Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: 2hGq6wIOhCD2ch2DJIaDQs1M4SStKv30EpJ11FLsN84=
Subject key identifier: A1:29:C2:E9:3E:EB:15:42:F1:D4:B4:C0:67:C0:6C:32:F3:85:E1:D8
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019D97AA8DD0F9ACE7C817F9604E9632E5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 1222
Signing time: Thu 16 Apr 2026 19:00:30 +0000
Manifest this update: Thu 16 Apr 2026 19:00:30 +0000
Manifest next update: Fri 17 Apr 2026 19:00:30 +0000
Files and hashes: 1: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (hash: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: +fmPi7zaZQLYDJpi79mMwhzis+7t1DDY5hi7rqxXwVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:8d:d0:f9:ac:e7:c8:17:f9:60:4e:96:32:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Apr 16 19:00:30 2026 GMT
Not After : Apr 17 19:00:30 2026 GMT
Subject: CN=a129c2e93eeb1542f1d4b4c067c06c32f385e1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:ae:9f:0f:c4:4e:0d:f1:71:43:d9:0b:62:
b8:25:b0:78:44:e4:ed:c0:90:78:62:95:30:3c:85:
5c:04:db:a7:e2:23:0e:95:99:bf:2e:4e:8d:78:8b:
2a:02:50:4b:f2:44:ad:8b:6f:75:bb:95:66:b4:34:
11:c2:12:60:8e:8e:59:9e:56:90:55:4c:f7:de:3b:
24:40:c4:1d:88:aa:42:9f:e7:b2:06:a3:a1:8e:81:
e6:d4:76:ed:4e:30:45:a3:ea:5c:91:21:59:a0:0d:
62:29:5b:e5:1d:6d:cf:d5:7e:7c:ee:a5:4a:bd:af:
f5:cd:86:ca:17:2f:fe:89:85:80:83:68:5e:78:57:
8c:01:07:ca:3b:f3:fa:3e:8e:aa:c1:9d:ea:b7:15:
0f:ca:03:54:70:59:94:fa:68:11:35:6e:74:ae:4b:
10:33:9e:5e:21:b4:88:53:64:ed:7e:08:e4:00:8e:
f3:9b:68:b6:4c:61:07:c4:d5:94:20:0f:8f:91:86:
e2:56:d1:95:fe:48:7b:00:f6:e3:f1:36:51:97:41:
dc:c6:95:f4:b9:94:fe:81:75:d0:1f:c9:4d:e9:a2:
bd:4b:9b:6d:dc:27:1e:eb:70:7f:3a:1b:a9:3f:ba:
ef:c7:65:2c:d7:0e:8a:21:47:fb:50:ce:9f:b0:80:
ef:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:29:C2:E9:3E:EB:15:42:F1:D4:B4:C0:67:C0:6C:32:F3:85:E1:D8
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:c5:d9:7d:4d:c3:e0:30:d9:31:ae:49:8d:4c:d9:26:93:
6b:29:3f:94:77:95:5e:60:7b:ee:e2:3b:79:6b:a9:61:23:d0:
6e:86:88:64:7c:89:98:c4:45:f7:1f:9c:2d:e4:4c:67:5d:a8:
c2:62:0d:3a:93:50:63:cd:bb:97:27:ad:5e:ea:0d:64:cd:2f:
2b:ca:dc:28:8a:1c:a9:bc:6c:84:e0:ab:4c:b6:70:22:d4:94:
96:1c:7f:d2:a5:85:cf:3b:06:ac:98:ab:49:88:17:97:b5:da:
d0:ac:c9:d9:be:b5:8d:54:dd:c7:a2:72:27:f6:6f:d6:eb:59:
e4:01:b1:7f:10:d0:34:ce:98:fb:62:6f:6d:0b:7d:39:b2:85:
01:8d:3b:c4:b3:4b:f5:8d:a5:fa:fd:9f:a8:da:84:65:f3:64:
80:9b:aa:cc:b8:33:71:bd:b0:9a:7f:ae:0d:43:83:89:37:dc:
cb:f1:f9:ca:d5:1d:01:ba:cc:b1:d2:b5:98:87:a9:fa:68:42:
cf:81:8a:33:f5:a5:c2:38:6b:a5:c3:bc:cd:f8:49:0b:7e:1c:
15:18:79:5b:05:e9:2c:84:cf:01:37:48:11:d6:e9:92:23:d8:
86:d3:e5:1d:7d:31:e6:58:22:e4:93:84:95:c1:0b:16:5f:8d:
08:b3:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:09 2026 by rpki-client