Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: 7wBmGmKLlkTpSrtgMc/eK5Wca20w1Lh0EiRqmFEREK8=
Subject key identifier: 64:F1:01:6C:1D:4C:04:D9:48:7E:CC:78:A7:9E:AA:7E:8B:B8:01:B1
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 01A0DC4D6CBC5CD070B668420186C17809BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 0353
Signing time: Sat 26 Sep 2026 06:00:56 +0000
Manifest this update: Sat 26 Sep 2026 06:00:56 +0000
Manifest next update: Sun 27 Sep 2026 06:00:56 +0000
Files and hashes: 1: Jy76E1q7dDTCejXtPafJsRSES8Y.roa (hash: 1WiGvZJxKYYrQ+5QCN5Y0ow1dlNCCLa6+9MgNHjV0TQ=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: WzZlzmqa4PXPjzzRZvxtu10WzEaBXqw++3YN8DAB0PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:6c:bc:5c:d0:70:b6:68:42:01:86:c1:78:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Sep 26 06:00:56 2026 GMT
Not After : Sep 27 06:00:56 2026 GMT
Subject: CN=64f1016c1d4c04d9487ecc78a79eaa7e8bb801b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:ad:95:8c:aa:b4:73:d0:b0:4f:65:11:68:
a4:62:a6:39:73:d0:8f:86:07:b9:91:f2:24:3f:b7:
2d:3f:9d:20:f0:ff:3f:f1:68:a8:87:a7:34:b8:04:
33:95:b3:23:16:04:cc:59:14:49:13:8b:cc:65:9c:
84:d7:d6:a1:f0:ea:51:f6:f0:8f:d5:39:84:1e:06:
bd:0b:30:25:d4:96:cf:55:bd:df:dc:2b:12:4f:4f:
ae:cd:09:1c:cc:3d:5b:f6:53:6f:f7:57:d5:91:9e:
99:06:55:d7:2a:94:bf:86:06:d6:bc:20:85:3a:5d:
36:7e:30:4b:4d:d3:aa:ed:d3:17:85:fd:ab:b6:92:
5f:6a:70:49:44:73:01:b9:70:cd:e8:5f:f5:3e:e6:
18:68:b3:d4:ec:d1:bb:f8:a7:45:cd:58:a1:0e:83:
46:d7:38:80:42:00:57:d3:43:a4:2d:6a:1c:98:17:
8b:75:39:5a:ad:84:c2:66:be:52:de:36:72:96:ec:
72:cf:d2:64:68:92:5e:89:61:53:14:35:2e:46:90:
9c:b8:ec:b8:9e:29:ae:e0:27:9b:95:39:ce:94:60:
2e:81:fd:d7:e3:54:3f:23:3b:2a:1d:06:3e:09:3e:
80:ad:8b:2c:e9:0c:e7:fa:92:5d:43:38:e4:74:c6:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:01:6C:1D:4C:04:D9:48:7E:CC:78:A7:9E:AA:7E:8B:B8:01:B1
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7c:aa:58:a5:d0:ed:69:6e:7c:f2:fc:c7:bd:98:e8:73:66:
54:26:d3:85:a2:48:2c:15:03:30:ce:b0:bd:4d:d9:da:6e:f4:
b6:23:0c:dd:ac:27:e1:57:b1:78:f1:4c:55:ae:4a:56:89:35:
44:8b:41:22:9f:6c:23:75:39:02:9c:97:78:91:b5:49:61:16:
9a:06:4b:d4:0f:cf:b2:21:bd:56:49:a5:af:70:41:87:76:b6:
30:a5:15:4d:fa:00:67:09:7d:65:10:99:48:38:74:71:f4:20:
36:de:48:1d:ca:9f:f0:44:30:2b:1f:d2:4d:b4:50:86:dc:18:
dc:f7:c3:8f:2f:7c:42:24:99:c8:52:90:6b:89:22:2b:7c:18:
27:11:5a:df:b6:b2:9f:75:15:78:94:05:d7:79:9c:73:2b:50:
fc:09:d3:a7:41:d3:17:54:ff:0f:d2:ce:c1:b5:b6:66:c1:bb:
b0:7a:ed:dc:d7:16:10:cd:77:be:36:0e:a7:5d:98:da:d3:18:
7d:ec:f6:2a:b1:31:33:16:84:13:b1:e2:f0:3f:7d:bd:82:b7:
69:d8:49:e6:57:a6:2e:b7:22:e0:7c:a3:a3:95:17:a7:4c:82:
f6:c9:ed:02:ab:9c:bd:c7:10:e8:3e:3a:49:b5:75:9a:a2:42:
3f:a3:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:38 2026 by rpki-client