Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier: goW5MErLYbL8tyMWj3H+au906weyfdeiQrr4KNCff14=
Subject key identifier: FC:35:76:73:20:80:80:35:1D:86:E8:55:0A:A8:F1:13:6E:83:F2:41
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 019D2D734C0966097A587F1655158E172211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number: 056E
Signing time: Fri 27 Mar 2026 04:00:23 +0000
Manifest this update: Fri 27 Mar 2026 04:00:23 +0000
Manifest next update: Sat 28 Mar 2026 04:00:23 +0000
Files and hashes: 1: Brn5F-40eNSDCLE6aqDrMS-dwhw.roa (hash: 1hN4iJehl+TMTpHf+NBH4j/ePoO90lU+U2xkIaHpESE=)
2: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: BuG+WY/qToT80zb+BH1CE7LDqmJpKQVXEavfvqrbIBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:73:4c:09:66:09:7a:58:7f:16:55:15:8e:17:22:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Mar 27 04:00:23 2026 GMT
Not After : Mar 28 04:00:23 2026 GMT
Subject: CN=fc357673208080351d86e8550aa8f1136e83f241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:f5:bd:01:8c:43:be:b6:72:04:67:f6:cc:
34:e4:38:d7:d8:6a:eb:ab:82:59:ef:03:9c:e1:6e:
a1:37:93:97:24:c3:6c:34:5e:00:60:4a:67:b1:95:
5f:af:89:c5:f3:4c:10:b3:1d:f2:95:f1:fb:99:94:
3f:0b:ec:47:8c:1e:cc:14:78:64:70:e1:1f:23:03:
71:d5:e3:65:62:db:a6:1f:57:f4:d3:58:af:6e:40:
9c:d6:dd:71:64:9e:11:9a:a5:fc:81:43:4b:ae:15:
dd:17:be:61:90:27:27:b2:49:b5:e4:7f:c5:32:f2:
da:b8:7e:48:d4:f5:ea:fb:e0:a3:ed:97:6a:d3:93:
c8:5f:5e:43:c8:b7:84:92:71:bf:70:3e:4e:62:32:
9b:dd:44:c1:e0:06:83:f6:a9:ee:57:c3:a9:27:a4:
ef:de:33:b3:f1:83:43:8c:16:fd:c3:1b:79:a9:9b:
e5:89:19:49:b9:fd:d8:0a:2a:30:7d:34:1e:f7:bc:
85:a0:30:16:d6:2c:e5:a4:d2:47:63:f1:07:18:8d:
99:40:d5:74:d2:8f:7a:13:5d:c0:0b:2b:03:ae:b2:
ac:14:85:46:71:38:71:24:25:f5:c7:92:26:63:52:
1e:32:52:c7:92:c6:5d:91:2b:82:52:f0:55:f2:07:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:76:73:20:80:80:35:1D:86:E8:55:0A:A8:F1:13:6E:83:F2:41
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:57:89:21:33:0a:b4:79:4e:88:04:85:8e:ac:12:60:05:d8:
ce:f6:e9:4f:42:d9:f3:78:74:a2:56:cf:56:18:b9:8f:30:ce:
1c:9c:67:18:4f:4b:a1:f9:8c:61:99:03:7f:93:69:2b:c3:8f:
01:75:51:0f:de:f3:ef:eb:5b:11:96:48:02:40:4d:06:cc:a7:
60:7f:f1:2d:65:ab:fe:1b:9f:91:69:49:4f:37:90:64:4f:a1:
1a:5f:77:4d:7c:ce:1a:76:90:64:e1:6b:7f:6b:1e:8b:3d:90:
cb:c2:db:25:c9:6e:f5:8b:ce:e9:dd:84:bd:17:38:aa:21:58:
b3:48:7c:52:2f:f0:68:40:6d:18:10:2c:39:49:a8:74:65:18:
3c:2c:15:a6:e7:e7:da:ed:b4:4a:eb:39:31:cc:50:24:24:7d:
7d:cb:e9:83:e8:36:09:42:6f:bb:2d:b7:27:dc:00:70:f7:76:
f5:f0:5a:e1:92:fc:e0:0e:68:74:af:c1:4b:99:8d:99:dc:f8:
36:30:3f:23:b8:1c:c4:60:94:2b:21:ce:b5:e4:1f:41:1d:94:
76:ce:e3:da:0b:88:e9:6a:14:1e:76:31:40:e2:4d:00:89:96:
05:b4:c1:43:a9:e1:87:ae:b4:6a:7a:e9:e2:7c:9b:0e:4e:f8:
a6:c0:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:14 2026 by rpki-client