Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: Kb4sjRu8jaGbZW63kufyxdIqDHJW12yv326ilibwEC4=
Subject key identifier: 5B:8D:6B:70:63:7F:A2:BC:7C:A7:2E:81:3A:24:D4:64:F6:62:6E:7C
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 01A0FAFD3A001622FB3638CAB4821FF7AB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 04E6
Signing time: Fri 02 Oct 2026 05:01:34 +0000
Manifest this update: Fri 02 Oct 2026 05:01:34 +0000
Manifest next update: Sat 03 Oct 2026 05:01:34 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: GD1NHHlcBfG+PzAX+vJ/+b2zgVy5PT7sTKHLu+rqlpg=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fd:3a:00:16:22:fb:36:38:ca:b4:82:1f:f7:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Oct 2 05:01:34 2026 GMT
Not After : Oct 3 05:01:34 2026 GMT
Subject: CN=5b8d6b70637fa2bc7ca72e813a24d464f6626e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:ef:45:a4:2c:b9:a9:28:0d:73:58:e4:05:
90:10:fe:41:4e:cd:36:62:ad:04:00:17:12:c0:38:
e7:32:7f:85:dc:f9:61:87:13:dd:8a:88:c6:22:9d:
22:c5:97:13:c3:62:36:1e:bf:ca:1f:1f:93:df:7c:
7e:e9:ab:87:43:a2:e2:5f:26:e8:37:f4:ea:43:0b:
d6:09:74:57:3f:a0:a7:7a:36:62:08:d7:27:08:7f:
37:15:8d:82:a4:49:81:eb:34:d6:9f:2e:00:0e:c3:
87:4a:ab:80:6c:6f:f4:86:aa:58:92:2c:e0:ad:47:
82:d3:c7:c0:14:77:36:12:c0:5e:7e:1b:52:0d:13:
7d:6a:0f:b2:cd:50:34:78:ba:92:69:a5:1c:48:ad:
9a:af:5e:85:0b:45:c3:24:88:d0:ca:e3:88:cc:7f:
83:c5:37:e6:69:83:13:85:d6:43:51:34:a7:3d:4e:
c3:a4:7a:1a:07:55:0f:f4:e6:19:85:1e:7c:a0:fd:
18:f3:d5:f0:f3:84:f8:62:12:26:4c:4e:fd:55:5d:
bb:52:85:2d:d0:a3:bb:a2:21:ba:ba:ae:48:0e:4c:
43:7e:9e:65:45:80:cb:4c:ae:73:9e:6f:3c:2c:a7:
f2:31:e6:a9:f9:8a:da:32:02:5e:22:cd:56:1b:df:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:6B:70:63:7F:A2:BC:7C:A7:2E:81:3A:24:D4:64:F6:62:6E:7C
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:ec:c7:24:4d:0a:56:78:1a:7c:cf:1c:6d:28:b1:a6:df:
ba:c4:08:d9:e0:80:b0:ca:d1:db:63:b3:6d:fc:97:e0:6c:d3:
07:09:c5:93:21:9e:57:26:fa:8f:46:45:c8:4f:e6:9d:d4:a6:
8a:b3:da:e1:2c:39:82:e7:4c:e5:54:7b:32:dc:68:ff:db:79:
c6:3a:1b:21:9c:98:1a:00:14:3c:a7:c2:ad:1a:79:d5:c1:d3:
52:a0:5a:a3:7c:67:fc:76:34:e9:2b:98:a3:11:82:c6:27:14:
0e:86:b6:45:bf:a1:f9:00:e0:0f:3b:d1:d5:40:a5:bf:90:1c:
09:6b:fb:1d:16:66:d6:cd:4c:4c:4c:59:de:0a:4c:31:32:05:
0a:23:81:0a:f0:94:6e:7f:40:22:61:a2:31:f7:55:fd:68:39:
51:8e:35:54:49:0e:e3:70:1f:ee:49:e3:6c:0e:3a:dd:52:aa:
a3:23:6e:7b:6e:96:0a:d3:92:a8:3c:8d:a7:ac:31:cc:25:55:
47:7d:3b:8b:fd:06:5e:8d:b2:fc:71:70:7f:7f:95:fa:6e:29:
17:88:f6:be:cf:07:cd:62:b8:75:c6:44:cb:fc:ad:e7:6c:d7:
aa:6c:c3:fb:1a:59:51:b0:e4:63:17:73:39:b1:34:ea:2c:0b:
ac:1e:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:58:48 2026 by rpki-client