Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: wmSZX6X8E1pzNYjjT8/UIelyKjoffN+ZaO6Oq/k4OjY=
Subject key identifier: 5C:15:76:12:C4:ED:12:5F:77:B3:65:09:63:18:3F:7B:94:5C:A3:5D
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019FAAF5BBF937924D050D610E81C9000706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0438
Signing time: Tue 28 Jul 2026 23:00:58 +0000
Manifest this update: Tue 28 Jul 2026 23:00:58 +0000
Manifest next update: Wed 29 Jul 2026 23:00:58 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: VVcXnoozlPzDAA8YLjSfr77vYOX/eelbF5Hbr/RK+Cg=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:bb:f9:37:92:4d:05:0d:61:0e:81:c9:00:07:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Jul 28 23:00:58 2026 GMT
Not After : Jul 29 23:00:58 2026 GMT
Subject: CN=5c157612c4ed125f77b3650963183f7b945ca35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:ca:30:70:3f:26:e8:0f:98:80:b5:e4:87:
03:9d:ed:8c:86:1a:da:3b:12:72:78:0d:7f:b1:26:
ce:db:d4:d2:02:7d:5e:3b:ae:96:5f:0a:9d:2c:51:
c2:a1:f6:37:60:92:fd:e1:10:7a:06:b7:43:79:7a:
75:dc:c0:a4:b4:34:e4:06:c8:11:b9:03:2f:9e:8f:
85:d6:aa:c0:87:97:d9:67:65:79:69:e9:1a:33:45:
df:6b:21:02:3c:c9:d7:70:52:2f:ed:f2:13:4f:fa:
a3:7d:d4:e6:13:8f:d5:98:5a:d3:a3:22:82:d7:00:
be:5d:8b:be:2d:c3:bd:09:a1:56:8c:96:4f:89:8a:
f0:28:db:3e:4d:a3:bc:dc:4d:f5:2c:58:de:68:ea:
f7:6f:69:b4:85:8c:98:26:7b:11:1c:ef:ce:b1:85:
25:2e:11:a4:3a:04:fc:1a:7f:5d:6b:a2:04:68:6a:
b2:ca:cd:d5:a3:2c:65:ad:80:86:cd:41:7d:e3:d4:
c6:76:e0:14:3e:75:af:e9:11:e1:33:86:26:03:5e:
3b:49:8c:97:5b:d4:0f:c7:52:e4:b4:da:39:c2:41:
c3:27:d1:79:07:09:ab:95:52:c3:65:07:26:be:00:
03:cb:81:49:a0:bb:3b:a3:6b:76:37:67:5b:05:85:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:76:12:C4:ED:12:5F:77:B3:65:09:63:18:3F:7B:94:5C:A3:5D
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:df:7c:65:67:ed:75:06:af:97:f4:fd:45:96:cd:a5:e0:
26:88:89:62:b0:53:17:b6:67:c8:eb:9f:66:ee:b0:61:2c:5c:
5c:98:5a:da:bb:95:17:a5:3e:5f:65:8b:0a:bc:b9:a3:14:5b:
0d:86:10:4b:64:08:67:9a:47:5d:0c:fe:ee:96:3b:c7:01:b7:
d5:04:2a:8c:09:19:d5:0d:ee:2c:57:69:e0:a8:58:4c:11:fa:
09:ec:cb:df:82:01:eb:0e:83:64:47:d8:e4:9b:77:93:7e:69:
1e:19:6e:78:13:a7:a2:ba:4a:ca:f9:6f:a7:38:4a:fe:59:2d:
0c:3a:7a:f1:68:9e:d9:12:af:a6:5a:2a:18:af:22:57:ea:f2:
db:82:14:4f:8b:7e:64:c8:18:10:b2:83:8b:ca:f2:e4:a6:fa:
cd:2a:14:59:f4:d8:67:0e:88:0b:68:86:67:d8:ce:08:55:27:
0e:94:d2:5f:62:70:71:ab:87:99:93:7e:28:df:08:1a:a8:58:
f0:74:ad:9d:a1:7a:c9:31:c5:82:bc:d1:15:c1:f9:3b:73:45:
f1:11:19:b5:8e:58:b1:e2:92:e2:54:55:49:01:7b:9e:13:56:
f2:6f:86:6f:ca:98:9e:c7:53:e9:74:4d:84:70:00:86:80:a6:
1f:3e:ad:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9bv5N5JNBQ1hDoHJAAcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjYwNzI4MjMwMDU4WhcNMjYwNzI5MjMwMDU4WjAzMTEwLwYDVQQD
Eyg1YzE1NzYxMmM0ZWQxMjVmNzdiMzY1MDk2MzE4M2Y3Yjk0NWNhMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXbKMHA/JugPmIC15IcDne2Mhhra
OxJyeA1/sSbO29TSAn1eO66WXwqdLFHCofY3YJL94RB6BrdDeXp13MCktDTkBsgR
uQMvno+F1qrAh5fZZ2V5aekaM0XfayECPMnXcFIv7fITT/qjfdTmE4/VmFrToyKC
1wC+XYu+LcO9CaFWjJZPiYrwKNs+TaO83E31LFjeaOr3b2m0hYyYJnsRHO/OsYUl
LhGkOgT8Gn9da6IEaGqyys3VoyxlrYCGzUF949TGduAUPnWv6RHhM4YmA147SYyX
W9QPx1LktNo5wkHDJ9F5BwmrlVLDZQcmvgADy4FJoLs7o2t2N2dbBYUQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwVdhLE7RJfd7NlCWMYP3uUXKNdMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgPffGVn
7XUGr5f0/UWWzaXgJoiJYrBTF7ZnyOufZu6wYSxcXJha2ruVF6U+X2WLCry5oxRb
DYYQS2QIZ5pHXQz+7pY7xwG31QQqjAkZ1Q3uLFdp4KhYTBH6CezL34IB6w6DZEfY
5Jt3k35pHhlueBOnorpKyvlvpzhK/lktDDp68Wie2RKvploqGK8iV+ry24IUT4t+
ZMgYELKDi8ry5Kb6zSoUWfTYZw6IC2iGZ9jOCFUnDpTSX2JwcauHmZN+KN8IGqhY
8HStnaF6yTHFgrzRFcH5O3NF8REZtY5YseKS4lRVSQF7nhNW8m+Gb8qYnsdT6XRN
hHAAhoCmHz6tTg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:32 2026 by rpki-client