Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: U/ubgqiulXXKnAq9LwLG1hP6GrSOHWLOdAJZI/LNHcA=
Subject key identifier: D4:34:CA:E9:CD:11:ED:5A:5E:CE:E6:2E:ED:85:10:9B:4B:A2:E6:DF
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019F93C98A8B00C9677CF65F9E94B557FD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 042C
Signing time: Fri 24 Jul 2026 11:01:26 +0000
Manifest this update: Fri 24 Jul 2026 11:01:26 +0000
Manifest next update: Sat 25 Jul 2026 11:01:26 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: JHCcEi+YIq5R6dRbuOZAT4ykskJ+g4rjqMe0CpcBzeg=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:8a:8b:00:c9:67:7c:f6:5f:9e:94:b5:57:fd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Jul 24 11:01:26 2026 GMT
Not After : Jul 25 11:01:26 2026 GMT
Subject: CN=d434cae9cd11ed5a5ecee62eed85109b4ba2e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:76:11:76:71:16:f3:7b:e8:88:4e:e1:05:
57:6f:46:2e:dc:37:fd:51:01:6e:68:62:36:bd:78:
11:ab:6f:68:4c:8d:0e:f3:53:95:c1:0f:b2:31:c5:
e3:84:7a:93:fc:c9:ea:6a:ea:78:48:3c:36:c2:21:
a4:fc:ea:7f:e5:10:79:e9:42:64:56:bd:fd:78:f4:
a8:cb:2b:bd:60:81:38:91:92:97:27:97:6b:2a:21:
e2:1a:aa:ce:75:af:b9:96:73:c8:40:73:11:6b:86:
56:6d:52:8d:49:04:88:11:a6:5f:2c:da:19:a1:41:
49:79:36:f2:21:3c:70:a6:27:e5:40:e6:b8:02:ef:
1b:57:26:59:40:10:27:e3:2d:1f:7a:84:9f:a1:a2:
6c:19:58:a5:95:8e:be:59:4a:15:4f:02:43:1a:40:
82:f4:ee:13:2c:7a:00:81:72:48:3f:f0:56:c4:ad:
7e:50:98:02:ed:22:95:f6:59:cf:7d:c3:43:f0:4c:
82:48:22:95:6d:13:87:93:6e:d3:f3:8d:c4:42:f1:
6a:a0:66:57:42:31:b2:74:96:06:b5:ee:4d:07:62:
54:52:68:bd:13:a6:e9:5a:2c:1a:57:ef:34:ae:c2:
99:01:81:0b:17:1d:64:fc:91:dc:bd:3c:90:2a:ac:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:CA:E9:CD:11:ED:5A:5E:CE:E6:2E:ED:85:10:9B:4B:A2:E6:DF
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:52:39:6b:2c:78:fe:92:4f:2f:bd:24:5f:4a:63:2e:dc:
bd:1a:99:ec:be:71:56:76:b5:a7:1c:80:d6:c5:ec:44:c7:bd:
0c:33:77:1d:fc:c5:ce:42:dc:80:a4:13:a9:00:26:fa:9d:0c:
fe:57:b5:53:a3:d9:5b:12:0b:fb:ba:68:27:db:6d:5f:62:8a:
67:76:ce:85:c3:aa:e7:96:e6:3e:12:e4:43:ef:81:7c:8d:a3:
0b:a0:65:e2:5e:2f:b8:ec:e6:14:16:fe:5a:77:d2:2c:0e:d1:
52:41:c3:dd:d9:73:ad:f9:33:05:57:22:c5:cb:3d:56:57:78:
79:e1:fd:c8:ec:5f:a8:97:0f:4b:91:18:d6:ce:84:c7:ed:ca:
c1:48:0c:6a:63:1e:15:d5:30:a8:73:b8:b2:58:7f:ca:8d:87:
6d:4f:70:4e:52:d3:cc:61:cd:20:7f:a3:50:25:6d:3a:b8:61:
3f:54:0e:7d:62:a1:c5:14:cf:09:aa:c7:7a:72:a4:a6:73:85:
c4:eb:9d:b6:96:58:cc:12:57:82:a4:10:e2:a0:3d:cc:0f:65:
09:97:a4:55:4a:d6:b2:6f:ee:56:cf:8b:a6:8c:3a:71:e6:e8:
73:5f:d6:d5:10:1d:47:86:e0:d6:f8:5f:7b:99:18:51:f7:4c:
23:0b:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:04 2026 by rpki-client