Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: mmrvae4VQVa9CZVu7AEn5HJf1Lpo7U1ltWfBAQw+f/E=
Subject key identifier: 43:CD:47:E1:59:5C:81:14:2D:DD:26:2E:30:CE:92:93:EA:6C:20:A9
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 019F93FF67A64484B587F938F1CA461304E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 02A9
Signing time: Fri 24 Jul 2026 12:00:16 +0000
Manifest this update: Fri 24 Jul 2026 12:00:16 +0000
Manifest next update: Sat 25 Jul 2026 12:00:16 +0000
Files and hashes: 1: Jy76E1q7dDTCejXtPafJsRSES8Y.roa (hash: 1WiGvZJxKYYrQ+5QCN5Y0ow1dlNCCLa6+9MgNHjV0TQ=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: FbF3qWXWEVzssRFYT0AM0TcjdGlxct/RAK1MOLvlVxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:67:a6:44:84:b5:87:f9:38:f1:ca:46:13:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Jul 24 12:00:16 2026 GMT
Not After : Jul 25 12:00:16 2026 GMT
Subject: CN=43cd47e1595c81142ddd262e30ce9293ea6c20a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:62:50:94:af:9e:9b:6c:b2:d4:ee:73:ba:
71:22:27:03:42:02:a2:7d:35:8e:38:df:f7:1d:35:
12:b6:0b:21:6b:87:8c:22:db:ad:2a:30:de:3f:9e:
e0:d3:da:e5:8f:f2:4d:e0:0e:bb:b8:af:6a:e2:4e:
cc:82:5e:10:5f:45:60:a4:8e:b7:43:f9:a5:91:4d:
5c:9b:45:84:9c:e0:60:be:0b:62:6f:f2:f0:df:4f:
17:48:01:81:0f:f1:18:14:e6:8e:8a:bc:1e:84:70:
1c:c9:32:de:4a:5e:c9:72:ac:00:dd:9b:bc:82:ae:
f1:71:90:d0:01:fa:5c:bd:8c:17:71:d1:8e:50:d0:
1f:2c:84:e1:1e:d3:6b:2e:bb:5e:3c:d1:b5:6c:34:
4b:ff:54:ae:bf:55:77:78:b5:27:d8:f2:9a:98:43:
b5:91:12:8b:23:0a:a6:66:35:37:b8:a4:47:50:55:
10:32:f2:47:a9:5f:7f:f0:ef:82:a8:3a:e1:8c:6e:
7d:65:82:0e:fd:5a:41:77:b7:32:47:6e:59:e7:7f:
d2:cc:0c:98:d2:f1:35:7c:94:f2:dc:35:dd:a4:d7:
fe:5a:9b:11:f0:27:bf:9c:b7:98:aa:75:3b:4d:9c:
09:d6:58:9d:95:62:88:40:6b:c0:16:6a:56:3f:f5:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:47:E1:59:5C:81:14:2D:DD:26:2E:30:CE:92:93:EA:6C:20:A9
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:33:06:d7:4a:59:1f:57:10:ca:51:26:17:25:b4:fe:13:
22:ba:27:ca:b5:90:08:6e:ec:f5:fd:53:d6:a7:26:fb:c9:4a:
66:fc:d2:2d:f6:10:a7:55:bc:84:b4:27:4b:53:2e:81:a7:c8:
9b:46:b0:e2:f0:8d:81:04:a1:7b:bf:c8:17:2b:7a:90:65:38:
2d:b0:d1:98:cf:3d:c9:b7:7d:99:87:45:bc:65:bb:22:77:c6:
fc:2b:36:a9:76:95:85:de:ac:8a:e5:8c:b8:03:6e:29:21:5b:
c8:4a:c2:52:b6:21:c3:84:87:1e:c6:32:13:e8:a2:7a:13:39:
4a:84:a7:8e:a8:9a:81:13:5e:78:c7:ac:62:34:e6:58:dd:aa:
02:88:25:bd:df:9e:95:c1:4d:5a:c7:6e:68:3e:c4:f6:de:c7:
a0:7d:0b:cf:73:13:7b:ac:68:d6:ab:db:15:9a:f6:c2:e0:fd:
c1:b4:49:34:15:8a:a6:4e:02:d9:10:4e:2d:65:4c:4b:76:b2:
60:59:f1:30:a8:c2:b2:db:83:c9:8f:c4:8c:e4:b5:8d:78:0d:
bf:17:7e:98:a0:d3:50:09:3b:5c:ba:e2:64:9d:11:5b:e6:27:
cb:bd:af:2b:4b:60:ae:51:39:7f:d1:f7:7e:44:b3:0f:ca:53:
0d:13:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:16 2026 by rpki-client