Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: YMBP1eqBQsNyviWctWqQV0TtbVLxL08Pj0vOcnktl8k=
Subject key identifier: 5E:99:96:75:61:BE:EE:60:33:8A:9F:20:E1:4B:40:4E:51:1D:A5:79
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019D25F1738EEE389FF1060BF57D80B1AC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 02EA
Signing time: Wed 25 Mar 2026 17:01:13 +0000
Manifest this update: Wed 25 Mar 2026 17:01:13 +0000
Manifest next update: Thu 26 Mar 2026 17:01:13 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: 9qDt3uiYkt3iCEOod77AkZE35YY6u63CJUR2vtFhLCc=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:73:8e:ee:38:9f:f1:06:0b:f5:7d:80:b1:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Mar 25 17:01:13 2026 GMT
Not After : Mar 26 17:01:13 2026 GMT
Subject: CN=5e99967561beee60338a9f20e14b404e511da579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:04:eb:ec:4b:9d:62:cc:c7:b6:73:dc:54:
f0:cf:c3:2b:b9:15:6a:d8:a6:31:29:db:a8:a7:ab:
47:47:9e:31:42:69:02:e2:fc:9c:a5:0f:e9:ed:31:
63:22:c8:41:d5:06:b1:8c:82:cd:90:fc:0b:a7:c6:
48:95:fc:bb:ca:7f:9c:ad:f3:1a:95:31:96:db:91:
74:68:73:ca:15:0d:3d:22:7a:d8:63:0b:96:2c:82:
79:4d:f7:7b:cf:96:43:c9:34:59:3e:16:46:a1:f2:
80:6f:14:5a:0b:75:92:8a:45:76:53:76:4e:01:ac:
da:90:54:e6:1f:e4:f8:cc:c9:b4:5d:4f:b7:87:46:
be:5f:b4:06:e0:85:43:24:92:4a:e2:68:a1:b8:0f:
30:a4:f6:3f:89:09:1e:1c:91:3b:55:41:46:d6:0c:
1b:88:bc:bc:93:d0:84:06:90:f3:65:a0:c3:70:1f:
e6:8d:89:34:06:81:da:ec:0b:d7:ac:a4:d3:e0:81:
84:30:ab:8d:37:d5:5e:03:d0:9e:ab:6b:b9:e6:9d:
42:28:84:4f:b9:6b:1f:1f:31:4c:f9:90:3b:e4:90:
5e:fb:64:cd:47:f8:dc:fc:3c:e5:e0:c3:7e:b6:58:
a2:86:f3:b9:69:11:ee:95:23:67:c3:0c:9e:d2:e9:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:96:75:61:BE:EE:60:33:8A:9F:20:E1:4B:40:4E:51:1D:A5:79
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f4:d1:18:58:55:7b:49:b8:76:12:21:99:04:b5:f0:9b:94:
fa:1a:b8:57:8d:91:f8:24:23:30:e7:31:fd:42:6a:44:8c:34:
dc:a3:19:02:42:0c:c2:c7:43:6f:d4:c9:ed:14:e4:db:fa:e0:
07:fc:d3:d1:fc:91:97:38:6b:1f:90:42:58:ad:b1:57:c0:8d:
2e:b7:1d:6f:61:97:cc:83:07:db:70:d0:15:25:25:98:aa:5b:
7f:39:ca:d3:42:d3:b8:db:d3:80:16:96:47:0d:a8:22:5d:3a:
66:6c:42:f6:e3:4d:98:7c:29:35:17:a5:12:da:28:df:37:06:
6a:23:13:23:6b:10:c4:9d:d5:80:d3:c8:6c:cd:0c:11:c4:72:
e0:20:10:f7:27:11:b0:26:e0:75:26:a1:8a:04:dc:39:de:26:
43:a5:18:ef:7e:8b:d7:f9:e8:ec:fd:dc:ab:23:0d:d0:f0:95:
84:47:f8:27:a4:19:d3:e2:ea:58:12:bb:49:95:64:5e:e2:78:
df:33:69:76:58:5c:00:4d:5f:3c:6b:45:72:ac:0f:0f:f4:fb:
6a:be:3d:5c:62:5b:2e:56:a9:07:57:2c:f7:3a:b5:68:73:5f:
c0:1e:41:f3:25:12:db:49:12:22:b4:b6:04:29:76:9c:18:e8:
9d:a5:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:04 2026 by rpki-client