Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: WIYamWPPocD7o7Z/Afy1siaDrjWGcQjAGTVphnbwKbc=
Subject key identifier: EB:2A:5D:E1:C9:DA:8D:DD:C8:CE:9A:F3:2A:64:FD:D7:D5:BB:BE:F3
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019D296173D81C34607F428F8074F4262AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0B8D
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: 5ZKkz7bn+UBskE7zXzxcOy4l9m5cTz0605cSavw1aVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:73:d8:1c:34:60:7f:42:8f:80:74:f4:26:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=eb2a5de1c9da8dddc8ce9af32a64fdd7d5bbbef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:03:11:aa:a0:10:19:93:b9:3d:a6:6c:67:
bf:72:4a:c2:7b:4d:1f:1f:3d:53:a8:98:22:65:de:
32:f3:ba:ef:ce:0c:14:c9:02:81:cf:bb:4e:42:1d:
13:ed:d7:b9:d0:90:2c:2e:40:b1:0c:bf:1e:bc:33:
58:4d:72:8b:d7:bd:f1:ce:e3:c4:2f:33:c7:69:59:
6b:64:c3:4b:03:04:a4:aa:35:6a:52:4e:f3:d7:38:
1a:6c:0a:4d:16:66:ff:af:d6:00:b9:4d:1b:ec:bc:
c8:f4:d1:75:07:08:a6:e5:32:d0:a2:f1:f2:79:b6:
69:e7:49:17:be:8b:46:d4:f7:88:e1:3d:98:e5:87:
6e:b3:0d:19:2c:d9:f3:b8:0f:88:00:58:fd:5e:0e:
66:a8:7e:57:ca:52:6d:a3:6d:f9:a9:7d:d9:5c:94:
00:df:98:12:c2:84:69:0d:34:15:f1:17:e8:5a:5c:
90:80:e6:5d:06:97:52:c8:68:f8:e9:8c:65:d6:da:
e7:4d:26:b2:b9:34:38:f6:a3:cf:ec:fa:37:30:24:
ef:4e:43:8d:2f:09:18:37:e9:8b:32:47:ea:91:c2:
2a:3a:72:09:1c:79:a7:88:b7:9c:cb:ea:b8:45:73:
aa:ad:be:fa:47:2f:9f:e3:8c:b6:4b:1c:9c:7b:88:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:5D:E1:C9:DA:8D:DD:C8:CE:9A:F3:2A:64:FD:D7:D5:BB:BE:F3
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cf:9a:4d:8c:82:ba:22:a1:f1:57:41:3a:5c:c0:93:d2:0a:
7d:d9:1c:cc:7b:ba:0d:b9:da:d9:5a:3b:c6:eb:dc:98:39:c2:
03:13:e6:eb:14:ad:a2:d7:0b:21:a2:19:22:17:2e:da:71:a9:
71:43:36:ee:fb:b7:65:0e:84:ce:d7:0d:03:8d:21:13:76:b9:
9f:25:7e:4f:b9:fe:cd:4f:cc:7e:7e:5b:f2:99:ab:0c:d5:3a:
12:23:6b:d9:a0:e7:42:7a:45:f9:a1:82:1c:c1:fe:37:d1:91:
ac:ae:0c:35:3d:1d:46:45:d2:cf:87:1b:87:91:53:ea:8a:68:
4a:08:5c:f9:2e:05:55:00:86:3a:b0:9f:e7:81:5b:c6:8b:8c:
22:16:c0:26:87:fb:34:08:ef:90:50:07:81:48:64:78:41:66:
4a:39:ee:57:eb:9a:64:b4:8b:26:83:42:d8:21:3b:25:76:c3:
a9:d6:66:83:c1:78:52:d4:bc:c8:67:9f:b6:a4:99:92:65:30:
79:80:df:29:47:d8:d2:76:a1:ff:77:64:03:76:7b:3c:bc:65:
8b:9e:30:77:1b:4c:af:8f:8a:2c:69:97:dc:c0:74:19:72:40:
d9:d9:2f:2d:32:82:38:1c:d4:ca:8d:16:16:0e:30:04:e9:fc:
43:72:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:58 2026 by rpki-client