Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: q1zXCJBl2BnhzhuTZ0pJKmZYvw5udU5ppk3cCwiwUaE=
Subject key identifier: 2B:06:47:58:38:4D:1C:E4:67:D5:D7:10:43:FA:AF:AC:6B:52:33:2D
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 019D25F1EFF3C2722E06D662C7C4FA10D65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 1776
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: fPpcTKJECfYoksYEZEcUM_j0qkQ.roa (hash: E5+q7rc6m3t9onZOzrQMasG/CbDzH+1hOPd2cCu+nT4=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: XaxhcTrQ5wtUlXV21Y+Uhl3DTiO99xCpCp0Nr4ta8ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ef:f3:c2:72:2e:06:d6:62:c7:c4:fa:10:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=2b064758384d1ce467d5d71043faafac6b52332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:d8:a4:f5:f9:c2:05:e6:4a:63:16:bd:2e:
ec:27:77:00:db:8e:db:2e:2f:b7:1f:7d:28:98:2c:
92:13:32:3b:5e:f0:6c:c6:9b:67:c8:92:78:7f:8a:
52:27:e8:e1:8c:9f:3d:3f:89:14:34:aa:f6:e7:02:
26:b5:5a:ef:b8:27:0d:46:23:60:5f:40:cd:86:e0:
2a:c1:78:fa:33:fb:4e:8f:2f:20:f8:e3:58:e2:d8:
88:de:3c:4b:ef:6b:fb:2a:54:f8:8d:3a:ae:6c:a2:
29:49:70:b4:40:c5:65:8c:5d:66:8c:bf:a2:f9:2e:
e3:17:5c:55:58:bc:52:be:6b:06:e7:f6:0a:3e:49:
99:92:81:33:13:dc:bb:2e:5f:2f:16:a9:2e:bd:5b:
ab:f8:05:73:9e:8e:1c:47:64:d0:1d:d8:9a:83:c3:
4f:e2:35:4b:a7:56:a2:79:06:79:16:e2:07:66:45:
ca:3f:c1:e3:7d:25:3c:0a:72:7e:db:6d:db:c5:e5:
39:42:5e:0d:37:54:59:b3:80:3d:6f:e8:7d:72:92:
a0:37:02:70:c9:1c:81:b8:81:cd:fd:e8:1e:52:91:
52:6c:ff:9c:02:7c:fc:0f:48:87:1c:01:b9:24:1f:
76:1c:a2:b0:d7:50:b0:2e:b7:32:cd:b9:2b:6d:ae:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:47:58:38:4D:1C:E4:67:D5:D7:10:43:FA:AF:AC:6B:52:33:2D
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:dc:24:6c:c9:e5:c7:16:1b:2c:ca:0d:2a:23:27:5a:b3:6c:
90:93:48:2f:8b:93:05:61:b0:51:a4:30:73:43:56:5a:f0:84:
80:d4:34:67:1e:ed:cc:10:6e:7a:00:46:fb:dc:79:ba:42:86:
d4:cb:7c:a5:6d:cd:f9:dd:1c:2f:b2:b7:86:17:d1:eb:bc:c9:
23:fa:c0:64:2a:3b:22:85:6a:f2:70:bd:bb:e6:e8:bc:70:19:
22:8a:47:e5:62:ae:94:72:44:ee:22:55:43:fe:f2:0f:83:8b:
6d:51:54:a3:58:d6:ec:cb:40:c4:34:a5:a9:98:ec:b2:22:19:
c6:8c:c9:dc:20:12:a7:47:db:f7:e9:1a:ea:9e:e0:7e:8d:40:
4e:23:56:b5:75:85:7b:2c:78:4e:ff:03:3e:cd:8a:6d:6a:98:
89:4d:eb:c2:a3:83:bc:2f:83:a7:a5:f7:3b:39:67:ca:fa:4e:
f5:ae:a8:29:b4:37:b5:57:b0:3c:c9:83:ed:f9:be:09:7a:5a:
2f:e9:41:72:4b:99:45:0f:41:18:bb:22:55:5c:54:e9:36:b9:
81:d6:61:22:be:1c:3c:3b:e8:06:e9:bf:6f:f7:c3:5b:3a:52:
b5:7c:a0:bb:76:cb:b3:c1:5e:ab:cc:3f:62:d5:3e:ef:c9:c7:
40:9d:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:48 2026 by rpki-client