Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: 2JpADYw4aZk0Ash2k9zQf0wZdI3cO6W3bVlwWHPuvLo=
Subject key identifier: 41:78:73:C8:4C:BC:94:AA:58:4C:3E:BE:AB:71:A4:C6:B9:8D:E9:26
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019D26282EC09A2A40DED5F6D3D20E979BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: q/8CLChoqgyOYbPRNafylqMWs/rAzJAwlWSLHwoGTH8=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2e:c0:9a:2a:40:de:d5:f6:d3:d2:0e:97:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=417873c84cbc94aa584c3ebeab71a4c6b98de926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:da:2a:72:3b:be:60:a7:26:a2:06:88:c4:
d7:8a:c5:fb:57:11:bf:d6:f4:e3:af:48:ca:78:d7:
e2:66:43:52:16:9c:5f:84:e3:02:3a:c6:65:37:47:
e5:a1:ac:2a:e1:7c:45:4a:c2:c3:c0:3b:b0:a7:a3:
ec:b5:8d:f2:54:ce:f0:85:a0:63:8d:d2:88:d2:d9:
11:a3:cd:59:e6:74:f3:68:70:c4:c2:61:10:2e:2b:
3e:23:4e:e5:17:c9:af:4f:cb:8a:48:6d:16:bf:85:
ed:53:66:69:5b:9f:b6:3a:69:12:a0:32:39:9c:b6:
bf:22:b9:d1:48:f1:aa:ff:32:4e:05:53:1e:ff:52:
d0:b9:01:ac:9f:85:39:9c:2e:bc:6c:84:85:a1:52:
d6:fb:6f:c0:aa:ad:82:4f:10:5e:bf:e9:b0:bd:db:
8a:10:2d:d2:8d:1c:ca:46:4c:c3:ae:0f:f6:ab:c2:
ae:b5:47:e2:7d:2b:c1:59:54:96:c9:82:06:86:f4:
eb:4c:11:2b:31:b7:f7:d4:3f:fb:1e:df:b2:1e:c8:
0e:f5:96:ef:cb:b9:56:da:18:85:7e:44:ee:9a:d8:
17:d3:cd:82:90:44:74:03:c4:2a:c8:92:6a:8e:3f:
30:59:fe:cf:67:f8:15:07:cf:c9:d5:63:17:44:6c:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:78:73:C8:4C:BC:94:AA:58:4C:3E:BE:AB:71:A4:C6:B9:8D:E9:26
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c6:f6:19:27:a0:51:15:e5:88:b1:7d:b8:0f:47:93:06:3b:
28:af:a0:13:ac:4f:a1:31:5f:01:6c:db:a5:bf:a1:c9:98:49:
52:9c:ad:d8:49:2d:e0:a5:dc:0d:5a:5f:3e:72:05:1e:d4:bc:
8c:09:9e:ce:a3:05:ab:5b:37:71:e8:c6:9f:97:df:a6:4c:ae:
1d:53:03:ee:d3:4c:46:7a:af:cf:5b:ca:c8:d7:ac:cc:b5:66:
b2:3b:0f:e1:0d:46:6e:1a:73:b4:5c:28:6c:fc:74:41:3c:aa:
2c:a5:77:f1:48:2e:05:1b:7f:ff:34:5a:97:9f:a1:00:a4:5c:
dd:d3:5b:f7:c0:56:c0:38:b4:5e:df:f8:b4:5f:0d:1b:75:a3:
31:8a:2c:bd:2f:70:a6:68:d2:09:40:74:78:2d:5b:29:d1:7a:
1f:69:25:bb:83:5b:ad:b0:7a:cf:af:f6:d0:9c:a6:8e:6c:73:
3d:84:a6:2f:4c:1c:b8:64:84:16:cb:31:5a:11:6f:25:1e:76:
c5:5a:00:bc:32:bb:df:9a:f2:e5:c8:11:48:74:f3:c0:48:be:
d4:e1:6e:f6:ca:ad:62:af:ae:39:53:6f:81:bb:6b:43:0f:d1:
d8:e0:bc:64:20:a5:80:ab:dd:dd:c5:18:67:f7:01:3e:9b:30:
fb:e7:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:45:13 2026 by rpki-client