Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: JuXcNzynSaI/OPAB0QMIqcfAOPWVZQgE4+jawCxF9yE=
Subject key identifier: E3:9E:67:7B:53:75:E3:AB:40:EA:5E:63:AA:11:F2:3E:19:94:75:B3
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 019D2704D0B0B0CE01E3657B6997F9C391B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 089D
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: CE4UMYCYu5viiUnRtcc1B5ESdk4AXcZoBtDKRGRGt4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d0:b0:b0:ce:01:e3:65:7b:69:97:f9:c3:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=e39e677b5375e3ab40ea5e63aa11f23e199475b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:2b:12:0d:cc:d0:4f:6f:ce:b2:98:9a:f2:
3f:ce:3f:14:64:10:c0:74:fc:f7:db:bb:44:10:bc:
6a:a7:c7:d7:31:7c:f3:a2:62:6d:da:c2:3a:ae:16:
4d:d5:30:ff:a1:6c:43:2c:59:78:50:57:57:49:80:
9d:f4:ad:40:46:ad:73:a8:bf:63:78:19:bf:6f:a0:
86:ca:5e:df:e8:e5:90:a6:ce:a7:2d:65:71:46:84:
87:2d:8b:12:e4:28:b2:16:cc:28:4a:09:e8:01:69:
52:14:11:16:83:49:c3:f4:24:23:d0:b4:99:f8:3e:
5f:c8:a2:d5:7c:71:ac:e5:0d:9a:b8:ec:64:dd:5c:
61:62:4f:25:3e:f2:2b:c9:d3:0c:04:e6:46:98:8d:
23:a7:2e:b2:86:06:4c:f8:df:7b:81:da:0b:b1:a5:
0c:99:18:3b:b2:72:14:e5:9f:61:c1:59:95:79:61:
97:32:fe:42:df:21:26:3c:6d:ba:03:a9:e4:10:8e:
58:91:76:bc:22:0c:4b:77:71:18:82:e3:1d:75:a2:
0a:b4:31:01:97:ae:12:0c:95:77:b4:5a:65:d1:87:
50:a6:8a:9b:fb:8f:e2:b7:da:24:7b:95:85:94:5f:
60:fa:ed:ea:32:ae:8c:97:15:b6:1d:8a:09:ee:b5:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:67:7B:53:75:E3:AB:40:EA:5E:63:AA:11:F2:3E:19:94:75:B3
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fa:7a:2e:ca:24:cf:1f:44:a4:45:f3:75:3f:a0:1a:76:d8:
6e:eb:4d:aa:63:09:16:81:0b:5d:9b:90:23:e9:ee:4f:c5:88:
d7:cc:d8:24:62:61:b9:55:fb:f5:46:e8:f1:21:d4:54:b4:b8:
a0:4c:ac:07:a6:85:87:03:16:35:16:2a:0a:86:fe:70:56:b8:
6d:fc:e1:32:fd:86:01:b6:8d:3d:0d:c0:54:66:3a:7c:1d:04:
22:98:71:6a:9c:1a:d5:7f:3b:01:74:16:d8:b3:44:fa:d9:ca:
c5:0a:c7:ca:48:66:98:77:62:a8:68:61:ac:ff:5c:19:62:f7:
19:25:ed:3d:f0:c8:db:6c:b3:82:08:db:5d:66:32:d2:71:27:
3c:ed:50:f5:c5:24:6a:40:aa:3c:d7:dd:86:19:77:f3:a3:79:
d4:ef:cf:86:e0:f9:72:4a:38:d7:b8:0f:41:ee:68:f9:f3:38:
7a:20:d0:b1:ca:ef:f7:cf:4a:9b:35:af:df:03:7d:a5:97:da:
ec:86:3e:19:2c:f5:1a:0d:ad:25:17:41:32:c3:f8:3b:5b:51:
03:d8:2d:75:ae:33:7f:d7:e5:ba:67:a8:59:bf:6c:b6:2f:bc:
87:47:c3:94:bd:bf:68:6f:bb:cd:ec:27:c8:4f:5c:7b:50:1c:
e4:e4:71:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNCwsM4B42V7aZf5w5GwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMjhkYmE1NGJjMWEyZWU5Zjc3ZTA2YmY4MDgyNTZkZGM5
Mzg3ZTgwHhcNMjYwMzI1MjIwMjAwWhcNMjYwMzI2MjIwMjAwWjAzMTEwLwYDVQQD
EyhlMzllNjc3YjUzNzVlM2FiNDBlYTVlNjNhYTExZjIzZTE5OTQ3NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoMrEg3M0E9vzrKYmvI/zj8UZBDA
dPz327tEELxqp8fXMXzzomJt2sI6rhZN1TD/oWxDLFl4UFdXSYCd9K1ARq1zqL9j
eBm/b6CGyl7f6OWQps6nLWVxRoSHLYsS5CiyFswoSgnoAWlSFBEWg0nD9CQj0LSZ
+D5fyKLVfHGs5Q2auOxk3VxhYk8lPvIrydMMBOZGmI0jpy6yhgZM+N97gdoLsaUM
mRg7snIU5Z9hwVmVeWGXMv5C3yEmPG26A6nkEI5YkXa8IgxLd3EYguMddaIKtDEB
l64SDJV3tFpl0YdQpoqb+4/it9oke5WFlF9g+u3qMq6MlxW2HYoJ7rUlcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOeZ3tTdeOrQOpeY6oR8j4ZlHWzMB8GA1UdIwQY
MBaAFJ8o26VLwaLun3fga/gIJW3ck4foMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDIt
ZGYzZTU4MzU0YjgxLzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83YThmYjYtZTZhOS00YmM4LWFiMDItZGYzZTU4MzU0Yjgx
LzEvbnlqYnBVdkJvdTZmZC1Cci1BZ2xiZHlUaC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfp6Lsok
zx9EpEXzdT+gGnbYbutNqmMJFoELXZuQI+nuT8WI18zYJGJhuVX79Ubo8SHUVLS4
oEysB6aFhwMWNRYqCob+cFa4bfzhMv2GAbaNPQ3AVGY6fB0EIphxapwa1X87AXQW
2LNE+tnKxQrHykhmmHdiqGhhrP9cGWL3GSXtPfDI22yzggjbXWYy0nEnPO1Q9cUk
akCqPNfdhhl386N51O/PhuD5cko417gPQe5o+fM4eiDQscrv989KmzWv3wN9pZfa
7IY+GSz1Gg2tJRdBMsP4O1tRA9gtda4zf9flumeoWb9sti+8h0fDlL2/aG+7zewn
yE9ce1Ac5ORxZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:04 2026 by rpki-client