Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: SHjnVr6qAsVVvZeAv5e8hd8OLEpldGu3sKJvEe9d2mo=
Subject key identifier: 47:F4:60:71:15:E0:4F:9A:08:93:1E:DC:45:98:48:80:51:09:1A:B7
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 01A0E964BEC11FBE421674D4CA2AF2F7D963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 0518
Signing time: Mon 28 Sep 2026 19:01:28 +0000
Manifest this update: Mon 28 Sep 2026 19:01:28 +0000
Manifest next update: Tue 29 Sep 2026 19:01:28 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: v4H942h+J8Nh/smzTV+xBveFAG0KfJJEDnJklpJXT6U=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:be:c1:1f:be:42:16:74:d4:ca:2a:f2:f7:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Sep 28 19:01:28 2026 GMT
Not After : Sep 29 19:01:28 2026 GMT
Subject: CN=47f4607115e04f9a08931edc4598488051091ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:b1:b4:f3:95:c5:30:1c:17:26:e3:3b:d3:
c5:f8:50:6c:d8:c8:07:e8:df:ab:18:43:87:79:34:
ea:2f:bf:37:e8:75:bc:31:ad:f8:35:b3:4e:36:6e:
ca:b3:0f:9b:c2:19:c6:b0:69:7f:25:15:c7:87:54:
f7:9c:52:e9:e6:a5:8b:37:c9:fe:86:94:10:8b:de:
ad:fb:ef:1c:17:6e:e8:36:e7:bb:96:07:57:1d:53:
25:c2:79:e2:c7:7f:2e:c3:80:09:9c:aa:0d:f6:b9:
da:fc:1c:e2:68:05:f4:e5:0f:5a:d2:2b:18:f1:6c:
21:78:f7:2f:06:48:6e:82:1c:41:94:ff:34:0f:fa:
21:12:ad:94:39:9f:4c:bc:95:cd:4e:3d:8a:66:b8:
8c:c3:64:72:50:a2:90:cd:f0:4d:9c:f3:23:1a:60:
b8:71:02:17:0a:ef:e1:ad:72:a1:dc:8e:59:80:9f:
08:69:0e:4b:d2:e3:92:36:4f:59:bb:97:19:93:88:
ba:bd:88:e4:7c:de:27:53:a6:b6:95:46:4e:03:bc:
3f:5d:cd:a3:18:a4:5c:51:69:f3:23:ab:c5:a0:ee:
68:67:a8:4a:57:dc:12:b6:b6:16:f5:6e:9a:68:7f:
3a:8c:40:c8:7b:0a:18:c1:97:30:61:f2:40:e3:f2:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:60:71:15:E0:4F:9A:08:93:1E:DC:45:98:48:80:51:09:1A:B7
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2e:73:0f:58:d0:0b:7d:50:5e:b1:41:7f:33:bf:6c:3f:31:
d3:f3:b1:ce:78:45:92:12:f5:94:33:15:f9:54:02:45:da:4d:
3d:57:a1:dd:64:24:2b:df:4d:37:74:b0:d8:ce:04:49:c3:e4:
ad:98:9e:3e:06:0f:f7:7e:f6:0f:32:69:ac:05:7c:85:db:1b:
fe:9a:75:c0:da:e8:17:81:9e:39:2b:ad:07:bb:98:93:a7:7e:
d7:ef:6d:23:41:6e:7b:14:23:35:98:3c:86:19:4e:d9:6b:bf:
ac:a3:f9:da:c7:0e:d1:e9:82:0a:1a:3f:fc:c7:24:4f:98:85:
38:dd:a9:29:d4:bc:65:e0:16:00:b0:f8:a3:aa:55:47:03:3a:
8d:05:06:2e:9d:8d:d1:69:29:24:1d:e5:67:9f:76:6a:ca:a7:
6f:6d:90:11:db:99:5f:7b:00:75:9b:2a:9c:04:88:7e:1f:34:
85:3e:e0:b5:93:44:e3:b8:44:3f:9e:a7:01:33:a1:4a:8f:91:
cb:a8:2f:79:9c:7d:a9:47:5f:b4:8f:29:4b:1c:e9:b4:62:42:
95:8e:f0:9e:0e:22:6c:5a:52:8c:cc:ba:5b:b7:b7:a4:be:75:
6e:7a:62:59:a8:07:e2:a2:b7:2f:f8:ea:0a:aa:d5:16:57:6f:
0e:b2:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:53:28 2026 by rpki-client