Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
File: nyjbpUvBou6fd-Br-AglbdyTh-g.mft (raw, json)
Hash identifier: DDgeR5PWOAaDF3TLCVOtuwI4vLThY6IBQxgQ9VTwE5A=
Subject key identifier: C5:52:E2:D6:F8:3D:D7:38:D3:A3:BD:3F:27:47:75:F3:01:91:B3:A2
Authority key identifier: 9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
Certificate issuer: /CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Certificate serial: 01A0D048AC866CC1EC1E9E5615DAC8052729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
Manifest number: 0A84
Signing time: Wed 23 Sep 2026 22:00:18 +0000
Manifest this update: Wed 23 Sep 2026 22:00:18 +0000
Manifest next update: Thu 24 Sep 2026 22:00:18 +0000
Files and hashes: 1: lJD6p3-p-n_W5CvvLwZFfJ2LcYI.roa (hash: 1gf6kwpB4aZBFtoY7dfhoa70Xl78vIvTEcS1r33qXwk=)
2: nyjbpUvBou6fd-Br-AglbdyTh-g.crl (hash: HG1wBB8cERSS9opFWtEvy5mc+O2g107fkeaojz7mdT8=)
3: uL1mdJ79XSgxSFe44nRdar1tVWo.asa (hash: IwV1hRMVH7Fq1Pt3OoZ/Oc/X0PZgOK9ClushDK3YFt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:ac:86:6c:c1:ec:1e:9e:56:15:da:c8:05:27:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f28dba54bc1a2ee9f77e06bf808256ddc9387e8
Validity
Not Before: Sep 23 22:00:18 2026 GMT
Not After : Sep 24 22:00:18 2026 GMT
Subject: CN=c552e2d6f83dd738d3a3bd3f274775f30191b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:c0:4c:5a:d0:93:45:9d:3d:ed:7a:bf:9a:
68:7a:64:60:14:8d:d1:11:21:0f:97:6e:17:7a:59:
eb:be:45:96:8a:dd:57:be:0f:0d:45:0b:52:a3:0b:
e5:45:b1:65:11:56:fa:7a:f2:d9:b7:b2:2a:18:2d:
55:af:b0:85:ac:7a:95:cd:a3:1b:69:68:7e:75:a5:
da:67:b1:30:98:ba:45:be:14:f9:72:1c:94:8b:a3:
08:a6:fd:e7:8a:b7:da:b1:fa:b2:b0:3b:43:8c:7a:
72:cb:5f:a8:60:90:ae:c2:17:74:c8:e1:0a:8e:91:
96:f7:52:5d:fb:38:84:80:d7:d6:e6:31:14:cc:18:
10:76:8e:79:23:c3:93:2e:9e:17:a3:32:40:f2:50:
21:ae:d9:00:58:8c:ca:76:d0:c6:29:f0:b6:4f:7f:
10:a5:5b:50:b1:30:e5:20:38:b5:88:c2:44:44:d2:
1d:a4:87:f4:c2:d2:a9:09:87:a2:3f:96:3f:f8:c1:
33:d6:c1:94:e6:56:77:28:2f:6f:11:2d:63:de:cf:
13:52:05:17:cb:34:b2:5c:70:18:e8:60:e2:ac:5e:
f7:7f:33:65:c1:b2:40:68:e6:02:ef:d3:5e:12:5b:
54:ab:dd:4c:76:a9:69:59:c2:59:b3:b1:0f:40:d3:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:E2:D6:F8:3D:D7:38:D3:A3:BD:3F:27:47:75:F3:01:91:B3:A2
X509v3 Authority Key Identifier:
keyid:9F:28:DB:A5:4B:C1:A2:EE:9F:77:E0:6B:F8:08:25:6D:DC:93:87:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyjbpUvBou6fd-Br-AglbdyTh-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a8fb6-e6a9-4bc8-ab02-df3e58354b81/1/nyjbpUvBou6fd-Br-AglbdyTh-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e7:bc:35:b5:6c:c4:bf:90:6e:13:aa:02:07:61:c0:fe:e9:
f3:32:41:71:42:47:7a:6d:5e:fe:c6:b6:c0:94:7a:58:8a:38:
e6:d6:4b:e3:61:c2:5c:42:3e:1d:04:ad:e8:b7:87:df:b3:56:
09:6d:90:50:8b:ac:60:f0:e3:b5:45:a0:1c:86:a7:36:0c:a7:
71:6e:7a:1b:bd:36:6d:97:f8:9d:18:f4:06:e8:71:c9:a1:e1:
e7:06:2e:49:e2:63:55:08:4e:75:a4:58:54:41:63:ca:ac:37:
b5:fb:f9:3f:c4:a1:39:45:04:98:90:a6:1d:de:cd:6b:87:b3:
2e:f3:17:d8:39:18:0b:f4:98:a3:44:5d:11:d8:a1:c9:c0:71:
fb:3a:74:d8:ab:fe:21:85:3c:77:83:40:d5:7f:20:29:0b:eb:
18:91:ce:3b:a5:c8:0f:dc:7f:c0:0d:37:7b:32:c9:82:19:74:
6a:ca:bc:d1:9c:c9:ac:1b:28:ed:f9:cb:a7:93:8f:0e:bd:b2:
2f:57:40:f0:9d:ee:5d:1b:26:66:a7:de:0f:8b:79:0c:88:04:
bf:16:0c:e1:00:d5:df:4c:89:9f:f7:5c:f9:d5:d7:5f:2b:c2:
6e:ad:28:d5:31:91:83:7b:dd:f3:c1:ac:dc:92:74:95:9d:71:
ee:26:e2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:09:21 2026 by rpki-client