Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: ken5jEkY/5Y1YEbMaJuwbSeJTj/ix7K1E9hN4zZQs/w=
Subject key identifier: 01:67:E8:2D:DB:44:D4:F8:09:4F:50:88:29:6F:D7:18:4F:AA:D9:F6
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019E1D59433FF0DCEC70F1B380954C00104C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: eCYcxWkAJAqD84lieZb4dtTjmXfzXF8sAsTFM39r6J8=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:43:3f:f0:dc:ec:70:f1:b3:80:95:4c:00:10:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=0167e82ddb44d4f8094f5088296fd7184faad9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:c0:1c:40:9b:06:19:aa:65:b2:fc:46:a1:
21:8f:ff:04:b2:50:58:a1:e4:aa:c3:73:7d:9b:bb:
17:ce:32:a4:0d:63:70:92:99:5c:27:6f:54:13:a3:
c7:db:28:72:d0:83:18:79:d5:74:e2:9d:36:b1:ca:
eb:51:ab:4a:fd:1a:27:58:a7:e9:24:c7:0c:10:df:
bf:e7:9a:0a:4e:ca:e9:3c:84:7a:63:17:dd:be:d5:
89:7e:8a:bd:3b:06:04:7f:32:d9:29:62:60:47:42:
51:0a:82:37:ca:26:28:49:79:db:48:bc:4f:e1:ac:
06:76:07:70:e7:da:ad:ad:79:79:05:c6:d4:ef:44:
dd:ed:52:44:ff:21:45:c9:78:a8:03:5b:7d:c9:af:
9e:09:f0:9e:7f:55:91:42:7d:55:20:f4:ff:67:38:
7f:19:46:39:84:4a:66:4b:f3:23:82:8b:de:d7:6d:
5a:74:a0:72:4a:4f:06:15:f0:8d:3b:8f:d5:32:12:
c8:ef:29:ba:70:98:ff:e2:8e:11:bc:b7:bf:2a:15:
63:32:24:0f:fb:d8:3d:89:92:f3:cb:21:fd:d6:6d:
e6:e1:39:d4:8e:2f:e2:13:24:aa:1d:35:77:9a:90:
88:3b:76:94:06:66:2b:88:10:99:8b:0d:5d:32:31:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:E8:2D:DB:44:D4:F8:09:4F:50:88:29:6F:D7:18:4F:AA:D9:F6
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4d:f0:89:62:83:8b:01:35:ec:ab:15:09:dc:ca:f5:b4:c8:
85:86:15:ab:f6:86:a2:05:c1:67:6b:f9:eb:df:37:2e:e5:76:
c7:2c:84:0f:16:21:34:d1:b8:ef:2a:12:c2:9f:91:63:fb:e8:
51:f8:b3:80:e8:b4:f5:af:04:97:33:ae:de:20:9e:dd:8b:83:
e0:67:a4:1a:19:4b:72:33:35:0c:3f:d2:5e:d2:35:3f:0f:52:
85:a6:d2:ef:52:50:5c:95:ca:90:27:2e:fd:88:8d:ef:70:1a:
e0:c7:89:e9:70:31:8f:20:ac:5d:d0:1a:1a:f0:d1:5f:fa:66:
f6:ca:cf:e1:e8:d9:49:28:b4:c2:f6:aa:32:97:8c:af:3a:81:
f8:64:fc:de:8c:d2:af:50:29:9e:e4:20:93:f3:da:23:df:ec:
42:e3:23:24:4b:71:81:d6:d6:fe:6d:1f:fb:55:f4:c2:33:0e:
42:5c:51:da:c0:eb:01:50:ff:8c:e6:ed:cd:79:5a:34:dd:0c:
cf:2a:5f:db:be:c9:a1:f7:42:85:84:69:3a:2b:f0:e3:2c:e6:
0e:46:f8:e0:59:75:8a:92:e5:e9:3f:85:fe:98:c8:57:f8:cc:
ac:70:95:47:b4:c0:0b:df:cb:e1:62:35:68:56:83:3c:45:8a:
6d:e5:33:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWUM/8NzscPGzgJVMABBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjM3M2U3YTg0NDA2Y2VhYjVmN2FhOTE1MjM0YzkzZDhi
ODhlOTEwHhcNMjYwNTEyMTgwMDQ5WhcNMjYwNTEzMTgwMDQ5WjAzMTEwLwYDVQQD
EygwMTY3ZTgyZGRiNDRkNGY4MDk0ZjUwODgyOTZmZDcxODRmYWFkOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+fAHECbBhmqZbL8RqEhj/8EslBY
oeSqw3N9m7sXzjKkDWNwkplcJ29UE6PH2yhy0IMYedV04p02scrrUatK/RonWKfp
JMcMEN+/55oKTsrpPIR6YxfdvtWJfoq9OwYEfzLZKWJgR0JRCoI3yiYoSXnbSLxP
4awGdgdw59qtrXl5BcbU70Td7VJE/yFFyXioA1t9ya+eCfCef1WRQn1VIPT/Zzh/
GUY5hEpmS/Mjgove121adKBySk8GFfCNO4/VMhLI7ym6cJj/4o4RvLe/KhVjMiQP
+9g9iZLzyyH91m3m4TnUji/iEySqHTV3mpCIO3aUBmYriBCZiw1dMjHT1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFn6C3bRNT4CU9QiClv1xhPqtn2MB8GA1UdIwQY
MBaAFDcjc+eoRAbOq196qRUjTJPYuI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYt
N2ExZWM1ZDQ5ZDMzLzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYtN2ExZWM1ZDQ5ZDMz
LzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi03wiWKD
iwE17KsVCdzK9bTIhYYVq/aGogXBZ2v56983LuV2xyyEDxYhNNG47yoSwp+RY/vo
UfizgOi09a8ElzOu3iCe3YuD4GekGhlLcjM1DD/SXtI1Pw9ShabS71JQXJXKkCcu
/YiN73Aa4MeJ6XAxjyCsXdAaGvDRX/pm9srP4ejZSSi0wvaqMpeMrzqB+GT83ozS
r1ApnuQgk/PaI9/sQuMjJEtxgdbW/m0f+1X0wjMOQlxR2sDrAVD/jObtzXlaNN0M
zypf277JofdChYRpOivw4yzmDkb44Fl1ipLl6T+F/pjIV/jMrHCVR7TAC9/L4WI1
aFaDPEWKbeUz2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:40 2026 by rpki-client