Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File: ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier: 6nJTF7T2kIldN5RW2i5VbvQRz+2rvN5pJTZpsR95knU=
Subject key identifier: 41:5A:2B:D9:F1:99:BE:0D:1F:A0:A5:EA:EF:6F:72:2D:2E:22:99:B7
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer: /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial: 019D27E07650146438D113478B105703D791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number: 1534
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: SzIPjg7SSIUFa2+jR/sOxjqsF211Arrg5LtUzst9L1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:76:50:14:64:38:d1:13:47:8b:10:57:03:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=415a2bd9f199be0d1fa0a5eaef6f722d2e2299b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:b0:70:80:a3:3d:1a:07:a4:eb:6c:75:7c:
bf:9a:d5:1d:f8:99:97:52:8a:eb:3b:6c:b2:d7:65:
1a:1c:f1:45:22:cd:eb:1f:99:c4:0e:5b:6e:74:2c:
78:53:7d:cd:c9:5e:55:91:ef:51:3c:3e:7b:cd:cf:
35:61:22:c2:1b:a5:9c:82:5f:d9:bf:54:58:0a:ab:
cc:e4:9c:6c:81:1b:45:6b:71:e8:c8:7f:b7:20:1f:
c1:07:1f:16:c9:5a:33:9c:14:f7:66:d8:f3:91:86:
73:ff:1e:7d:de:2f:38:61:76:b2:81:8c:c2:bb:34:
9a:1a:1b:73:92:11:1e:b9:9e:28:76:56:45:ac:5e:
d2:fc:08:96:6d:3d:44:75:61:74:27:1f:18:2a:84:
bd:c4:41:55:e9:99:14:9e:76:fe:19:a3:f6:f0:c9:
dd:c7:a2:9c:b9:40:70:f1:86:35:9d:c9:97:7c:a9:
fb:f2:a0:48:71:16:56:0c:d6:74:c1:37:de:47:e8:
6e:ee:66:28:1c:41:7f:cd:fb:43:90:e2:d5:a9:8c:
a7:e2:a4:14:9e:12:44:d3:ca:6b:00:61:fc:85:e1:
52:af:26:ef:9d:3e:a1:d2:2a:bf:e6:36:3d:22:e7:
11:6e:34:de:6b:08:b5:a6:09:61:c8:9b:63:1d:b6:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:2B:D9:F1:99:BE:0D:1F:A0:A5:EA:EF:6F:72:2D:2E:22:99:B7
X509v3 Authority Key Identifier:
keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f1:ad:d6:6c:cf:c9:ee:7a:89:d4:dd:53:58:b9:04:41:15:
1d:a2:b9:0c:75:05:11:fa:fa:d0:d2:02:75:c6:66:69:22:75:
77:51:75:10:3f:21:54:9d:c9:da:a2:98:4a:2b:84:f0:04:9b:
40:f2:72:67:77:b9:d7:dc:5c:25:e2:b2:76:fe:9c:21:3b:d3:
e4:b9:a6:d4:ec:d2:53:75:d5:65:c4:d5:47:3c:d4:0d:bf:4d:
2b:86:91:29:6f:f3:49:18:44:08:bc:ac:c9:3e:0a:61:f5:ff:
fa:6b:ad:a3:25:22:6c:0b:5a:78:c1:34:db:2d:fe:81:8d:dc:
2e:c1:6e:31:af:a5:53:c7:ea:14:ad:cc:3f:a6:69:cb:fd:e0:
0b:3a:58:18:fb:62:eb:51:3a:1c:36:a9:c8:77:1b:57:aa:9c:
cf:37:2b:43:ee:c7:4f:80:bc:4c:dd:64:d1:71:1f:da:87:e2:
a9:17:e4:7d:bb:de:39:d0:13:a2:63:65:21:87:02:6f:d2:aa:
03:90:cb:1f:c6:c0:b3:11:d7:58:7e:e2:ba:8f:b6:de:94:a1:
e0:d8:41:fc:34:72:e2:91:4d:c5:d6:8b:ed:59:6b:fe:1f:d8:
d7:cc:f1:2f:c5:3a:7b:61:b3:ae:19:9e:cd:23:72:00:53:54:
d8:39:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:22 2026 by rpki-client