Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: mtSibuTwIZRMhGzfw+k6UwO9cgJBDOwx17Ttmyl2zZo=
Subject key identifier: B9:61:30:F8:A8:09:42:58:C1:59:17:51:25:EC:8C:62:4B:E5:19:69
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 019D284E4EC31DBF0ED75D1F047C09F36716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0BE4
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: gCdkelcku20UE3AgB6eQSuQOOYY.roa (hash: dJjFIayFe8nzFROO5Sz7ye6wsmq4p85VT0pjVrRuHPw=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: RXxBpAkAxfW0DD4o6lk7FCXBxg/gBCotLfM2J38hkLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4e:c3:1d:bf:0e:d7:5d:1f:04:7c:09:f3:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=b96130f8a8094258c159175125ec8c624be51969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:4e:9f:58:4b:7c:b4:31:b7:90:95:64:21:
98:e1:93:f8:60:bf:9d:c5:10:e9:53:ab:45:72:34:
87:2c:11:c4:8a:e4:09:5d:58:65:0a:00:ee:93:10:
d2:0e:63:79:08:9f:58:6f:01:1a:ca:1c:9b:b3:16:
af:c3:1e:3c:54:c7:e2:3d:4e:8a:6d:c8:9e:4f:61:
86:5e:48:5b:3a:b0:74:67:1f:c9:f4:80:4c:85:30:
91:a1:dd:88:0b:68:d3:bd:32:a7:ee:9f:9a:d3:f1:
13:e4:fc:35:ea:97:2e:59:9b:e3:98:eb:fe:be:08:
cb:cc:73:6d:cc:04:1a:9d:21:12:ef:eb:1d:4f:0a:
f1:42:1a:dd:8a:42:ef:86:61:fc:44:85:e0:14:34:
28:35:0c:cf:b7:27:d7:39:5e:ad:92:23:72:3a:83:
53:27:99:b2:d7:c8:2f:2c:3d:42:f8:8c:2b:2a:00:
7d:72:28:77:74:54:ad:09:ac:f2:87:ba:7c:ff:40:
42:e2:81:b6:38:e0:5e:b8:39:48:8a:30:7f:21:95:
cc:2a:b6:89:f7:1a:e3:4c:1d:c7:d0:00:8b:ad:e1:
41:b3:3e:44:db:2d:17:88:29:cb:ff:e8:08:95:86:
76:ee:07:e6:4d:4b:26:00:e3:4c:ce:ff:7f:3a:93:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:30:F8:A8:09:42:58:C1:59:17:51:25:EC:8C:62:4B:E5:19:69
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:0e:25:11:71:06:c1:87:07:34:63:78:0c:5a:40:a9:b9:
68:1b:b6:f4:26:84:81:74:2e:34:ee:c0:97:34:61:e1:1e:c8:
8b:93:78:06:f5:dd:d6:7b:58:a8:a0:8c:47:08:67:16:49:7a:
af:d3:a2:3d:32:a1:86:a0:a4:3e:3f:d7:90:af:6c:5e:88:7d:
9c:5a:d2:61:9e:b9:dd:68:b7:20:14:24:66:44:03:05:95:f8:
5c:0c:9d:71:6f:1c:e8:10:76:d4:82:f1:fc:c9:8f:17:8b:dd:
01:2e:59:d0:e6:cd:40:38:9b:c7:93:26:4e:90:18:8d:c1:01:
28:f1:29:65:00:59:0d:07:cd:98:63:0e:78:ce:b2:0e:d1:79:
65:eb:16:09:0b:1b:e7:48:1f:8c:00:82:9f:aa:b0:14:b8:13:
0b:75:03:6d:fd:dc:0f:bc:4e:bf:27:9d:77:a2:fa:43:c9:9a:
c6:27:e4:63:f0:f1:97:53:7f:50:61:03:3e:c7:42:e6:7a:dc:
fd:b6:4e:7a:c7:37:1d:07:a2:62:ba:61:72:dc:89:3b:c6:10:
18:0e:4c:d7:21:04:8b:1b:0f:0b:3a:f4:31:0f:71:51:de:95:
fb:44:65:81:af:42:a5:35:eb:d4:14:27:7c:4a:03:2b:d6:93:
96:20:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:08 2026 by rpki-client