Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: eCkkqjm2MIZF7aAYt6zf4mHMt992GCVwYNFd2mSroP4=
Subject key identifier: 08:E8:23:DD:9F:15:85:DC:19:51:68:B6:D6:CB:DC:A9:FA:D0:8D:DE
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019D9DAD15F76C8CD1DE6760054E6C938531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0328
Signing time: Fri 17 Apr 2026 23:00:59 +0000
Manifest this update: Fri 17 Apr 2026 23:00:59 +0000
Manifest next update: Sat 18 Apr 2026 23:00:59 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: 2u1Or1xxVk+LsEUm/MoNq9LKbhi902m615g/9TLKZFs=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:15:f7:6c:8c:d1:de:67:60:05:4e:6c:93:85:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Apr 17 23:00:59 2026 GMT
Not After : Apr 18 23:00:59 2026 GMT
Subject: CN=08e823dd9f1585dc195168b6d6cbdca9fad08dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:7e:ce:3a:98:24:3c:92:2c:5a:5d:37:c4:
57:89:52:c0:6f:55:85:95:ef:52:71:91:37:bc:f0:
00:ea:90:d4:7f:03:95:15:6c:a2:9e:f8:a3:62:4d:
97:56:dd:01:29:71:f6:c5:5d:1e:cb:0e:20:0b:4d:
6e:a7:54:62:86:22:fa:c2:af:33:79:66:de:e9:4c:
12:ad:fe:30:43:1b:8f:01:31:a0:49:5d:bc:05:34:
a9:49:24:09:e9:7b:ed:c6:98:3b:b1:2e:04:4c:aa:
f6:24:39:c8:62:1f:d6:ee:f1:c6:b4:6a:bd:b8:80:
38:0e:b2:9e:ce:4e:62:59:d6:47:6d:be:bd:b8:50:
c6:19:00:97:1d:02:53:2c:b1:e7:20:4c:1e:b0:6b:
39:5e:fe:47:0e:8b:83:61:ce:05:ad:89:25:fa:2e:
51:d8:6f:07:6a:37:e4:a4:31:b7:e0:ef:9b:36:a5:
0a:43:8c:2f:46:bb:71:93:df:28:57:1c:36:3d:c2:
b5:aa:d1:12:a1:a1:fb:59:81:24:41:4a:11:3f:11:
88:a4:35:3e:96:b3:77:4e:03:0f:c8:52:64:ba:2b:
c8:b6:41:aa:96:e5:84:d2:99:6c:1e:ff:10:ec:6a:
5e:4e:9b:4e:5d:73:99:b9:02:a2:75:57:f5:b9:26:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:23:DD:9F:15:85:DC:19:51:68:B6:D6:CB:DC:A9:FA:D0:8D:DE
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:18:e1:6c:90:c2:db:4b:3b:33:df:09:c5:5e:b4:0d:8a:6f:
02:22:d0:68:79:3a:dc:6b:78:0f:ed:65:1a:70:a0:63:69:39:
50:40:5b:f4:43:25:2e:78:f3:5d:0c:3e:60:4a:19:0e:eb:ee:
33:bc:51:17:a0:98:02:5a:bb:38:81:02:0c:28:08:c4:a8:de:
59:24:94:1f:df:83:bd:21:b3:90:2e:61:b1:a7:08:27:c9:10:
32:6f:d9:2d:6e:7c:9f:ba:f8:d3:f3:66:96:8d:3d:b9:24:d3:
23:6a:63:68:2a:66:b6:2c:94:ac:25:ae:4e:28:60:0d:ad:b5:
25:19:f0:bf:fc:c7:56:49:a9:c9:5e:be:83:e0:5f:91:8e:bb:
9e:38:2f:25:84:df:c6:54:54:14:b1:4d:45:f3:12:a4:10:db:
04:8c:7b:61:0d:41:fa:1b:d4:76:72:06:b6:c3:24:d5:95:ec:
37:ed:87:79:60:e6:95:aa:67:25:15:1f:0d:7a:ee:83:a0:05:
4d:13:b5:a5:6a:3a:e4:8d:83:64:ba:5d:2b:63:61:9f:f4:3f:
8f:b5:ff:94:9a:76:ff:57:07:57:2a:89:a2:9b:c2:c2:a5:17:
2a:ef:8b:8f:ba:49:5a:5b:e4:a4:fb:20:d2:35:da:12:7f:f5:
ec:1d:b6:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drRX3bIzR3mdgBU5sk4UxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjYwNDE3MjMwMDU5WhcNMjYwNDE4MjMwMDU5WjAzMTEwLwYDVQQD
EygwOGU4MjNkZDlmMTU4NWRjMTk1MTY4YjZkNmNiZGNhOWZhZDA4ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLV+zjqYJDySLFpdN8RXiVLAb1WF
le9ScZE3vPAA6pDUfwOVFWyinvijYk2XVt0BKXH2xV0eyw4gC01up1RihiL6wq8z
eWbe6UwSrf4wQxuPATGgSV28BTSpSSQJ6Xvtxpg7sS4ETKr2JDnIYh/W7vHGtGq9
uIA4DrKezk5iWdZHbb69uFDGGQCXHQJTLLHnIEwesGs5Xv5HDouDYc4FrYkl+i5R
2G8HajfkpDG34O+bNqUKQ4wvRrtxk98oVxw2PcK1qtESoaH7WYEkQUoRPxGIpDU+
lrN3TgMPyFJkuivItkGqluWE0plsHv8Q7GpeTptOXXOZuQKidVf1uSaOewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjoI92fFYXcGVFottbL3Kn60I3eMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBjhbJDC
20s7M98JxV60DYpvAiLQaHk63Gt4D+1lGnCgY2k5UEBb9EMlLnjzXQw+YEoZDuvu
M7xRF6CYAlq7OIECDCgIxKjeWSSUH9+DvSGzkC5hsacIJ8kQMm/ZLW58n7r40/Nm
lo09uSTTI2pjaCpmtiyUrCWuTihgDa21JRnwv/zHVkmpyV6+g+BfkY67njgvJYTf
xlRUFLFNRfMSpBDbBIx7YQ1B+hvUdnIGtsMk1ZXsN+2HeWDmlapnJRUfDXrug6AF
TRO1pWo65I2DZLpdK2Nhn/Q/j7X/lJp2/1cHVyqJopvCwqUXKu+Lj7pJWlvkpPsg
0jXaEn/17B22kw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:59 2026 by rpki-client