Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: xVc+uHJbeHH/X2YWG+QfPlBWCLsS3b8h47nr691kaPY=
Subject key identifier: 99:F5:2D:79:8E:76:BB:85:32:89:EA:85:79:FB:B9:E8:F3:D2:09:0A
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019CAC100778FE3AB1EA5AD061DC7689CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 11A8
Signing time: Mon 02 Mar 2026 01:00:57 +0000
Manifest this update: Mon 02 Mar 2026 01:00:57 +0000
Manifest next update: Tue 03 Mar 2026 01:00:57 +0000
Files and hashes: 1: KvPSPYiMofHoVvDkuy76IpD7FIg.roa (hash: Mlo4RDiRvwndc4Eb1qzhPPj36O1+QMrpHmy4zsicFwU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: VuaqJtivRDf2cVWN8TQDU9m8o/8IFFz5627pHG8dWZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:07:78:fe:3a:b1:ea:5a:d0:61:dc:76:89:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Mar 2 01:00:57 2026 GMT
Not After : Mar 3 01:00:57 2026 GMT
Subject: CN=99f52d798e76bb853289ea8579fbb9e8f3d2090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:d9:fc:0f:bd:f1:b2:3d:59:4c:d8:54:de:
2f:95:a1:95:46:bc:bc:f7:36:3e:58:c1:41:eb:0e:
c5:52:f1:c4:eb:28:cd:27:02:39:c2:d3:d4:85:4d:
0f:67:ee:3d:1f:92:f0:53:cd:09:ad:15:f1:4c:89:
ca:fa:35:a7:25:84:4f:fa:b2:d0:8c:e9:a2:64:75:
bd:2a:82:29:02:68:1f:23:22:14:70:dc:8a:b6:64:
73:67:f6:58:15:16:50:1c:ab:35:86:a4:b3:b8:70:
d8:4e:83:d9:cf:fc:1c:97:05:93:a6:9d:26:84:aa:
0e:00:05:de:eb:68:5d:46:25:b5:56:66:69:90:9a:
ae:19:5f:5a:dc:3e:d8:e7:68:92:bb:5e:6e:19:95:
40:ae:41:89:5e:78:66:a9:91:49:5d:36:8e:8b:fd:
cb:9c:65:77:47:50:b5:86:9c:53:64:e4:2c:97:f1:
9f:dc:97:65:79:e5:75:0a:a3:5e:82:6f:1f:ea:f5:
4e:2e:91:95:fe:cb:4d:9c:76:c0:6e:ef:fb:f9:2e:
59:c0:e8:e6:7b:3e:35:b2:39:9a:de:ca:81:f9:21:
ac:ed:7e:02:bc:f6:5a:ae:fd:9e:4b:53:e7:d1:74:
37:9a:37:e1:b6:27:a5:68:5f:ec:06:3e:36:ea:a0:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F5:2D:79:8E:76:BB:85:32:89:EA:85:79:FB:B9:E8:F3:D2:09:0A
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:6b:98:5d:ae:bd:40:15:b5:82:49:75:16:6f:14:b8:fc:
e9:6a:1e:57:96:85:90:1f:63:aa:5b:3b:89:00:0c:84:55:21:
19:af:d0:01:ca:ef:38:db:e9:db:a8:ad:e7:a6:1e:9d:ce:23:
7c:ca:73:12:3e:64:19:4d:a3:db:0a:85:7a:33:ad:cc:43:ef:
c6:8b:63:f2:fc:6b:88:83:e6:34:c9:e9:1d:d6:1c:82:63:80:
a7:ce:16:b8:ad:55:75:3c:e0:38:21:55:cd:85:f2:44:05:45:
57:a8:56:5b:05:e5:0b:78:f5:9e:16:ab:ac:6e:70:0c:69:ad:
72:92:68:fb:89:94:d5:71:09:7d:63:ca:fe:c3:13:6d:3d:df:
b1:8b:07:a7:82:83:ad:d7:0c:1e:6b:ef:d9:02:50:e6:db:5b:
b3:53:53:f3:7f:99:8f:94:0e:6e:cb:56:e3:f6:67:af:d2:bc:
b5:51:60:07:1d:4b:75:55:af:da:f4:5e:ab:8c:f9:5a:44:fb:
5f:ac:5c:4f:b4:9d:04:71:d0:65:8c:64:45:9d:f1:6a:b8:6d:
72:83:65:ff:a8:3b:05:2b:0e:11:dc:fb:4e:d8:61:86:4a:9f:
53:b1:48:5f:88:e8:53:03:bd:cc:bd:4e:c1:94:6b:a4:f3:4d:
0b:a8:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:31 2026 by rpki-client