Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: XJ+b+93qvIR2SUNvSKOIblzewna35R9YvSnJ5H+MNz8=
Subject key identifier: 3E:5F:BD:77:4A:9E:B5:DD:FD:CF:C2:1A:4B:19:75:29:43:3B:20:68
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019EC148B7EDD5B40A374B8B4A6A0C5EA4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 03BF
Signing time: Sat 13 Jun 2026 14:00:28 +0000
Manifest this update: Sat 13 Jun 2026 14:00:28 +0000
Manifest next update: Sun 14 Jun 2026 14:00:28 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: 8/mtbAMlrgRtFkLqSCP4bdMPzjPdMMLCjE/oDxPXlq4=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:b7:ed:d5:b4:0a:37:4b:8b:4a:6a:0c:5e:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Jun 13 14:00:28 2026 GMT
Not After : Jun 14 14:00:28 2026 GMT
Subject: CN=3e5fbd774a9eb5ddfdcfc21a4b197529433b2068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:18:ca:d0:65:53:2e:94:bb:28:02:01:f0:
28:36:da:82:52:ea:cd:42:ee:7b:bc:fa:a3:a4:12:
28:dd:d1:1c:41:8a:9d:2a:c8:fd:88:34:f1:a2:3c:
94:6f:d3:5b:4f:59:90:54:79:de:f8:01:45:e8:82:
f3:8e:a5:5b:1f:a1:7f:5a:b4:fd:e4:c4:d6:88:45:
e7:fc:33:fe:18:6c:e2:77:ec:1c:4c:a0:30:04:d4:
34:96:68:45:53:f4:19:c2:97:68:95:cb:ff:90:6d:
f0:17:1f:25:8c:71:3a:24:a6:db:34:ef:b7:5c:3a:
c8:66:0d:5e:a0:bf:86:e2:d0:9a:a1:0f:b0:4d:3d:
4b:25:96:bd:13:5a:a5:3a:e5:9c:45:b2:60:6c:1d:
23:c0:02:59:77:18:d5:c3:8f:a8:b9:77:48:53:13:
38:d7:2c:56:4b:70:6a:3d:81:7e:cc:a3:43:22:8e:
62:66:b4:02:d3:d3:9a:a0:90:e9:58:ff:87:78:60:
63:74:74:03:20:b3:d8:e5:b6:a0:0f:d2:9f:3f:71:
e5:75:84:1e:8f:ca:88:cf:42:af:3a:79:ed:ab:4e:
b3:2f:ea:2c:3a:6e:9c:00:b8:58:04:6d:2f:b3:c1:
43:e0:f3:7e:8b:fd:84:a9:17:da:28:91:6b:6b:5a:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5F:BD:77:4A:9E:B5:DD:FD:CF:C2:1A:4B:19:75:29:43:3B:20:68
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:8c:a1:5f:93:0f:fa:16:0e:7a:d3:34:6a:2d:ac:b2:3b:
e1:c3:f7:19:aa:78:e3:fe:3e:88:be:23:6a:6d:57:c6:76:5d:
f6:8a:ec:a9:9d:dc:29:cd:b2:3a:ab:14:8d:ab:66:77:db:9b:
5c:4e:d3:de:9e:96:f4:8a:c6:ac:bb:60:4f:e3:01:17:48:6b:
3e:60:f5:cf:75:3c:b6:92:bb:e6:4c:d6:3f:05:e2:8f:a3:53:
cd:7e:88:9b:e5:14:07:b5:e6:b4:46:98:d7:8d:3e:e1:89:c1:
09:83:ee:b5:9c:82:92:fb:ce:a1:5f:e6:9e:3b:18:fc:52:ab:
ac:45:48:a7:34:91:89:e5:32:32:d6:39:4d:db:8f:ad:8f:86:
d9:e3:58:14:0d:5b:6f:98:23:47:65:35:7f:b4:2a:48:94:59:
3a:27:20:fc:ae:9b:84:39:4a:6a:c6:31:e7:e3:25:0a:25:32:
36:fd:57:d8:69:37:a3:b5:50:04:66:9a:20:a4:d5:30:17:a8:
e2:99:f2:dd:e0:e5:3d:a5:5f:57:83:8e:48:37:31:2e:fe:9d:
25:99:d0:d6:71:a9:a9:f6:fd:26:6c:19:a6:5c:d5:f1:09:8e:
30:db:d9:fa:e9:9d:e5:70:32:8a:be:02:97:f2:5c:78:61:2d:
81:ea:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:57 2026 by rpki-client