Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: SJKrBSodP9CEh5B5gR3BYbvUn8zrrpTilHMhtpE8sos=
Subject key identifier: FF:A7:10:C1:11:F0:ED:D9:42:80:7D:D5:84:1C:B0:C9:04:EB:5F:E5
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019F90236BD09D7FC9168BF1D87BFE301391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 18:01:08 +0000
Manifest this update: Thu 23 Jul 2026 18:01:08 +0000
Manifest next update: Fri 24 Jul 2026 18:01:08 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: AUGj1eSI7nTC41lK4umm9dw+riI2E561MkIkYcFgD0Y=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:6b:d0:9d:7f:c9:16:8b:f1:d8:7b:fe:30:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jul 23 18:01:08 2026 GMT
Not After : Jul 24 18:01:08 2026 GMT
Subject: CN=ffa710c111f0edd942807dd5841cb0c904eb5fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:0c:1a:09:58:58:fe:3d:c3:6b:51:e2:b8:
87:6d:29:a1:88:d0:21:af:be:f7:52:7e:08:cd:67:
2a:ab:c0:39:c1:19:b5:91:a9:bb:a2:d2:41:f9:0c:
81:de:33:c8:3a:41:ea:2e:4c:19:1c:e1:97:18:47:
ad:94:b4:8b:8a:84:db:4b:96:07:e8:13:8b:2f:de:
40:d5:8a:14:1b:d6:aa:2a:f0:6a:45:33:fd:12:cd:
9a:30:0f:a1:22:d6:59:b1:75:b1:0b:df:2b:92:4a:
e1:7b:f1:65:f0:8a:26:3d:a1:b2:a8:bd:99:e8:82:
ad:46:f0:0b:40:18:96:83:c5:37:eb:9a:f7:ca:0c:
32:80:97:2d:1f:df:f8:9f:48:32:33:c2:7c:05:67:
a1:7a:ef:c1:51:6d:43:7d:1e:44:c9:75:9c:1f:dd:
5d:d9:24:64:45:40:1c:37:18:80:75:aa:51:12:03:
71:78:0a:74:71:59:ed:80:e2:a2:d7:88:55:39:04:
43:db:b5:73:70:b6:21:7c:3a:4a:a1:0d:cd:52:06:
6f:34:48:0e:cf:e9:a5:3d:79:82:0e:38:5a:b8:e5:
6a:74:3f:cf:11:11:3e:64:05:bf:86:6e:54:4f:14:
93:bf:e9:53:19:af:02:f3:b6:6c:d2:03:84:94:1d:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A7:10:C1:11:F0:ED:D9:42:80:7D:D5:84:1C:B0:C9:04:EB:5F:E5
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:0e:57:52:e1:c7:9e:c0:18:37:99:0d:b9:e4:81:b4:1a:
0f:2b:89:5a:0d:ed:e3:11:96:52:e8:d3:f9:36:03:ac:cb:81:
7f:83:ca:36:41:bc:e2:38:ba:60:f8:23:31:ef:2e:25:41:45:
cc:14:2e:bf:cd:08:36:76:30:36:57:dc:5c:df:03:d9:94:0c:
a4:a5:b4:92:68:41:f8:5f:bc:93:1e:cd:7a:76:d3:38:90:40:
75:a4:fa:fa:5b:26:bb:87:b8:29:8d:58:0c:7c:9a:be:01:35:
18:52:ad:34:28:24:e2:b5:72:9b:b9:84:bf:4f:b7:ad:2e:a1:
47:ba:7c:4a:2c:c0:d5:99:31:fd:47:3f:3d:49:3b:be:8f:f3:
45:39:6f:41:5d:6b:d8:d4:9b:74:65:88:3a:7a:10:d8:52:d9:
5e:d8:75:a4:55:f6:07:f5:c9:48:71:e1:4b:c3:c8:ff:e1:a5:
23:64:ee:11:51:c3:0d:ee:06:f8:da:25:a4:20:84:b6:7d:8c:
38:05:46:ff:6b:bc:82:c4:cf:1b:3e:fc:75:ee:48:05:23:40:
c7:36:d6:86:f4:bc:4a:9b:fe:d9:4c:2b:0d:d0:0f:d2:78:71:
a0:a3:9f:9a:00:68:fb:92:14:45:76:00:c8:a1:55:8a:98:7c:
64:f8:15:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QI2vQnX/JFovx2Hv+MBORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjM3M2U3YTg0NDA2Y2VhYjVmN2FhOTE1MjM0YzkzZDhi
ODhlOTEwHhcNMjYwNzIzMTgwMTA4WhcNMjYwNzI0MTgwMTA4WjAzMTEwLwYDVQQD
EyhmZmE3MTBjMTExZjBlZGQ5NDI4MDdkZDU4NDFjYjBjOTA0ZWI1ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPYMGglYWP49w2tR4riHbSmhiNAh
r773Un4IzWcqq8A5wRm1kam7otJB+QyB3jPIOkHqLkwZHOGXGEetlLSLioTbS5YH
6BOLL95A1YoUG9aqKvBqRTP9Es2aMA+hItZZsXWxC98rkkrhe/Fl8IomPaGyqL2Z
6IKtRvALQBiWg8U365r3ygwygJctH9/4n0gyM8J8BWeheu/BUW1DfR5EyXWcH91d
2SRkRUAcNxiAdapREgNxeAp0cVntgOKi14hVOQRD27VzcLYhfDpKoQ3NUgZvNEgO
z+mlPXmCDjhauOVqdD/PERE+ZAW/hm5UTxSTv+lTGa8C87Zs0gOElB0qlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+nEMER8O3ZQoB91YQcsMkE61/lMB8GA1UdIwQY
MBaAFDcjc+eoRAbOq196qRUjTJPYuI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYt
N2ExZWM1ZDQ5ZDMzLzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYtN2ExZWM1ZDQ5ZDMz
LzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZwOV1Lh
x57AGDeZDbnkgbQaDyuJWg3t4xGWUujT+TYDrMuBf4PKNkG84ji6YPgjMe8uJUFF
zBQuv80INnYwNlfcXN8D2ZQMpKW0kmhB+F+8kx7NenbTOJBAdaT6+lsmu4e4KY1Y
DHyavgE1GFKtNCgk4rVym7mEv0+3rS6hR7p8SizA1Zkx/Uc/PUk7vo/zRTlvQV1r
2NSbdGWIOnoQ2FLZXth1pFX2B/XJSHHhS8PI/+GlI2TuEVHDDe4G+NolpCCEtn2M
OAVG/2u8gsTPGz78de5IBSNAxzbWhvS8Spv+2UwrDdAP0nhxoKOfmgBo+5IURXYA
yKFViph8ZPgVNw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:42 2026 by rpki-client