Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: b5mM0q2pQDNJY2TVv19JPOWKmUN0GNXkXfupzFCApbU=
Subject key identifier: D0:BC:A8:64:37:0B:07:86:7F:04:D7:9B:5E:38:75:42:BA:FD:85:59
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 019D27DFB78397B9F944EFF0F88C192A1076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 11AD
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: By9XwpaaIZ1vbKoC0EMkQI8xFME.roa (hash: rVTno30bTxW1UXGkTngYyYx+U1Aa9CBafc0WRSX3D0M=)
2: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: 9SPcPCHgEL2A3fWWaIyTD6iiAf84hFe8/L86qkoWiNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b7:83:97:b9:f9:44:ef:f0:f8:8c:19:2a:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=d0bca864370b07867f04d79b5e387542bafd8559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:e8:86:e2:71:e9:04:08:34:70:3f:86:ae:
2c:af:49:56:66:4a:bd:a9:0d:3f:a7:02:32:c8:9e:
81:2d:af:d8:3c:ab:f4:23:22:6e:03:31:0e:ea:4e:
3f:f5:72:46:59:92:e5:6d:10:0c:bf:6c:2d:e1:e3:
bf:aa:69:a5:8b:32:02:54:07:ed:85:9b:e9:89:51:
11:28:e7:14:cd:27:d4:49:24:c3:36:df:ab:85:1b:
34:1b:75:6f:04:42:ee:d3:b5:f7:85:49:fd:ba:fb:
46:db:94:35:10:6f:28:2b:ae:54:20:c0:83:fa:82:
a7:85:fb:2c:f6:5b:e5:ff:e4:f6:c6:30:b3:eb:bc:
10:6b:34:28:66:0d:6f:5f:e0:77:70:0b:bc:69:0b:
23:4e:18:b8:f2:38:50:e1:41:ca:91:be:26:96:f4:
d9:d4:b9:eb:4f:a5:3b:b4:97:cc:35:74:89:a4:9c:
01:b2:a4:ee:4d:6a:33:ad:8c:48:04:8b:22:8d:31:
3f:f6:8c:d2:c8:aa:41:58:1f:32:bd:cf:6c:c9:c7:
b6:97:78:95:32:6b:28:05:02:5d:01:6e:8e:bf:9e:
58:e1:9f:4d:a5:11:70:96:28:7c:d7:b1:d7:e1:7c:
a3:a6:5e:ee:24:c6:ef:f6:cf:43:a6:d0:12:30:2d:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:A8:64:37:0B:07:86:7F:04:D7:9B:5E:38:75:42:BA:FD:85:59
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:2f:6e:f4:b4:6d:6e:f5:37:87:c2:d2:99:d7:f4:b5:33:
1e:e4:96:ed:dd:29:b5:72:ec:78:ac:90:dd:a0:03:1d:e2:14:
09:63:17:3a:1c:f7:13:64:8f:3f:83:01:a0:92:bc:14:b0:2b:
32:a4:b0:03:59:03:31:18:2f:96:6b:37:c8:87:f3:99:a5:6f:
b2:91:d7:11:22:54:43:cb:69:1a:f9:50:41:bb:11:9a:ff:f1:
53:ae:fc:d1:86:89:6d:72:9c:c7:b0:a9:7d:68:cd:c1:2e:d5:
4e:ba:2b:6b:79:e2:c2:dd:f7:90:c0:f7:2d:60:7c:76:05:eb:
0d:3f:1b:f0:56:d9:20:31:d4:6a:00:81:7f:9b:f1:23:b2:8e:
39:59:d9:aa:ba:b1:18:68:2f:b7:c4:15:bd:36:e2:34:c1:2c:
b8:0e:e8:8f:f5:e4:21:fa:ee:41:11:a5:3b:a0:68:72:13:b4:
97:72:c3:89:f9:fb:2f:c5:96:7b:2f:2d:9b:59:9a:9e:34:81:
c6:53:c3:96:17:42:4f:cb:39:52:99:bb:8b:7e:ce:bb:6e:81:
2b:a2:92:ce:9b:20:9f:7b:63:dd:98:f6:6d:f7:08:6a:ec:08:
8f:6d:c5:d1:bf:5e:af:c3:70:12:6e:0d:c8:bb:40:29:5a:8a:
96:15:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:30 2026 by rpki-client