Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: Xb2D49QMxZ9ptsu7sj/8BkHaUowwPMUw06EgxBvjW20=
Subject key identifier: AC:C8:52:44:19:82:AF:4E:B8:6C:C4:CC:D0:E8:D6:D1:7C:CC:EF:F4
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 01A0F94540450E8F67A4C8F7EA1252B0A6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0299
Signing time: Thu 01 Oct 2026 21:01:00 +0000
Manifest this update: Thu 01 Oct 2026 21:01:00 +0000
Manifest next update: Fri 02 Oct 2026 21:01:00 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: aaWbLpPDDOct0Jx9I/HatWyR2/y46i41dpA0YdEYV3g=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:40:45:0e:8f:67:a4:c8:f7:ea:12:52:b0:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Oct 1 21:01:00 2026 GMT
Not After : Oct 2 21:01:00 2026 GMT
Subject: CN=acc852441982af4eb86cc4ccd0e8d6d17ccceff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:46:51:43:cc:c3:46:2f:03:c1:4d:6e:c5:
f2:fe:0b:22:cb:06:65:4b:83:09:8b:c7:07:d3:5c:
ed:71:fe:af:92:c3:3d:ea:36:f5:dc:71:51:e2:58:
e9:60:1d:97:0d:84:87:ee:48:d4:82:33:09:69:3f:
78:ab:32:32:1c:47:7a:b5:60:17:2f:87:db:dc:15:
d8:32:09:33:85:26:c7:46:60:21:7f:b6:4f:98:04:
33:9b:df:8a:b9:e0:f8:03:27:fc:05:13:88:fa:73:
fb:e6:cd:e0:fc:b4:a2:67:86:c3:0f:09:22:9a:89:
32:df:18:df:38:ca:5b:29:84:6c:73:24:b5:29:2e:
00:0d:70:22:23:05:da:7a:13:b7:83:32:a9:c8:af:
8e:2f:43:6c:b2:51:bd:c2:81:68:d9:99:c3:2a:9f:
8c:55:09:34:2f:ac:95:58:8f:97:87:17:e5:3a:de:
17:48:6e:0e:f7:8f:5c:94:4a:e7:3c:68:90:3f:b9:
47:16:b0:54:5e:14:2f:db:d9:ea:2a:4f:ec:4e:ed:
6f:51:87:b9:0f:8c:0a:5d:a9:90:df:13:48:4c:37:
7b:71:62:09:49:5e:ea:09:ee:40:2c:7d:bb:f7:be:
33:4d:7c:65:0f:c5:77:27:74:e6:df:74:d9:54:a3:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:52:44:19:82:AF:4E:B8:6C:C4:CC:D0:E8:D6:D1:7C:CC:EF:F4
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3b:33:c7:b4:42:93:5d:f1:82:82:01:ac:2c:d2:34:7e:b2:
04:8d:d6:06:74:fe:00:4b:5e:22:db:4a:9b:7a:80:a5:8c:d3:
af:ce:83:81:a2:a7:f8:04:86:70:3e:43:a1:c1:a8:3d:56:61:
f3:fc:92:e9:cb:8a:d0:1e:07:87:32:0b:d7:0a:44:2b:34:d3:
28:0e:12:a4:1f:fb:4f:62:9f:a4:84:20:ca:42:ce:b0:95:f4:
60:c4:f9:82:7f:e3:80:4a:8d:3c:0b:19:79:cd:53:28:09:54:
12:a9:fa:31:99:aa:57:b5:a5:64:b7:4a:70:38:27:a4:a3:1e:
57:01:a5:fd:a4:38:90:88:56:36:a5:b4:ad:42:70:5e:a1:f3:
22:d4:4b:b0:7b:37:d2:85:5e:8a:72:1d:68:3b:47:ee:6c:63:
5a:53:cc:4f:c7:f1:ff:6a:99:e9:c7:1c:a9:5b:f4:e7:72:73:
ca:6b:29:65:eb:e2:8b:98:3e:dc:d4:22:69:5e:dd:3d:40:5c:
27:f4:4c:2d:2b:55:29:bd:5d:46:86:9f:99:fd:a0:33:c3:e7:
28:06:4d:e8:bb:06:50:66:a8:c4:ff:c5:b8:0d:f4:ba:d9:48:
5e:92:e5:2d:36:4f:c4:ce:a0:38:62:2e:fa:3f:3a:b2:75:66:
7c:ac:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:41 2026 by rpki-client