
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
File: Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft (raw, json)
Hash identifier: P3z/Psv/DoIECKp41XJSicmmlJZPmFqENG0u4Za8ShI=
Subject key identifier: 74:D3:EC:1C:15:09:83:9E:ED:D4:04:2E:12:FC:C9:77:3F:3E:49:E7
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Certificate issuer: /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial: 019F8F7DDA442FB325D07FF41100EE5DC8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:17 +0000
Manifest this update: Thu 23 Jul 2026 15:00:17 +0000
Manifest next update: Fri 24 Jul 2026 15:00:17 +0000
Files and hashes: 1: Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl (hash: TcBIzuTQL/A0M1MYcrxCZP6s95XAcl3S0+wQYvh2JEE=)
2: b0w2NwRKZd0v1YirWaHR-yonRpM.asa (hash: Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:da:44:2f:b3:25:d0:7f:f4:11:00:ee:5d:c8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
Validity
Not Before: Jul 23 15:00:17 2026 GMT
Not After : Jul 24 15:00:17 2026 GMT
Subject: CN=74d3ec1c1509839eedd4042e12fcc9773f3e49e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:54:be:42:0b:22:98:30:ce:ec:1b:9d:ee:
20:69:65:54:f1:73:e6:9c:cd:09:ef:f6:ed:92:8d:
51:22:68:ce:7b:bc:ac:4e:bf:d1:0f:af:e9:f0:82:
73:df:b4:85:c8:21:dd:b3:8a:1c:fa:80:51:d4:c2:
61:24:f9:e9:95:88:68:fa:f9:b0:b1:df:b0:ff:d8:
a8:4a:0a:43:90:e6:68:51:86:92:71:17:9f:0c:e8:
02:5f:17:e3:d3:ce:7f:0d:71:0c:25:2e:09:9c:89:
24:cc:cf:07:29:69:a1:b5:13:e4:4a:32:e7:d6:f5:
18:85:44:2c:37:61:f7:ad:a6:1f:72:e8:e4:61:0c:
cf:ea:e5:ce:88:24:41:7d:c1:60:b1:70:1b:7a:d5:
16:b4:70:0d:55:19:d4:9d:61:a9:9f:3a:e8:02:00:
c5:70:e2:d0:65:6a:c9:8c:3b:cb:5c:dc:29:ba:58:
81:72:2f:62:6f:87:d9:81:19:cd:5a:cb:71:41:6b:
e3:0d:18:19:64:06:1f:d0:fd:8c:0e:25:27:c4:fb:
2d:26:7d:97:5f:75:05:c7:91:19:5b:25:2c:08:75:
ed:72:cd:28:0f:64:bb:28:30:7f:03:ce:5f:9d:5c:
e9:28:64:f1:69:1f:c1:2b:0c:d4:d5:7d:89:d2:44:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:EC:1C:15:09:83:9E:ED:D4:04:2E:12:FC:C9:77:3F:3E:49:E7
X509v3 Authority Key Identifier:
keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dd:41:90:38:ba:61:e8:0e:a2:65:37:c1:46:e5:83:8a:c7:
3d:3b:1c:ae:13:d9:16:7f:aa:a0:bd:0c:e8:9d:8f:7a:26:93:
45:27:68:c6:ff:6b:da:fd:2f:d0:d9:3e:fc:ed:4f:49:b9:b0:
28:3a:a1:04:df:c9:77:53:76:2e:3c:f8:99:d3:fe:83:85:3b:
9c:d8:7c:73:85:cd:23:0f:e3:d7:94:d0:ac:15:13:e3:04:d8:
fc:a4:73:d4:64:71:e8:1f:84:cc:b9:68:31:ce:93:cb:12:ed:
3a:a2:88:7c:18:04:7b:f8:1c:c0:8a:25:6b:6c:60:36:6b:c9:
94:ae:4c:a5:68:cc:2a:20:fd:9a:1c:d9:ca:98:de:21:95:b9:
ac:88:5f:71:6c:38:e4:36:31:33:29:5c:95:67:e4:a2:25:ec:
68:2f:0c:8d:6c:8d:b7:02:09:86:e2:81:3f:04:fd:f1:1b:84:
be:c6:a9:09:6a:76:36:08:5e:7a:a3:21:c1:f1:be:b4:84:67:
43:31:9e:84:fa:25:2a:7c:c2:a6:47:af:5a:6b:2a:28:33:06:
15:0c:8d:86:be:e1:98:85:57:dc:21:8b:d2:e2:d1:ee:17:02:
fd:74:8b:ab:55:ec:b3:13:1a:ac:74:f4:63:c3:2f:8d:19:78:
43:54:ec:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfdpEL7Ml0H/0EQDuXcjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmY1NjY5Zjk4Y2ZkNTA0ZTRhOWQwZTkyNzQyN2M1MDNl
MzM3OTYwHhcNMjYwNzIzMTUwMDE3WhcNMjYwNzI0MTUwMDE3WjAzMTEwLwYDVQQD
Eyg3NGQzZWMxYzE1MDk4MzllZWRkNDA0MmUxMmZjYzk3NzNmM2U0OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG9UvkILIpgwzuwbne4gaWVU8XPm
nM0J7/btko1RImjOe7ysTr/RD6/p8IJz37SFyCHds4oc+oBR1MJhJPnplYho+vmw
sd+w/9ioSgpDkOZoUYaScRefDOgCXxfj085/DXEMJS4JnIkkzM8HKWmhtRPkSjLn
1vUYhUQsN2H3raYfcujkYQzP6uXOiCRBfcFgsXAbetUWtHANVRnUnWGpnzroAgDF
cOLQZWrJjDvLXNwpuliBci9ib4fZgRnNWstxQWvjDRgZZAYf0P2MDiUnxPstJn2X
X3UFx5EZWyUsCHXtcs0oD2S7KDB/A85fnVzpKGTxaR/BKwzU1X2J0kRjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTT7BwVCYOe7dQELhL8yXc/PknnMB8GA1UdIwQY
MBaAFDcvVmn5jP1QTkqdDpJ0J8UD4zeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQt
OGQwNmQ4YzBlM2MxLzEvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQtOGQwNmQ4YzBlM2Mx
LzEvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtN1BkDi6
YegOomU3wUblg4rHPTscrhPZFn+qoL0M6J2PeiaTRSdoxv9r2v0v0Nk+/O1PSbmw
KDqhBN/Jd1N2Ljz4mdP+g4U7nNh8c4XNIw/j15TQrBUT4wTY/KRz1GRx6B+EzLlo
Mc6TyxLtOqKIfBgEe/gcwIola2xgNmvJlK5MpWjMKiD9mhzZypjeIZW5rIhfcWw4
5DYxMylclWfkoiXsaC8MjWyNtwIJhuKBPwT98RuEvsapCWp2NgheeqMhwfG+tIRn
QzGehPolKnzCpkevWmsqKDMGFQyNhr7hmIVX3CGL0uLR7hcC/XSLq1XssxMarHT0
Y8MvjRl4Q1TsTg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:31 2026 by rpki-client