Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: uwbdSfjxyrL3E1jZEamKV9793gLZG3ZKAWfEcD4duhI=
Subject key identifier: 21:60:DC:F6:04:A7:ED:BC:AB:06:5C:87:6F:2B:3D:33:C8:26:31:EA
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 019D265F6D8265AE9B32245FE59AF82A4854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 1565
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: VU1vH1aLBSV9DHnaGmyIdFxEuAg0DWUeeI+V9xjkPHA=)
2: yc62V3uIeA0-wy5Fq3O35pcJbHU.roa (hash: 7ByXG9IeLzWoaYBiJRWc0wUwLkE/yLcff/PMKmyqASg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6d:82:65:ae:9b:32:24:5f:e5:9a:f8:2a:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=2160dcf604a7edbcab065c876f2b3d33c82631ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:13:24:6e:60:55:d3:36:d5:20:aa:3c:0c:
b7:91:09:63:0e:09:61:65:b7:1d:5b:16:71:16:f8:
2b:78:5d:4d:9a:f2:96:00:12:6d:d6:b7:5b:3e:7b:
ed:51:56:86:76:73:11:0c:df:aa:3b:1f:b3:b1:77:
50:cd:cb:c7:07:35:62:5a:07:66:88:9e:ef:ae:f5:
18:ec:98:e7:d2:aa:8a:1e:f7:62:eb:92:3f:62:e9:
9c:2f:b6:b6:4e:00:20:5e:0c:dc:3d:b5:e7:b0:6a:
fe:b5:d8:b4:cd:1a:fe:05:f8:57:13:bf:c0:da:4c:
7a:f9:89:92:f4:e9:fc:5b:87:f6:05:3e:ef:94:6c:
02:c0:a3:f5:c0:ad:a4:f6:1b:9a:a1:d0:06:4b:55:
a6:c7:f8:0f:b6:ad:0b:51:2e:58:3f:b5:99:a1:13:
a2:55:60:63:72:01:eb:1b:b2:81:83:5b:ed:56:a3:
5d:df:dc:e6:a1:a4:e3:26:5f:61:45:e9:f6:85:00:
c8:ec:29:51:1d:81:8d:97:ff:5b:3c:f1:63:4f:c0:
7c:7d:dd:31:b3:c3:59:2d:ad:85:50:5f:72:05:4b:
ce:37:c3:6d:f5:62:da:56:f9:6d:56:ca:dd:98:c7:
72:34:7e:4b:89:89:42:56:2f:fc:80:56:d0:7c:ea:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:DC:F6:04:A7:ED:BC:AB:06:5C:87:6F:2B:3D:33:C8:26:31:EA
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:33:64:63:54:a1:d8:d2:ec:ba:2e:ca:75:6c:dd:3f:5b:
79:72:79:1c:3d:1f:0c:44:fc:98:51:1c:64:8a:07:5a:9a:d2:
b6:68:62:ae:26:b6:18:b1:6b:4e:a1:42:ab:56:6a:3e:b7:c4:
b1:62:df:eb:5b:1e:4c:dc:74:b0:ea:1f:bb:80:e8:9d:95:dc:
8c:a8:d4:76:91:83:ba:23:14:42:36:b3:22:41:9f:2f:d9:84:
a5:7f:88:4c:07:bf:78:c9:7f:52:47:c4:94:8f:7f:cc:60:2c:
c1:14:0d:51:a1:43:4e:13:e6:36:8b:9a:e7:df:5c:4f:8c:9a:
ec:d6:ed:63:5a:36:24:eb:ef:5c:c5:b5:98:41:4f:a2:d3:c6:
d2:55:1e:e2:e4:c0:3f:14:32:e1:c5:4d:11:bf:fc:15:0c:26:
5b:22:3f:5a:c1:45:ed:90:a2:fb:46:db:1c:3e:9d:6b:a9:c0:
b8:97:6c:d6:8f:71:20:38:86:7a:7d:44:d3:0f:a8:f9:19:cc:
1a:9d:e8:6b:f4:24:75:93:34:e9:9d:33:77:4f:51:2c:77:03:
31:54:a2:39:27:d7:0e:84:81:ac:31:1f:f2:e2:8b:14:5f:e4:
ef:cf:5e:a5:cd:80:ab:c2:91:2e:29:60:cf:f3:6f:52:7d:b2:
51:e1:32:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX22CZa6bMiRf5Zr4KkhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjg0MTExNzAwNDkyYWIwYmUxMTBlODIxYTFiY2U3M2Y4
MGE1NjUwHhcNMjYwMzI1MTkwMTIxWhcNMjYwMzI2MTkwMTIxWjAzMTEwLwYDVQQD
EygyMTYwZGNmNjA0YTdlZGJjYWIwNjVjODc2ZjJiM2QzM2M4MjYzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40TJG5gVdM21SCqPAy3kQljDglh
ZbcdWxZxFvgreF1NmvKWABJt1rdbPnvtUVaGdnMRDN+qOx+zsXdQzcvHBzViWgdm
iJ7vrvUY7Jjn0qqKHvdi65I/YumcL7a2TgAgXgzcPbXnsGr+tdi0zRr+BfhXE7/A
2kx6+YmS9On8W4f2BT7vlGwCwKP1wK2k9huaodAGS1Wmx/gPtq0LUS5YP7WZoROi
VWBjcgHrG7KBg1vtVqNd39zmoaTjJl9hRen2hQDI7ClRHYGNl/9bPPFjT8B8fd0x
s8NZLa2FUF9yBUvON8Nt9WLaVvltVsrdmMdyNH5LiYlCVi/8gFbQfOpZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFg3PYEp+28qwZch28rPTPIJjHqMB8GA1UdIwQY
MBaAFJ8oQRFwBJKrC+EQ6CGhvOc/gKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEt
NmY1MjNmOTYwMDczLzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yZDBlOGYtY2Q4YS00ZDM4LWFjNTEtNmY1MjNmOTYwMDcz
LzEvbnloQkVYQUVrcXNMNFJEb0lhRzg1ei1BcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKMzZGNU
odjS7LouynVs3T9beXJ5HD0fDET8mFEcZIoHWprStmhiria2GLFrTqFCq1ZqPrfE
sWLf61seTNx0sOofu4DonZXcjKjUdpGDuiMUQjazIkGfL9mEpX+ITAe/eMl/UkfE
lI9/zGAswRQNUaFDThPmNoua599cT4ya7NbtY1o2JOvvXMW1mEFPotPG0lUe4uTA
PxQy4cVNEb/8FQwmWyI/WsFF7ZCi+0bbHD6da6nAuJds1o9xIDiGen1E0w+o+RnM
Gp3oa/QkdZM06Z0zd09RLHcDMVSiOSfXDoSBrDEf8uKLFF/k789epc2Aq8KRLilg
z/NvUn2yUeEy/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:33 2026 by rpki-client