Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: GA8VHZcCKJ01l7pltvzR5JVWDpwf86IoLkUBPBEcvOI=
Subject key identifier: A7:1D:F0:5D:F8:50:51:1E:4F:F5:6B:81:AD:69:02:71:DB:9B:6E:97
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019E1EDA2B8F0ED2914729512622CDA32BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 03A6
Signing time: Wed 13 May 2026 01:01:14 +0000
Manifest this update: Wed 13 May 2026 01:01:14 +0000
Manifest next update: Thu 14 May 2026 01:01:14 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: yOnBaV8Mb1X6GDQNprRWWXUrYfsXKPuCH4K+UuIK/Vg=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:2b:8f:0e:d2:91:47:29:51:26:22:cd:a3:2b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: May 13 01:01:14 2026 GMT
Not After : May 14 01:01:14 2026 GMT
Subject: CN=a71df05df850511e4ff56b81ad690271db9b6e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:17:f6:c9:26:07:46:27:04:ca:76:4b:4c:
35:bb:1c:81:d9:a9:04:ab:97:81:e7:8e:f9:35:a6:
d8:71:f3:a1:a5:68:ee:6f:26:f2:7f:09:40:c6:40:
97:a9:f0:ba:96:b3:8d:e2:97:50:95:9d:4f:d7:df:
a2:dd:38:36:e7:5e:0d:65:ea:41:51:a1:ac:b1:50:
fa:43:60:2d:c3:49:37:7d:e7:43:ce:34:94:f6:62:
21:76:55:43:55:35:17:ed:51:77:2b:d8:ae:ef:12:
c8:7a:e6:41:a5:79:55:2c:1f:c9:c1:0c:36:f4:30:
01:b0:16:c0:65:cf:28:b7:8d:49:c0:57:44:15:6e:
84:a3:06:b1:06:a0:75:06:c7:a5:56:f2:c0:95:9b:
ec:97:f0:85:37:0a:db:bd:cc:f5:5c:ff:b2:d3:24:
9e:fd:0c:4f:98:47:fc:bc:9d:93:3e:bb:7f:4c:34:
8a:09:d4:1f:c2:f7:b1:cc:56:0a:ef:02:47:28:08:
9d:7c:ba:44:9d:50:21:66:f7:11:b0:58:f1:fa:95:
7c:5f:c6:7f:ea:22:c8:23:8b:f6:56:88:38:cb:80:
dd:98:8d:d1:02:fa:c7:86:ee:8e:fa:19:73:f0:98:
ee:a4:8d:28:5b:78:9b:f2:c9:07:71:2c:e7:7d:30:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:F0:5D:F8:50:51:1E:4F:F5:6B:81:AD:69:02:71:DB:9B:6E:97
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:39:57:d6:1c:8a:02:65:40:6d:4a:2a:ae:68:90:cd:80:
7d:52:d4:02:39:68:a5:1d:58:3f:10:a9:9f:58:6b:d9:2d:c4:
b7:09:9d:3d:66:01:ec:a6:0d:aa:a2:9c:80:46:00:41:70:d9:
e9:13:11:e2:06:65:ae:0a:94:34:9f:62:b9:5a:3c:f9:30:c3:
56:71:bc:b7:61:3c:2a:9d:9b:f7:45:04:07:86:a8:34:76:ff:
24:56:06:17:de:ba:cc:c2:11:10:42:f5:1c:f5:2f:a3:ea:ac:
62:83:31:74:ec:51:9b:33:43:4f:e6:f5:b2:dd:cd:49:45:fa:
9e:38:16:00:d7:e2:79:7a:eb:ca:c4:fe:6f:e1:81:44:6b:4c:
44:99:05:d6:e3:6b:bb:73:54:20:bc:b9:fe:96:ff:ba:53:09:
39:1f:12:40:d5:c3:8a:48:2a:f8:a1:f5:ba:e6:b6:8f:96:19:
e3:67:ee:ed:e9:d3:4e:74:ee:3a:ec:cc:c8:d1:57:4b:23:16:
e6:9c:46:d7:a2:c4:a5:a4:a9:cc:7a:44:7e:01:ae:a6:62:b2:
41:10:ba:de:a3:d7:db:b0:f4:3c:e9:89:35:23:3a:4c:0f:ec:
b1:9c:81:01:27:9d:f6:fe:a3:dd:a5:15:77:0a:d8:d1:08:39:
6b:81:14:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2iuPDtKRRylRJiLNoyuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5
NDI3MTgwHhcNMjYwNTEzMDEwMTE0WhcNMjYwNTE0MDEwMTE0WjAzMTEwLwYDVQQD
EyhhNzFkZjA1ZGY4NTA1MTFlNGZmNTZiODFhZDY5MDI3MWRiOWI2ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e0X9skmB0YnBMp2S0w1uxyB2akE
q5eB5475NabYcfOhpWjubybyfwlAxkCXqfC6lrON4pdQlZ1P19+i3Tg2514NZepB
UaGssVD6Q2Atw0k3fedDzjSU9mIhdlVDVTUX7VF3K9iu7xLIeuZBpXlVLB/JwQw2
9DABsBbAZc8ot41JwFdEFW6EowaxBqB1BselVvLAlZvsl/CFNwrbvcz1XP+y0ySe
/QxPmEf8vJ2TPrt/TDSKCdQfwvexzFYK7wJHKAidfLpEnVAhZvcRsFjx+pV8X8Z/
6iLII4v2Vog4y4DdmI3RAvrHhu6O+hlz8JjupI0oW3ib8skHcSznfTCIYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcd8F34UFEeT/Vrga1pAnHbm26XMB8GA1UdIwQY
MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt
YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw
LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEis5V9Yc
igJlQG1KKq5okM2AfVLUAjlopR1YPxCpn1hr2S3EtwmdPWYB7KYNqqKcgEYAQXDZ
6RMR4gZlrgqUNJ9iuVo8+TDDVnG8t2E8Kp2b90UEB4aoNHb/JFYGF966zMIREEL1
HPUvo+qsYoMxdOxRmzNDT+b1st3NSUX6njgWANfieXrrysT+b+GBRGtMRJkF1uNr
u3NUILy5/pb/ulMJOR8SQNXDikgq+KH1uua2j5YZ42fu7enTTnTuOuzMyNFXSyMW
5pxG16LEpaSpzHpEfgGupmKyQRC63qPX27D0POmJNSM6TA/ssZyBASed9v6j3aUV
dwrY0Qg5a4EUlw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:56 2026 by rpki-client