53:4f:53:5e:8f:e5:1a:c1:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52
Validity
Not Before: Mar 2 00:00:45 2026 GMT
Not After : Mar 3 00:00:45 2026 GMT
Subject: CN=6db86d1c8e23096c8926b5ee007849f3ecd478f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:bc:84:96:8d:8a:f8:fd:46:9d:97:9f:a4:
ab:00:bf:3e:a2:75:e4:67:bd:91:c3:a9:fd:d1:87:
38:2f:5c:89:4a:f2:63:f6:2e:2c:97:73:2f:cd:23:
e3:97:19:55:22:cc:ff:cd:ca:93:35:51:a2:3e:cd:
ad:d1:d8:ac:da:3f:e3:4b:57:89:62:12:2f:06:bb:
be:24:80:5d:bf:ed:a6:f3:9f:43:5d:b0:be:ce:66:
3b:13:21:5d:ff:22:c6:06:17:53:59:7f:45:5a:4e:
c8:2a:5f:28:e3:bd:9a:be:26:b7:c6:c3:7f:0d:14:
3b:f3:4e:d7:39:eb:17:d7:b6:07:fd:b1:dd:df:f5:
a7:5c:9b:d9:27:0c:83:1a:43:e6:0e:43:a3:8e:9a:
52:27:f1:4e:9a:fb:85:26:f9:a8:ea:d9:52:d7:74:
88:aa:cd:ff:b0:20:3b:fc:f7:63:85:ad:aa:1c:e1:
2c:06:ab:14:7a:bc:38:b3:a1:bc:90:dd:81:cd:b6:
03:84:24:d7:93:b1:3c:75:9a:27:ed:fa:41:f0:3f:
98:e0:8e:c6:12:2a:1a:7c:6a:f4:45:7e:74:80:42:
29:fb:0a:8a:f6:97:a0:15:f3:bc:1a:14:d8:e1:6f:
fe:81:6e:22:95:21:42:9e:40:63:4a:67:fc:fe:65:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B8:6D:1C:8E:23:09:6C:89:26:B5:EE:00:78:49:F3:EC:D4:78:F6
X509v3 Authority Key Identifier:
keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:06:9d:b9:6e:23:0a:9e:d9:cc:1a:05:b1:a8:a0:fe:70:
73:8b:4e:d3:76:23:3f:b0:60:8a:75:49:51:c0:28:55:1b:a0:
45:3d:be:2f:9f:32:88:eb:7b:c0:fc:59:2c:bc:59:78:a2:83:
87:5b:e3:20:9a:31:e5:0f:d9:b8:a4:b9:89:c3:a3:ab:c8:3a:
e9:0d:9e:7d:e7:22:45:d2:c8:28:03:03:7f:ee:23:2f:24:9d:
0d:54:b2:ff:3e:1d:38:5f:d5:48:c9:13:8a:e4:95:e8:87:7f:
71:64:d6:2d:a1:81:3d:24:0f:99:6e:42:28:9d:42:8b:e1:ef:
b0:5a:37:9b:b7:15:d9:b6:1e:72:4f:b9:3f:f7:ac:af:68:ec:
0a:b0:fb:78:92:39:0b:07:57:39:75:8b:20:9a:49:80:fc:04:
7b:ed:5d:cc:a1:1f:bb:95:6a:66:06:77:a9:50:58:97:1d:88:
0a:aa:63:49:f2:0d:94:e6:be:e6:18:40:72:a4:f8:95:ce:d7:
a5:f8:90:23:65:8d:46:42:74:d6:a1:c9:0a:7e:75:8e:5e:02:
db:f6:c4:8b:f7:ce:55:75:d9:02:d0:13:d0:6e:ec:ba:90:4f:
4f:43:33:b1:05:23:5b:2d:31:ab:bc:07:cd:b6:16:4c:a7:1b:
81:ca:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:09 2026 by rpki-client