Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: ii+E8CQp/wQtu0pbhVoT6BcCXaKPTeyRdAJnfKA0uWE=
Subject key identifier: F4:B8:2E:9D:99:9D:8A:94:66:43:E4:07:DA:B5:41:A9:D6:06:27:B8
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019D25BAA6130519C821BEB4576FE4B1BBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 0325
Signing time: Wed 25 Mar 2026 16:01:22 +0000
Manifest this update: Wed 25 Mar 2026 16:01:22 +0000
Manifest next update: Thu 26 Mar 2026 16:01:22 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: ZViDI2c9dro7ljXgTcqP9oy2TgI2xLFRp7Oej/jlxLI=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a6:13:05:19:c8:21:be:b4:57:6f:e4:b1:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Mar 25 16:01:22 2026 GMT
Not After : Mar 26 16:01:22 2026 GMT
Subject: CN=f4b82e9d999d8a946643e407dab541a9d60627b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:34:0f:17:9c:9c:2b:c0:92:71:1e:05:fe:
da:db:8e:ba:81:db:f9:61:72:5d:53:ac:2b:1e:0e:
84:a5:3f:d3:12:69:5e:fe:ab:8e:21:d8:9d:40:f7:
e5:31:eb:0b:e0:a0:06:5b:34:b6:ef:75:e5:8d:13:
b5:dc:1c:96:a2:43:39:74:cc:86:29:5b:88:61:4d:
a0:ec:f9:4d:44:3b:2d:0c:bd:ed:ac:00:bc:d8:9e:
0e:ea:08:ad:8a:35:00:45:6d:3d:97:f4:8e:be:7a:
19:c7:fa:fe:bc:d1:32:a8:a2:aa:3b:69:b0:17:b3:
1b:5a:c9:16:47:22:bf:92:64:3a:9e:96:54:33:90:
1e:64:bd:fa:fa:d8:11:32:a2:b7:0d:43:43:dd:66:
08:af:0c:77:ee:05:7a:09:87:60:4b:97:60:7e:7c:
ae:96:f5:77:78:ab:87:9a:57:ca:fe:1a:05:9c:c2:
a0:ac:99:41:ce:7e:8b:c5:8d:81:df:ad:c1:7c:19:
4f:20:a7:68:46:06:d7:fd:b4:f5:db:fb:ca:b0:0e:
47:a4:d3:d8:94:81:72:23:98:c6:ec:90:0f:b8:91:
06:ff:92:03:24:6b:09:bc:f0:29:b6:1d:1c:ca:43:
24:e1:53:65:28:e1:c3:a2:17:36:f8:31:11:cf:28:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:2E:9D:99:9D:8A:94:66:43:E4:07:DA:B5:41:A9:D6:06:27:B8
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cd:71:15:ee:78:ed:3e:28:71:3a:80:9a:f9:42:40:27:75:
88:ff:32:70:19:b0:37:02:ae:b4:0f:df:e0:c7:b4:c4:99:f4:
00:a5:6a:33:c6:2f:f6:30:7d:f6:77:e0:1e:33:58:12:77:77:
ab:04:30:8b:ca:ae:cc:2a:e5:dc:61:0f:71:ad:eb:a1:91:f3:
55:b3:56:57:ff:95:9e:f5:ae:ce:03:cc:0f:2a:06:51:3d:ae:
d1:ab:32:4e:c9:5b:ac:c2:fc:c3:f9:ac:d4:01:f2:62:7e:28:
1e:dc:e7:1b:cf:18:30:5d:20:43:c4:66:39:9b:74:c3:b0:4a:
30:de:9d:bb:b3:dd:74:01:84:10:57:d4:9b:88:c2:ad:5c:53:
55:23:01:73:f5:05:c6:65:1a:ab:cd:66:4e:7c:55:0c:0c:df:
a9:f8:65:5d:bc:b0:f7:e3:0b:e2:1e:94:f1:b7:2c:74:c5:fe:
96:45:10:65:30:b0:27:90:7e:bd:13:98:ac:18:c0:cc:30:00:
6b:44:42:53:81:95:24:d6:79:9b:26:b1:f1:e6:ef:da:a2:04:
15:73:3e:56:ea:8b:e5:97:45:9c:03:48:ca:49:74:5d:33:ea:
d2:08:a9:0f:f8:f5:8c:77:ab:ee:db:df:32:19:99:db:2c:3e:
d6:3f:7f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luqYTBRnIIb60V2/ksbuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjQxOGYwMDRkNTg0ZjJmZTI2Yzg0MjM1ZTY2YmI2YjI5
NDI3MTgwHhcNMjYwMzI1MTYwMTIyWhcNMjYwMzI2MTYwMTIyWjAzMTEwLwYDVQQD
EyhmNGI4MmU5ZDk5OWQ4YTk0NjY0M2U0MDdkYWI1NDFhOWQ2MDYyN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHw0DxecnCvAknEeBf7a2466gdv5
YXJdU6wrHg6EpT/TEmle/quOIdidQPflMesL4KAGWzS273XljRO13ByWokM5dMyG
KVuIYU2g7PlNRDstDL3trAC82J4O6gitijUARW09l/SOvnoZx/r+vNEyqKKqO2mw
F7MbWskWRyK/kmQ6npZUM5AeZL36+tgRMqK3DUND3WYIrwx37gV6CYdgS5dgfnyu
lvV3eKuHmlfK/hoFnMKgrJlBzn6LxY2B363BfBlPIKdoRgbX/bT12/vKsA5HpNPY
lIFyI5jG7JAPuJEG/5IDJGsJvPApth0cykMk4VNlKOHDohc2+DERzyhueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS4Lp2ZnYqUZkPkB9q1QanWBie4MB8GA1UdIwQY
MBaAFDckGPAE1YTy/ibIQjXma7aylCcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQt
YTEzNmEzMjg5NWMwLzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85M2M4NTEtYmFhNi00MTIxLWJjZGQtYTEzNmEzMjg5NWMw
LzEvTnlRWThBVFZoUEwtSnNoQ05lWnJ0cktVSnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgM1xFe54
7T4ocTqAmvlCQCd1iP8ycBmwNwKutA/f4Me0xJn0AKVqM8Yv9jB99nfgHjNYEnd3
qwQwi8quzCrl3GEPca3roZHzVbNWV/+VnvWuzgPMDyoGUT2u0asyTslbrML8w/ms
1AHyYn4oHtznG88YMF0gQ8RmOZt0w7BKMN6du7PddAGEEFfUm4jCrVxTVSMBc/UF
xmUaq81mTnxVDAzfqfhlXbyw9+ML4h6U8bcsdMX+lkUQZTCwJ5B+vROYrBjAzDAA
a0RCU4GVJNZ5myax8ebv2qIEFXM+VuqL5ZdFnANIykl0XTPq0gipD/j1jHer7tvf
MhmZ2yw+1j9/YA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client