Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: 407ljN4D8QDFtBiBndnXMBZ2TAo5VM7RFDRIJYZOG5w=
Subject key identifier: 17:60:33:3B:BA:77:1F:A0:E2:F9:1D:56:CD:B7:31:B1:47:33:B0:B4
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019E1F117A373C908401DA151C32FCDB460A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 036B
Signing time: Wed 13 May 2026 02:01:39 +0000
Manifest this update: Wed 13 May 2026 02:01:39 +0000
Manifest next update: Thu 14 May 2026 02:01:39 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: abBH5wVOu0znYle8CsZelCVfVQi7DmHGjADeuxvAGuQ=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7a:37:3c:90:84:01:da:15:1c:32:fc:db:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: May 13 02:01:39 2026 GMT
Not After : May 14 02:01:39 2026 GMT
Subject: CN=1760333bba771fa0e2f91d56cdb731b14733b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:1d:e2:36:47:cf:25:29:f7:56:85:88:75:
93:ea:0c:e8:b6:b3:39:12:d2:8c:04:4d:4e:20:ba:
51:48:ba:52:0e:2e:ba:39:76:7f:ef:a4:25:a9:97:
ec:4a:a9:3f:73:b7:49:c6:66:af:94:63:4d:7c:da:
d6:cc:6f:5f:d5:8f:8d:0c:b4:e1:45:56:05:e7:32:
8b:e7:19:1a:64:54:df:55:36:6e:3f:ac:0e:dd:b0:
31:6d:83:f9:e4:ef:d2:69:96:be:a2:50:0c:61:12:
5a:d7:93:13:97:e6:e4:39:2b:bf:26:52:39:ba:c0:
b3:f9:e3:e3:b1:74:23:71:63:e9:18:0d:f1:b9:32:
2c:f8:43:f8:78:7a:dc:89:b9:de:b9:97:89:2f:d3:
67:96:be:de:4e:9e:c1:2a:a1:d5:9a:84:c2:bd:41:
f0:27:72:53:8a:c3:f5:d2:3c:69:a5:9d:c1:5b:30:
4a:15:76:1b:09:cb:1d:66:19:80:69:0e:0e:a1:1f:
c9:c4:89:bc:ea:07:e3:45:00:13:f8:ff:eb:1c:4f:
fb:97:cf:f1:2d:86:ac:38:40:28:94:8a:d7:0f:6c:
a9:83:90:23:38:e2:7f:35:52:4a:dd:27:c1:a3:1f:
ed:de:77:34:f9:61:56:8e:60:1a:f9:0d:14:cc:5e:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:33:3B:BA:77:1F:A0:E2:F9:1D:56:CD:B7:31:B1:47:33:B0:B4
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:df:45:08:49:6e:72:13:26:5a:c7:db:ed:d1:3b:c1:bd:
03:50:86:d8:b7:b2:2e:b7:c1:c3:ce:84:47:f4:e8:2a:98:37:
bd:c2:5d:cd:58:6f:f1:78:00:53:28:59:77:cc:fa:dd:fe:80:
ae:9b:5e:c1:2d:f9:6e:48:de:91:41:85:ea:70:6e:9b:d9:cc:
13:3d:87:9a:f1:0e:31:45:14:80:2a:f8:f8:ba:3f:9b:fb:3f:
b3:e9:f0:69:74:3b:2f:bd:54:9d:bd:7a:e5:9f:c5:0c:78:d6:
8c:b7:f2:31:8e:78:4b:f7:b8:41:9d:31:ba:f3:01:36:29:02:
a5:10:ff:7d:88:a9:1a:82:d0:8b:1a:7f:48:e8:39:92:b3:30:
fa:57:af:c3:e1:3c:89:c8:4f:e0:90:b1:ae:80:56:81:cb:5a:
8a:7f:b4:59:8a:63:df:09:2b:5e:d0:ba:9c:93:f4:74:1b:33:
f0:d7:f3:ba:f8:bd:f1:ae:4a:3e:f0:40:45:df:ca:ad:84:23:
61:53:38:9d:a1:89:b6:c7:ad:fd:ce:9a:54:e3:2d:d8:f9:8e:
95:ab:35:8f:58:94:ef:5e:cd:1e:66:91:54:6f:29:22:41:9f:
51:89:ad:78:10:2f:b3:8b:ab:21:5c:48:12:36:a6:1b:34:ae:
c9:bf:3d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:47 2026 by rpki-client