Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier: syOwySgslI82Sm/HZ0K6idYkddyKXYOnTSZFET5Dpak=
Subject key identifier: 85:E2:FD:8C:27:5B:68:92:5C:6F:F7:7A:AA:47:0C:C8:5A:C8:7B:24
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer: /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial: 019D25F0F1C10DC22B901F11AEC9E6E133F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number: 096A
Signing time: Wed 25 Mar 2026 17:00:40 +0000
Manifest this update: Wed 25 Mar 2026 17:00:40 +0000
Manifest next update: Thu 26 Mar 2026 17:00:40 +0000
Files and hashes: 1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: ERSsapudvAoBV9809qKSx+rmkjv5ftlqAeD+HfUmNAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f1:c1:0d:c2:2b:90:1f:11:ae:c9:e6:e1:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Validity
Not Before: Mar 25 17:00:40 2026 GMT
Not After : Mar 26 17:00:40 2026 GMT
Subject: CN=85e2fd8c275b68925c6ff77aaa470cc85ac87b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:fa:a0:eb:9d:0b:15:8a:2a:1a:23:7c:77:
71:50:e2:50:8b:42:0f:da:6d:e1:84:10:22:72:39:
89:53:46:86:a5:96:51:a8:ff:5b:31:a0:53:5d:ee:
cc:6c:53:1f:16:c1:26:d9:79:fd:fb:d8:64:c3:d6:
41:dd:c9:53:94:7d:f3:1e:40:e9:52:49:5f:21:1c:
20:e1:f3:6f:e0:44:f3:57:a4:a7:d1:4d:0c:82:04:
82:46:f0:fd:81:d0:2a:44:87:ad:33:fa:83:3d:7c:
e2:af:eb:81:f3:b0:16:21:51:74:b0:c2:7f:c5:f4:
b2:d9:72:a7:a1:21:de:b6:d0:02:8e:01:6f:4a:c4:
c5:f2:4c:ce:a0:63:55:1f:34:71:2c:57:96:99:9a:
a7:b1:33:ee:03:cc:9c:d1:bc:61:8f:55:60:45:a1:
30:96:6f:09:7f:dc:45:e8:bc:70:ac:70:d3:1b:8d:
25:bc:53:c3:5c:6f:3a:2f:21:d4:1e:11:51:a5:4d:
22:ff:5a:b6:be:e0:90:95:8a:e6:53:a3:cc:37:0a:
d9:7a:da:9d:f1:75:cf:77:12:88:46:0d:21:7d:06:
15:c0:57:ee:ef:4c:22:9a:59:34:a4:42:d0:de:ff:
2a:b6:7b:e1:69:72:cf:5b:b4:c1:99:93:a0:d6:c0:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:FD:8C:27:5B:68:92:5C:6F:F7:7A:AA:47:0C:C8:5A:C8:7B:24
X509v3 Authority Key Identifier:
keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:03:ea:c5:19:1f:19:8f:74:14:e4:ac:f6:ed:1c:5a:e0:c9:
43:b4:89:99:22:c6:8b:28:18:fe:37:01:a3:ab:79:a5:b5:51:
74:22:62:f5:41:8c:b0:8a:9b:df:1f:46:9e:12:82:a4:67:c4:
5c:7d:76:20:dc:84:78:ea:6d:b5:fc:8f:93:62:43:44:3b:d6:
1b:20:5c:6e:a6:46:eb:ad:28:0e:48:ed:2c:fb:8f:81:96:81:
65:b3:aa:d9:10:fa:cc:27:18:cd:1c:ea:03:9b:51:4d:c4:8c:
ee:e9:fe:d2:6c:e7:04:fe:92:e4:37:bb:5e:77:d1:06:33:91:
d8:dd:78:e4:12:c4:78:f7:f4:16:9e:4f:c2:61:de:27:6e:a1:
90:fd:07:71:d6:6f:fc:ff:5e:07:dc:45:04:88:b5:6f:aa:72:
32:c4:f3:2b:3d:5a:b4:eb:0a:63:76:6d:3b:a3:6c:8c:3f:d5:
ad:53:1d:1d:89:27:06:71:c3:b5:e6:f7:00:ba:9a:5e:e2:52:
3e:61:d3:55:79:48:96:c2:04:08:65:7e:b2:6c:3a:9d:9d:f3:
53:9e:a2:46:1f:e6:56:2f:a5:95:62:f1:1b:c1:d9:52:57:89:
8c:9b:cc:80:bc:44:83:d4:d8:dd:9c:1e:20:4b:f5:79:c7:bf:
ef:a9:40:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8PHBDcIrkB8Rrsnm4TPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjFlYWFhN2JkMGVlNjdjYTYzMDJlM2Q3YWFhZTY0ZDcy
OTQwMmQwHhcNMjYwMzI1MTcwMDQwWhcNMjYwMzI2MTcwMDQwWjAzMTEwLwYDVQQD
Eyg4NWUyZmQ4YzI3NWI2ODkyNWM2ZmY3N2FhYTQ3MGNjODVhYzg3YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl36oOudCxWKKhojfHdxUOJQi0IP
2m3hhBAicjmJU0aGpZZRqP9bMaBTXe7MbFMfFsEm2Xn9+9hkw9ZB3clTlH3zHkDp
UklfIRwg4fNv4ETzV6Sn0U0MggSCRvD9gdAqRIetM/qDPXzir+uB87AWIVF0sMJ/
xfSy2XKnoSHettACjgFvSsTF8kzOoGNVHzRxLFeWmZqnsTPuA8yc0bxhj1VgRaEw
lm8Jf9xF6LxwrHDTG40lvFPDXG86LyHUHhFRpU0i/1q2vuCQlYrmU6PMNwrZetqd
8XXPdxKIRg0hfQYVwFfu70wimlk0pELQ3v8qtnvhaXLPW7TBmZOg1sAjQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXi/YwnW2iSXG/3eqpHDMhayHskMB8GA1UdIwQY
MBaAFJ8h6qp70O5nymMC49eqrmTXKUAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlIcXFudlE3bWZLWXdMajE2cXVaTmNwUUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83NmY0NjItYWQ4MS00ZjAyLTg5OGIt
YTk2ZjYxYzBjMWRhLzEvbnlIcXFudlE3bWZLWXdMajE2cXVaTmNwUUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC83NmY0NjItYWQ4MS00ZjAyLTg5OGItYTk2ZjYxYzBjMWRh
LzEvbnlIcXFudlE3bWZLWXdMajE2cXVaTmNwUUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgPqxRkf
GY90FOSs9u0cWuDJQ7SJmSLGiygY/jcBo6t5pbVRdCJi9UGMsIqb3x9GnhKCpGfE
XH12INyEeOpttfyPk2JDRDvWGyBcbqZG660oDkjtLPuPgZaBZbOq2RD6zCcYzRzq
A5tRTcSM7un+0mznBP6S5De7XnfRBjOR2N145BLEePf0Fp5PwmHeJ26hkP0HcdZv
/P9eB9xFBIi1b6pyMsTzKz1atOsKY3ZtO6NsjD/VrVMdHYknBnHDteb3ALqaXuJS
PmHTVXlIlsIECGV+smw6nZ3zU56iRh/mVi+llWLxG8HZUleJjJvMgLxEg9TY3Zwe
IEv1ece/76lAYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:51 2026 by rpki-client