Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: aFweiWHsZJEsL3XQgmuxrMZT0lvtwvsRq7QwANCBu2c=
Subject key identifier: 45:60:5A:37:10:85:DC:D7:6E:7E:32:52:A3:69:80:D3:8F:58:A6:97
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019D2BF2BB3594B550028E674376F09513AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 21:00:21 +0000
Manifest this update: Thu 26 Mar 2026 21:00:21 +0000
Manifest next update: Fri 27 Mar 2026 21:00:21 +0000
Files and hashes: 1: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (hash: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns=)
2: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (hash: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y=)
3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: S2clMfLQfypVGbCGaySqb/hWsA3ZkH35bewgTg/DovU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:bb:35:94:b5:50:02:8e:67:43:76:f0:95:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Mar 26 21:00:21 2026 GMT
Not After : Mar 27 21:00:21 2026 GMT
Subject: CN=45605a371085dcd76e7e3252a36980d38f58a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:8e:e8:3b:b0:b9:26:aa:a9:1e:25:be:6e:
64:e4:44:93:e3:43:dc:2c:cb:69:34:63:a4:32:cc:
33:52:b0:3f:21:72:1a:6f:28:b4:96:63:78:b1:13:
b5:d3:09:6e:7b:81:5f:76:1a:93:2a:b8:fb:9f:79:
9e:dc:27:58:00:a1:bb:46:b4:7b:a3:d6:da:0a:ce:
73:c5:6c:d0:8f:18:5b:54:10:21:98:fa:62:8f:e9:
72:15:fb:f9:f1:97:11:3d:66:10:a3:d3:b8:ce:e7:
4f:96:98:f8:6f:53:4f:87:3e:8a:7a:f9:e1:4d:49:
15:64:1b:7f:47:fc:6d:68:43:a0:cd:47:6e:1c:62:
93:11:41:76:28:f0:5f:28:0d:5f:bb:fb:ec:25:c0:
e8:54:ea:26:10:7f:b7:d3:95:ef:e5:a1:c6:2d:68:
1e:b5:5c:2e:bb:36:06:05:94:b7:07:7e:1f:6a:38:
f5:4b:e7:63:40:36:fd:89:fd:84:b1:ba:6c:b7:bc:
d2:69:75:1d:1f:dc:25:c3:2a:5e:1e:80:63:a8:67:
53:e2:2a:a1:7d:e3:6c:ee:b2:b4:bd:45:cb:1c:e6:
a5:e8:ef:d1:5e:a3:5b:2f:a3:cb:9d:b3:ff:77:9d:
5a:22:f1:69:ee:8d:00:76:39:f7:fd:c4:01:18:63:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:5A:37:10:85:DC:D7:6E:7E:32:52:A3:69:80:D3:8F:58:A6:97
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cc:6e:e2:a4:be:44:28:9b:73:1b:e5:14:fd:6d:ae:2f:41:
7c:85:49:c6:52:5a:60:f2:9d:dd:91:87:3c:25:3d:2a:47:c8:
bb:18:ca:49:cb:9d:6d:e1:16:a7:15:e1:6e:65:a6:b4:17:01:
21:09:bc:3d:b0:c3:bd:8e:72:cf:18:74:90:c4:92:d8:3a:d3:
a4:bd:a1:19:61:17:99:6f:41:b1:6e:d1:2d:18:8d:fa:82:a0:
2c:0f:b0:db:ee:03:0b:5f:17:24:58:5d:73:42:5f:4e:f8:73:
d3:cc:d8:f9:e7:d3:60:71:0e:2f:c1:e0:a6:0f:9a:4e:da:3e:
87:ac:b6:80:3f:19:fb:84:e0:42:5c:38:33:18:ef:f3:2c:bc:
cc:a1:86:c9:99:9d:45:09:16:b2:08:fe:14:85:6e:1e:12:2b:
53:61:db:0f:73:64:28:63:21:73:e0:ca:a8:b3:d5:fe:22:0d:
46:2c:06:ea:5b:4b:54:fb:9f:04:48:71:12:da:61:53:c8:41:
0c:d1:03:60:f3:3a:08:9e:66:93:e9:0c:62:ae:e3:6e:63:c9:
74:86:ae:c8:aa:cf:75:ac:8f:4b:55:71:41:2f:64:ae:74:f0:
7c:30:8f:62:1f:a9:b1:b4:c8:89:79:12:72:02:7c:29:f0:17:
e7:23:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:02 2026 by rpki-client