Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: VqsO1AldJ1uv++G3aU+0h0A7z/MF439HDQEIZnkM1SA=
Subject key identifier: ED:03:04:49:C7:7B:A1:E4:8E:87:2E:3E:56:14:8F:68:0C:40:51:02
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019E1F10B9869E2D463546EE024702219967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 064C
Signing time: Wed 13 May 2026 02:00:50 +0000
Manifest this update: Wed 13 May 2026 02:00:50 +0000
Manifest next update: Thu 14 May 2026 02:00:50 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: 4E9pPB3xoLJ2CP4jNXGou14DPr6xda/V1ioncr+YMfY=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b9:86:9e:2d:46:35:46:ee:02:47:02:21:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: May 13 02:00:50 2026 GMT
Not After : May 14 02:00:50 2026 GMT
Subject: CN=ed030449c77ba1e48e872e3e56148f680c405102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:36:a7:e4:e9:bb:06:c1:6f:18:86:f2:bf:
2a:52:38:95:93:a0:15:e3:49:ca:47:d7:30:2a:5d:
73:60:1c:93:94:67:3f:9a:34:c9:b7:f9:79:1c:17:
bc:8c:56:2f:8c:a6:b0:83:e1:16:a7:33:90:41:ee:
ad:4d:7f:9e:89:79:cd:47:6d:69:6e:02:65:2c:8e:
c2:37:e7:0e:d8:ca:f9:f7:a0:ed:a1:41:f7:88:88:
3c:16:de:10:e5:ba:70:03:e9:36:1e:20:17:d6:0f:
60:9e:5a:cd:b0:4c:cc:41:5b:f1:15:11:42:5e:e1:
eb:bd:79:03:60:1f:57:fc:d8:56:6c:db:b8:2a:58:
11:c5:8d:53:8c:14:c7:75:72:f8:7d:8a:7c:c2:3f:
b8:7f:58:63:55:27:21:5b:14:46:b2:59:4b:6d:06:
f7:f3:3d:b8:6b:84:58:bd:16:a0:b6:67:68:37:08:
d4:89:f5:7f:0b:3f:83:1d:7c:3a:91:ef:bf:11:b4:
b5:18:c4:9b:51:09:ab:5f:0d:92:da:28:1b:6f:bb:
7f:c4:c0:85:04:c5:bc:28:01:47:34:8a:4a:e2:c1:
b9:71:6f:86:e4:2a:9e:9a:6a:3c:f9:e4:e6:92:6d:
f4:79:01:ba:b9:47:41:d5:b2:c2:cc:f5:f1:15:1a:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:04:49:C7:7B:A1:E4:8E:87:2E:3E:56:14:8F:68:0C:40:51:02
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:48:d9:b2:c0:42:66:2b:43:aa:f7:0f:3c:58:c4:82:2a:
cb:7f:86:f0:a2:d6:51:6c:11:3d:4a:28:f4:e0:12:c5:34:9f:
fa:35:0b:63:8b:94:e1:5d:f1:e9:c2:76:23:7c:45:1a:33:d4:
5f:15:4d:69:34:cd:22:b7:a0:b5:c2:1b:c9:9c:91:d1:42:c1:
eb:7a:33:f2:37:7f:dd:90:2e:3f:00:41:d5:60:41:07:89:8b:
b0:00:4e:55:cb:7e:b7:9d:60:57:38:70:cd:06:d3:18:10:86:
27:62:53:2e:3a:8d:f3:eb:08:f1:7a:7f:50:e3:66:a2:67:41:
1a:a4:02:07:47:9b:46:fb:bd:0a:9e:60:02:31:38:3f:6f:c0:
6e:46:d2:f9:83:6e:ce:d7:5c:33:be:98:e9:ca:b4:44:91:76:
33:f1:d3:f5:66:f4:25:96:87:d9:0f:cd:53:16:91:96:8c:ba:
9b:fc:c5:60:12:59:aa:a4:d3:c3:b4:0e:7c:d9:1f:be:44:a4:
11:6b:b2:ca:58:77:4d:2f:48:b1:0a:5b:87:09:7c:34:fa:9d:
e1:bd:57:c6:c7:1b:a2:35:51:f1:2b:b1:17:12:5a:20:4b:e6:
03:ee:dc:7c:00:3a:62:d2:b9:81:a7:a8:af:b0:dd:2b:d7:f0:
29:02:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:46 2026 by rpki-client