Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: UwCqaINfJrbxUY8LAX2xd3qmDx614iUcZWpAgrwuHcU=
Subject key identifier: 28:08:EE:6C:22:C5:53:1B:F9:B3:9B:02:64:A8:FF:D4:60:7A:07:FE
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019D25F139C30E45B71D6F21585444FA5302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 05CB
Signing time: Wed 25 Mar 2026 17:00:59 +0000
Manifest this update: Wed 25 Mar 2026 17:00:59 +0000
Manifest next update: Thu 26 Mar 2026 17:00:59 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: 4Jq78HdK5iM54tMsJ+dR3cT7PGyMjBBPqptMsJ+Dhiw=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:39:c3:0e:45:b7:1d:6f:21:58:54:44:fa:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Mar 25 17:00:59 2026 GMT
Not After : Mar 26 17:00:59 2026 GMT
Subject: CN=2808ee6c22c5531bf9b39b0264a8ffd4607a07fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:15:77:60:91:61:92:96:7c:36:f9:4a:fb:
93:ac:9d:33:61:3c:ec:9e:ae:e1:80:7a:c1:da:14:
d9:07:28:fc:ea:f5:43:62:7d:b5:50:38:71:a7:6f:
3e:6c:8b:be:07:c1:53:48:7d:60:85:d8:71:b3:9d:
cc:b9:68:72:2f:71:ac:41:f7:fc:10:e2:46:ce:19:
7a:fc:a9:b6:0d:3c:a1:b5:ef:c8:d6:47:1a:1b:bd:
a7:57:1f:b6:45:b5:1e:e4:56:99:85:8b:1c:ad:23:
3e:91:57:97:ae:cd:08:4b:32:b7:0e:b8:c5:0f:9e:
92:9e:8c:b4:10:ed:4a:73:23:e4:76:4f:e1:9f:35:
0e:ea:cf:8f:16:e9:55:27:23:33:c3:00:33:de:68:
5f:39:f3:57:c0:e3:d8:bd:6b:7f:e6:2e:7b:40:0a:
55:4e:ef:dc:89:9c:70:af:5f:0a:e3:e3:12:1d:8f:
01:e3:be:9e:e9:07:fa:65:82:27:17:e4:a1:19:ea:
2b:d7:59:16:b9:a3:c9:2f:23:42:40:2b:20:d2:bf:
dc:24:fa:d3:a4:66:41:f3:65:15:08:52:02:f1:92:
d6:23:3a:1a:f8:1f:95:79:3a:2d:38:75:03:11:5c:
9a:2b:df:60:25:e7:cc:9a:c6:5a:e3:35:d4:c0:f5:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:EE:6C:22:C5:53:1B:F9:B3:9B:02:64:A8:FF:D4:60:7A:07:FE
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:45:03:62:27:d1:c8:8e:f7:3b:58:98:51:42:1f:16:75:
e4:36:ed:e1:88:e4:e7:83:49:dd:17:e3:b9:54:82:2c:7a:a6:
92:49:81:e4:75:41:8b:26:04:e8:2a:b0:c5:9a:90:9a:0c:dc:
bc:ee:58:50:74:60:4f:aa:a4:86:ba:8c:65:7c:70:14:9f:8d:
45:69:88:b1:fa:3a:5a:a3:6f:85:c6:d8:85:95:30:96:95:08:
6b:2b:58:88:17:4c:a7:ec:6f:e9:f6:2c:ba:bd:b4:88:a5:c2:
bd:a4:d9:4e:f8:29:26:e6:86:fb:6e:43:b7:91:cb:84:d8:d5:
e1:59:5e:a7:f3:23:96:31:a0:6b:00:51:7c:95:79:fe:96:a0:
5a:45:64:3d:f3:bd:b4:31:52:89:c0:1c:3d:a1:f2:e1:ba:63:
59:0c:68:17:be:af:db:4e:2a:24:4a:e0:dc:c6:a4:19:9a:23:
ed:62:11:98:8e:e4:7b:4c:8f:f5:cf:21:d7:60:78:05:a9:63:
30:f1:e7:71:13:c7:1d:c4:23:ac:29:5e:7a:24:d1:87:2a:64:
9a:33:9e:af:af:24:dd:d0:82:e8:e8:ac:3e:0c:7e:25:cf:e0:
78:ae:03:8b:80:d7:ef:ca:be:a6:02:80:e6:67:4b:af:a7:ec:
7b:1e:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:11 2026 by rpki-client