Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: ndrbq/RxR+zecVBQXIawrzz2m062EOtANXgeJHXybfE=
Subject key identifier: 4F:A4:90:80:5F:FD:56:41:53:CA:3B:C8:0F:5D:21:92:52:D6:BF:9B
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019F93C9451A27FAC52849799762E18CFD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 070D
Signing time: Fri 24 Jul 2026 11:01:08 +0000
Manifest this update: Fri 24 Jul 2026 11:01:08 +0000
Manifest next update: Sat 25 Jul 2026 11:01:08 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: 5LWeACBcuhKj4mjI2UnG1zPiFlLO44rChwc2nV3KgVw=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:45:1a:27:fa:c5:28:49:79:97:62:e1:8c:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jul 24 11:01:08 2026 GMT
Not After : Jul 25 11:01:08 2026 GMT
Subject: CN=4fa490805ffd564153ca3bc80f5d219252d6bf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:b0:ce:77:7a:e7:8b:e2:03:7a:24:bb:67:
ab:42:f0:09:45:f7:f1:d5:b6:f1:2b:6b:8b:6e:ce:
48:2d:ed:3b:42:bb:4f:c9:59:d4:c0:c6:53:81:5d:
3c:8f:97:c0:dc:23:13:ac:66:d6:b6:f1:35:7b:a8:
33:f3:b6:c4:71:6d:ed:5c:4f:41:47:e6:88:25:8f:
7f:d3:22:96:3e:e0:87:06:d1:f3:75:21:e9:44:55:
d6:20:d4:19:7d:1f:8e:ec:aa:98:5c:43:61:1d:9c:
18:3f:97:42:58:5a:f8:8d:3a:09:34:c1:5d:27:39:
95:06:93:ff:b3:56:cb:ee:d9:50:ed:0b:93:9e:c5:
5c:88:4a:ed:1e:c7:41:70:a4:ce:33:85:fa:48:5e:
64:9b:42:94:28:f2:eb:81:59:a0:2e:13:d0:08:f9:
df:9f:ea:df:d5:11:5e:23:59:75:49:2d:86:22:8e:
d3:03:23:5f:3f:e2:73:d4:4e:23:00:80:0e:eb:b2:
77:72:4b:74:5b:49:65:c4:ce:bf:cb:30:4c:85:4b:
db:e2:4a:ee:2e:07:62:c4:e5:04:a3:fb:79:04:3d:
b1:dc:46:69:90:cd:07:e7:db:ff:9b:6c:27:c0:d2:
f9:56:32:9e:30:77:ca:64:b3:75:17:84:40:8b:7a:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A4:90:80:5F:FD:56:41:53:CA:3B:C8:0F:5D:21:92:52:D6:BF:9B
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:12:85:cf:95:1a:1a:51:c1:05:37:8c:c6:b5:50:60:90:d0:
ab:7c:1f:75:92:4c:f2:99:8c:51:48:51:2c:56:a8:ae:4a:89:
92:a6:84:cb:a0:55:cc:12:02:65:1b:1b:80:44:e4:f4:5f:4b:
49:6c:38:10:04:74:de:f0:65:21:36:5f:e5:0b:a1:e7:8d:c7:
e7:cd:3a:d6:6a:06:ff:42:0c:ff:2d:8b:2b:0e:20:33:01:c5:
91:52:68:0e:d9:66:5f:af:6e:b0:76:15:3e:10:cf:55:0d:ef:
60:22:4d:57:61:e0:86:1b:96:4c:f8:ff:95:eb:48:73:04:7d:
f0:63:69:61:23:b3:2b:53:79:c1:14:69:58:9e:0c:2a:0c:91:
b3:4f:78:e9:bd:21:fb:0d:4c:ae:12:2c:d6:1d:f1:fe:ea:1b:
b6:b1:9f:05:b7:1c:62:9b:6c:91:f9:89:5b:e8:fa:4f:f3:05:
d8:b8:d0:76:e2:d2:08:1d:3c:10:25:e6:2b:fe:31:ff:47:b0:
6b:4e:dd:6f:c1:17:e9:a2:1f:85:72:a7:26:da:2f:fa:be:42:
c8:78:fa:84:be:26:c7:55:e5:af:ae:e4:a9:ba:9e:93:bf:36:
03:35:f0:49:a7:5d:cd:51:69:08:62:99:03:44:74:8a:df:07:
76:0b:d5:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyUUaJ/rFKEl5l2LhjP0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0
NGQ2NjEwHhcNMjYwNzI0MTEwMTA4WhcNMjYwNzI1MTEwMTA4WjAzMTEwLwYDVQQD
Eyg0ZmE0OTA4MDVmZmQ1NjQxNTNjYTNiYzgwZjVkMjE5MjUyZDZiZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshawznd654viA3oku2erQvAJRffx
1bbxK2uLbs5ILe07QrtPyVnUwMZTgV08j5fA3CMTrGbWtvE1e6gz87bEcW3tXE9B
R+aIJY9/0yKWPuCHBtHzdSHpRFXWINQZfR+O7KqYXENhHZwYP5dCWFr4jToJNMFd
JzmVBpP/s1bL7tlQ7QuTnsVciErtHsdBcKTOM4X6SF5km0KUKPLrgVmgLhPQCPnf
n+rf1RFeI1l1SS2GIo7TAyNfP+Jz1E4jAIAO67J3ckt0W0llxM6/yzBMhUvb4kru
LgdixOUEo/t5BD2x3EZpkM0H59v/m2wnwNL5VjKeMHfKZLN1F4RAi3oVqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+kkIBf/VZBU8o7yA9dIZJS1r+bMB8GA1UdIwQY
MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt
MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0
LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBKFz5Ua
GlHBBTeMxrVQYJDQq3wfdZJM8pmMUUhRLFaorkqJkqaEy6BVzBICZRsbgETk9F9L
SWw4EAR03vBlITZf5Quh543H58061moG/0IM/y2LKw4gMwHFkVJoDtlmX69usHYV
PhDPVQ3vYCJNV2HghhuWTPj/letIcwR98GNpYSOzK1N5wRRpWJ4MKgyRs0946b0h
+w1MrhIs1h3x/uobtrGfBbccYptskfmJW+j6T/MF2LjQduLSCB08ECXmK/4x/0ew
a07db8EX6aIfhXKnJtov+r5CyHj6hL4mx1Xlr67kqbqek782AzXwSaddzVFpCGKZ
A0R0it8HdgvVQg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:20 2026 by rpki-client