Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
File: Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft (raw, json)
Hash identifier: zVh+2HPANUGBFAXW4vi+U33gHNrEZTEjsaXyO6R+pks=
Subject key identifier: C1:A9:1A:A5:21:16:54:D7:5F:D4:98:A0:A7:DB:35:A6:7C:A0:11:1D
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Certificate issuer: /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial: 01A0CC34FC8FBE416D5D814D27B758DC8311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:19 +0000
Manifest this update: Wed 23 Sep 2026 03:00:19 +0000
Manifest next update: Thu 24 Sep 2026 03:00:19 +0000
Files and hashes: 1: Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl (hash: ZaGBffWP+XNeiZMm7HY3j73bA2qm0aC62GNnROPHlq8=)
2: b0w2NwRKZd0v1YirWaHR-yonRpM.asa (hash: Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:fc:8f:be:41:6d:5d:81:4d:27:b7:58:dc:83:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
Validity
Not Before: Sep 23 03:00:19 2026 GMT
Not After : Sep 24 03:00:19 2026 GMT
Subject: CN=c1a91aa5211654d75fd498a0a7db35a67ca0111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:93:c6:fd:2c:4d:63:32:63:45:97:fd:0c:
de:3a:5b:69:fb:12:1d:39:0d:80:83:45:48:af:72:
fc:e6:66:33:92:51:89:43:3a:26:84:64:1a:00:49:
e4:4e:d6:3f:d4:e7:54:46:cf:2e:97:93:67:db:7b:
da:10:af:39:a4:16:a3:b0:02:80:83:fb:18:f9:c3:
d1:6f:ae:3f:69:f2:4e:7d:0f:ac:70:03:1f:99:d9:
3e:84:39:3b:e0:9f:22:f1:05:5f:c3:bb:5c:5b:75:
6b:d9:89:f3:b5:3b:a1:1d:1b:29:1b:89:56:1b:9b:
b2:aa:76:bc:0c:c4:6a:82:4a:60:76:a8:ca:a6:73:
9c:42:61:71:2f:9d:64:93:90:09:c7:ba:d1:ac:8e:
34:ff:78:62:aa:dd:0b:c0:91:bb:e3:6c:01:aa:bc:
b3:7f:93:ab:d4:1b:ed:50:2a:52:be:e1:fa:76:44:
40:99:5c:6b:18:74:d6:66:da:7d:01:8e:bf:a4:44:
60:a7:9a:0a:cf:21:f1:42:33:4a:7a:44:38:6c:c7:
97:ac:66:46:60:68:d8:4e:a2:e5:27:37:a9:b4:65:
26:60:7e:8c:34:7c:e2:ff:fa:8b:40:ca:61:e4:51:
d8:00:83:92:a6:1f:1d:be:70:95:d9:85:2a:92:1e:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:1A:A5:21:16:54:D7:5F:D4:98:A0:A7:DB:35:A6:7C:A0:11:1D
X509v3 Authority Key Identifier:
keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:61:63:34:7a:f2:21:5f:a9:12:6b:6f:df:be:d7:e4:24:
fb:47:76:0f:73:83:cb:7f:ef:d1:1a:0a:c3:dc:4b:ee:63:4c:
1c:ca:23:89:da:28:ee:84:d5:26:3a:00:12:bc:22:97:95:70:
fa:ee:82:cb:fa:5a:eb:28:b6:5f:7f:1b:05:c1:8a:b2:cb:7a:
e1:27:0e:45:fc:6c:23:53:11:35:77:76:12:3f:95:b7:24:7a:
3f:3e:a1:b2:a3:d3:3d:fa:4e:99:6d:90:c0:50:d7:18:8a:e1:
bf:64:87:4b:69:f6:28:77:70:7c:15:4e:df:93:33:a8:32:da:
e7:77:58:55:cc:20:92:82:92:61:d4:94:a9:4f:ab:52:64:24:
1d:cc:b1:a0:d6:e3:20:9b:39:f9:3e:5b:7b:e1:b1:fc:28:ce:
54:d0:5d:3b:a3:d6:3b:32:14:c1:9b:51:85:23:fa:02:b2:22:
06:0e:85:90:a2:41:f3:b0:87:14:d3:ce:fd:33:8a:26:9c:cc:
0c:a1:8e:ab:3e:d4:66:a4:7b:1b:ce:c6:a0:d9:44:81:7d:96:
cf:64:c3:91:cd:44:55:36:6e:38:cc:5d:52:04:97:02:77:cc:
81:9d:a3:75:66:b4:d9:ec:d0:e5:25:99:47:c4:bf:a8:b8:c0:
52:10:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:27:11 2026 by rpki-client