Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: yIsx2bWV+kqpjyHwaCJLPgkYFK8idXimy6DP4oKT+2U=
Subject key identifier: 55:73:04:A7:0D:1A:1B:FA:AC:AE:EC:D5:5E:18:1C:AD:78:43:D1:3B
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019D25BA2486580472993F0FB87F47051CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0A55
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: lQ171JDsbPQPW1y/5Be4cnx20Wz0ZpqhwYQlhsmOKAM=)
2: qA3ImQcdu-q2a1X16c9AUNh8cvo.roa (hash: 0LDllHhDiUHrvufBGDxeRBb8RrRX38Z7Lp/cTDfB448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:24:86:58:04:72:99:3f:0f:b8:7f:47:05:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=557304a70d1a1bfaacaeecd55e181cad7843d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:07:2d:bb:7c:50:44:01:73:8d:90:b3:fb:
24:1c:1f:8e:68:7b:a0:be:d8:31:11:26:c2:20:7e:
3d:02:9b:b8:05:7f:89:c1:9d:6a:a6:92:05:42:fa:
6b:7a:f0:af:ae:7b:44:02:11:25:3e:3b:ca:8c:d7:
45:f2:71:85:2b:22:84:8e:11:8c:fa:9f:c1:d2:c9:
44:e2:40:b4:9d:b0:49:2c:d7:99:b6:6e:e7:03:92:
14:0c:f1:a3:cd:6e:9d:37:f4:44:9b:a2:fc:10:7b:
93:9f:90:2a:78:75:44:d6:ee:b7:88:95:97:f6:8b:
a8:e0:9a:a0:aa:0a:96:24:8c:17:27:3b:b8:70:ad:
9c:99:e5:91:fb:89:a0:a0:40:36:24:27:fc:2a:86:
aa:2e:20:9a:12:ec:5b:83:57:d4:86:32:a2:5c:1b:
6b:64:2b:af:34:01:d6:1b:cb:f2:14:a9:9b:c1:ff:
b9:c0:51:d2:87:a3:5d:8c:3d:eb:5c:43:00:c4:a7:
3b:8f:58:37:6f:df:98:10:a9:94:7d:3e:e4:9e:3d:
c7:fa:1d:b5:d7:f0:b8:3f:66:0c:54:4b:45:3c:4d:
9e:f7:ac:3b:51:b4:1a:fd:c6:e9:b5:aa:f0:13:30:
f1:5b:5d:33:d3:ea:5d:27:15:69:3d:93:0c:3d:02:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:04:A7:0D:1A:1B:FA:AC:AE:EC:D5:5E:18:1C:AD:78:43:D1:3B
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:89:f3:17:c0:3c:c8:a3:35:b6:23:d1:39:42:3f:0a:d0:
59:e1:6f:b8:4d:21:f4:f2:7a:9e:f6:8e:50:a5:25:c9:0f:88:
fa:02:45:21:3c:5d:42:7a:e2:b8:6c:43:07:22:d0:47:b7:bb:
c2:2e:da:5c:e1:4c:74:30:5f:d8:34:81:6f:ae:1b:b6:a8:f5:
58:6f:e0:b3:ba:54:4d:84:2b:03:b1:24:9b:18:5d:78:2a:f1:
89:58:4b:b4:d5:11:f1:d4:27:1e:86:77:5f:f8:61:a9:4c:5b:
49:5f:d5:f5:7e:7e:e7:61:bf:81:8e:97:b9:6d:f1:f2:f9:41:
7d:03:1d:6e:53:6f:39:70:74:68:51:98:6a:da:3f:11:bf:45:
23:f2:c5:54:24:85:c9:49:4f:f6:e1:e1:1f:7a:13:a6:05:b0:
73:7b:cd:b8:b3:75:85:52:68:52:70:e1:2a:62:c7:80:1f:84:
23:66:58:6d:89:29:0c:8d:41:ca:a5:53:4a:1b:b7:39:db:d1:
fb:bd:f9:8b:44:23:c7:aa:42:29:3b:b8:90:7e:f2:a1:0a:b1:
75:c8:cb:e0:b7:02:ea:a8:a9:15:1e:0a:41:a3:dc:ff:94:59:
de:00:c5:cd:5a:29:15:08:6a:56:b7:44:e9:08:aa:7e:7d:e0:
92:cf:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:58 2026 by rpki-client