Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: NAQrHNFvbcq+EsgV0pf1vSliJ7uOlKHmGiQC8O5mnv8=
Subject key identifier: 03:07:E4:D6:94:95:8D:5A:E0:E0:82:6D:36:A8:64:4F:D4:29:59:15
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 01A0CE91FCFC08A276991AABB8C8B6CD6C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 04CF
Signing time: Wed 23 Sep 2026 14:01:09 +0000
Manifest this update: Wed 23 Sep 2026 14:01:09 +0000
Manifest next update: Thu 24 Sep 2026 14:01:09 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: WapsYLsZXChvJrNJCH6yOlr/QP37sr6rMoQjqacTs4U=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:fc:fc:08:a2:76:99:1a:ab:b8:c8:b6:cd:6c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Sep 23 14:01:09 2026 GMT
Not After : Sep 24 14:01:09 2026 GMT
Subject: CN=0307e4d694958d5ae0e0826d36a8644fd4295915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:c6:ae:b8:d9:6c:3f:05:e0:e4:cf:48:5a:
cd:80:e5:8e:39:ec:f3:8a:ca:d1:64:9e:09:e9:04:
32:4b:78:8c:f8:86:36:ea:f3:06:9e:40:cf:0f:0b:
7a:47:d0:92:60:ff:de:cd:d1:1d:12:5e:23:2a:1d:
1b:53:a4:78:ec:83:a2:75:40:c9:33:c5:e5:7e:ba:
8f:8c:5e:ab:c6:6a:6f:4c:77:1b:99:52:b0:e8:bc:
af:9e:a1:6c:9e:2f:15:6d:69:97:83:29:36:96:08:
0e:15:ae:43:cd:f0:17:c5:62:51:11:4a:b4:d6:4d:
4e:28:40:08:83:1f:fa:07:e3:ea:53:01:7d:83:81:
ea:af:11:ec:ba:35:78:a8:a5:e1:52:ad:7f:1c:a7:
ef:8a:b2:60:ea:b0:09:48:dc:54:a5:29:e0:8a:bf:
30:8f:c3:d6:15:88:82:61:2d:25:ad:83:80:f8:f1:
f0:0a:48:a8:18:a1:18:07:ad:bf:43:9b:0e:36:55:
dc:3c:13:2a:0b:d7:ff:37:b6:75:cc:57:24:90:4a:
c3:8e:72:e3:88:ff:95:74:ef:96:18:c4:cd:6f:8f:
55:89:b8:6d:a7:f9:a3:2f:d2:e1:e0:7c:be:e1:8d:
6b:4d:b3:aa:64:31:64:e1:4a:8e:12:71:11:e5:2a:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:E4:D6:94:95:8D:5A:E0:E0:82:6D:36:A8:64:4F:D4:29:59:15
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:d0:21:8e:0a:3f:ba:0b:74:05:e4:8a:8f:ba:69:83:fe:
f9:39:11:9d:d7:e5:70:22:0f:57:18:f1:96:42:38:b6:9e:f4:
3c:e1:a3:c2:b6:52:cb:e5:7b:32:e0:4f:65:10:82:e8:00:f7:
f9:ba:bc:a6:ba:db:6f:63:2a:fc:fb:b6:27:78:e9:fb:55:18:
3e:39:b8:95:54:cf:7d:ca:31:64:b4:4a:3b:e8:29:fe:c1:9d:
7a:6b:50:41:ee:81:3f:68:57:d9:d3:70:6d:66:7c:ba:6f:7a:
9f:d5:c6:b9:68:ea:95:5a:b4:49:a4:06:3e:74:7c:c2:e4:ac:
e2:ae:43:a0:f3:62:41:d6:89:ed:48:d4:6a:be:a6:4c:87:d7:
62:10:70:48:48:4e:e5:f2:8f:5d:70:14:8b:0e:cf:ad:60:6d:
86:2f:4a:6c:ca:1d:18:be:e5:2b:51:a2:75:86:65:c8:62:b6:
13:90:36:ed:cf:aa:9f:41:32:d8:36:87:b7:b9:45:29:12:66:
ba:05:5f:31:85:fc:c5:61:88:78:13:1a:2f:19:fa:c9:6a:8f:
30:6c:10:31:e2:06:8b:65:33:4c:0a:14:f6:3f:95:0f:40:37:
d1:76:91:af:e6:fb:dd:9c:b0:4c:9f:23:b6:fb:ca:b9:67:42:
bf:ca:15:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkfz8CKJ2mRqruMi2zWwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjYwOTIzMTQwMTA5WhcNMjYwOTI0MTQwMTA5WjAzMTEwLwYDVQQD
EygwMzA3ZTRkNjk0OTU4ZDVhZTBlMDgyNmQzNmE4NjQ0ZmQ0Mjk1OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlHGrrjZbD8F4OTPSFrNgOWOOezz
isrRZJ4J6QQyS3iM+IY26vMGnkDPDwt6R9CSYP/ezdEdEl4jKh0bU6R47IOidUDJ
M8XlfrqPjF6rxmpvTHcbmVKw6LyvnqFsni8VbWmXgyk2lggOFa5DzfAXxWJREUq0
1k1OKEAIgx/6B+PqUwF9g4HqrxHsujV4qKXhUq1/HKfvirJg6rAJSNxUpSngir8w
j8PWFYiCYS0lrYOA+PHwCkioGKEYB62/Q5sONlXcPBMqC9f/N7Z1zFckkErDjnLj
iP+VdO+WGMTNb49Vibhtp/mjL9Lh4Hy+4Y1rTbOqZDFk4UqOEnER5SrbYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMH5NaUlY1a4OCCbTaoZE/UKVkVMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP07QIY4K
P7oLdAXkio+6aYP++TkRndflcCIPVxjxlkI4tp70POGjwrZSy+V7MuBPZRCC6AD3
+bq8prrbb2Mq/Pu2J3jp+1UYPjm4lVTPfcoxZLRKO+gp/sGdemtQQe6BP2hX2dNw
bWZ8um96n9XGuWjqlVq0SaQGPnR8wuSs4q5DoPNiQdaJ7UjUar6mTIfXYhBwSEhO
5fKPXXAUiw7PrWBthi9KbModGL7lK1GidYZlyGK2E5A27c+qn0Ey2DaHt7lFKRJm
ugVfMYX8xWGIeBMaLxn6yWqPMGwQMeIGi2UzTAoU9j+VD0A30XaRr+b73ZywTJ8j
tvvKuWdCv8oViw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:39:50 2026 by rpki-client