Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
File: nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft (raw, json)
Hash identifier: oRqRjRMMjybqa858RRA4gjJoGBElnBpb19MRa6Ah3Bk=
Subject key identifier: 74:F4:D4:3F:20:57:76:B0:19:32:36:4A:0B:56:C3:61:64:17:45:90
Authority key identifier: 9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E
Certificate issuer: /CN=9f2a686b1c25d44c7dbd4d4a31fe0c7afd02a12e
Certificate serial: 019D2B173B8A3A947EE8F69E92D97A86373D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
Manifest number: 12
Signing time: Thu 26 Mar 2026 17:00:35 +0000
Manifest this update: Thu 26 Mar 2026 17:00:35 +0000
Manifest next update: Fri 27 Mar 2026 17:00:35 +0000
Files and hashes: 1: 1-vCuLQv8-0dOJxqABaWxM4UUc8I.roa (hash: E0Bqgi4xo21RkZJec+827sz7pg8AMyWIq6lhPjrYbo8=)
2: nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl (hash: kgmXQo8eWaSS3nj37f8k0qSJDD+5Tv86NksCHj24e1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:3b:8a:3a:94:7e:e8:f6:9e:92:d9:7a:86:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2a686b1c25d44c7dbd4d4a31fe0c7afd02a12e
Validity
Not Before: Mar 26 17:00:35 2026 GMT
Not After : Mar 27 17:00:35 2026 GMT
Subject: CN=74f4d43f205776b01932364a0b56c36164174590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:91:14:fb:a2:be:c5:89:92:90:5a:bf:72:
84:2e:14:da:35:39:c4:47:f9:06:33:ad:46:96:f7:
34:e7:23:7d:c7:a2:21:69:1f:99:b0:79:9c:2f:53:
1e:d5:ef:fd:df:7a:f3:22:76:02:6f:14:8c:13:57:
7d:1d:a0:c5:83:70:a3:05:de:09:f1:c0:b8:da:2e:
d7:e0:16:39:a9:aa:05:f2:82:3c:07:4b:9b:5b:84:
c7:62:e3:41:04:68:33:80:27:49:44:69:2a:b4:26:
40:02:40:8e:81:8e:f3:ea:8e:de:de:6a:ff:89:4b:
93:9e:4d:df:cb:d2:1a:9d:cd:8d:bd:56:86:be:4c:
a0:cd:ba:85:3a:48:49:e8:93:f9:a6:a9:21:42:ba:
cb:7d:84:50:f6:31:ca:db:50:40:07:24:fe:10:59:
36:df:99:b6:ba:fa:82:0c:2a:64:fb:de:49:eb:b0:
ec:c5:d1:30:45:2a:2b:13:45:11:97:61:82:e3:3b:
56:16:fc:69:48:35:74:e4:eb:7b:66:ed:0a:63:b4:
2b:96:46:30:dd:e2:a0:d6:85:b1:ab:7b:e1:87:68:
af:d1:9a:0a:19:55:3c:06:be:43:2c:86:6e:21:4f:
ed:3e:27:81:a7:6a:85:49:59:49:4a:73:24:37:4a:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:D4:3F:20:57:76:B0:19:32:36:4A:0B:56:C3:61:64:17:45:90
X509v3 Authority Key Identifier:
keyid:9F:2A:68:6B:1C:25:D4:4C:7D:BD:4D:4A:31:FE:0C:7A:FD:02:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nypoaxwl1Ex9vU1KMf4Mev0CoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5bf8a9-d434-454b-8885-525d626799ef/1/nypoaxwl1Ex9vU1KMf4Mev0CoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:86:19:9f:54:8e:50:7a:e7:b6:e4:8d:85:7e:09:c9:c1:50:
75:9e:70:04:5a:46:f4:e5:3c:68:36:7c:35:dd:0f:d7:a6:b1:
b5:84:eb:97:19:e6:b9:1f:d7:ed:a3:f8:75:42:25:31:32:07:
32:f5:af:9e:ee:d6:35:6c:2a:f4:d7:01:3f:2e:9d:3b:bd:12:
6b:c0:ff:72:00:a3:7e:94:51:43:e9:27:61:2f:3f:d6:53:ad:
0c:37:72:73:f7:c1:8e:48:03:95:1e:4d:f4:d2:50:45:19:0a:
97:f5:c0:d9:42:5e:b8:bd:b2:08:3e:22:42:86:3d:54:08:a7:
a2:97:bb:21:2e:5c:32:14:2b:9b:71:5c:71:1c:4e:62:74:df:
a4:74:80:8b:b5:1f:13:4e:33:4d:e3:18:b5:48:02:3f:cb:1f:
4c:1e:7e:39:4c:8d:0d:dd:8d:97:6b:3b:9f:14:34:dc:30:83:
0a:a2:b9:b2:43:15:09:85:6e:06:27:f4:86:59:e6:bb:ea:e0:
1c:9c:a9:87:2f:11:d7:3a:1e:d0:17:eb:51:9d:10:55:b7:05:
0f:33:f7:dc:f9:c1:2d:e9:f8:b8:e9:5c:ba:9d:cf:09:3a:23:
26:7e:f9:dc:06:75:e8:9c:41:d9:93:97:a5:e4:aa:3e:84:5a:
0a:d5:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:26:17 2026 by rpki-client