Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: ujDAlKuwxhaxZ4JiSNvUMEM8LyzSvJRFnIWxMdWO0Gk=
Subject key identifier: 10:16:C4:56:5C:DE:1F:A7:04:EC:3B:62:CA:40:EF:6E:5E:01:58:FF
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019DA52FC792BFCC7B727F7861B7A00BF21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0A97
Signing time: Sun 19 Apr 2026 10:01:05 +0000
Manifest this update: Sun 19 Apr 2026 10:01:05 +0000
Manifest next update: Mon 20 Apr 2026 10:01:05 +0000
Files and hashes: 1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: plToGEwHVXuQur8X2lkNqWSFFmjd18jDIdfzN1hr8bo=)
2: qA3ImQcdu-q2a1X16c9AUNh8cvo.roa (hash: 0LDllHhDiUHrvufBGDxeRBb8RrRX38Z7Lp/cTDfB448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:c7:92:bf:cc:7b:72:7f:78:61:b7:a0:0b:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Apr 19 10:01:05 2026 GMT
Not After : Apr 20 10:01:05 2026 GMT
Subject: CN=1016c4565cde1fa704ec3b62ca40ef6e5e0158ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:4f:9c:92:da:2e:a3:83:23:9f:57:61:b3:
f6:e3:41:a3:e8:cd:b8:19:8a:a1:1e:8e:34:ea:8b:
19:84:3b:10:b9:27:fb:b7:a7:09:83:90:8e:12:5e:
04:51:b5:4a:07:2a:5a:ea:df:74:61:6c:03:f4:90:
0e:8e:a3:15:7e:43:17:7a:8b:3a:29:6f:e4:d2:49:
14:7d:ef:d0:55:0f:69:1d:a3:1c:9f:10:41:0b:e5:
ce:8d:08:62:72:27:7e:94:41:7d:c9:e0:af:14:2e:
0f:16:3e:cb:26:d8:c0:6e:ca:9e:b8:80:e6:5b:c4:
eb:6b:3d:73:e2:6f:11:94:77:03:b7:9b:75:f6:54:
a1:45:16:9e:54:23:4c:10:8c:95:9f:10:59:76:72:
31:b9:ed:15:51:25:e7:c5:c7:ca:bd:cf:e7:f4:42:
51:5f:5d:18:9c:5f:67:57:23:49:bf:97:98:f7:be:
9f:26:70:21:1f:7c:ab:3f:27:37:c8:7d:ed:32:62:
63:4e:cf:71:36:02:97:e6:1b:aa:36:a1:4d:ae:6a:
a3:ff:fa:f9:c0:33:c4:35:b3:6f:c8:f0:87:28:a9:
90:b0:e0:ad:4c:c9:6c:6c:20:60:dd:6e:b4:ec:38:
06:b3:fe:e3:60:b0:a5:e1:58:d2:9b:5e:35:fa:a8:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:C4:56:5C:DE:1F:A7:04:EC:3B:62:CA:40:EF:6E:5E:01:58:FF
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:5c:76:cd:be:3c:69:82:cc:de:e4:39:99:6a:8e:14:de:
76:b0:9c:8a:c0:6f:bb:73:47:7b:e4:49:fb:55:3d:82:ab:e5:
68:da:57:1e:e7:43:4f:c3:9c:05:70:68:19:af:f0:d3:6b:8a:
b3:32:f0:cb:eb:25:92:7b:d0:b3:f8:29:0f:de:89:10:8f:bd:
f0:ca:ea:2c:f7:b8:35:c4:1e:ca:da:dd:72:f6:a7:00:62:e3:
9a:3d:6e:e8:1a:d9:35:e9:44:30:21:26:cc:e7:95:9d:a9:bd:
2f:e8:47:4f:0d:94:5a:e3:92:de:4d:13:fd:21:6e:09:87:8e:
eb:49:7e:a9:d5:1e:4b:29:5a:98:6a:ad:de:9a:e6:ec:d7:a3:
b4:06:c8:9c:c7:1b:fd:57:27:a8:99:0f:3a:7e:71:90:fa:db:
6e:81:b0:13:19:f7:fc:45:58:03:bc:b5:8f:90:ae:60:dc:3e:
d3:24:1f:88:68:12:d3:5b:4b:4d:80:61:d6:97:f5:e5:37:e2:
68:c5:47:84:98:f9:87:3c:39:82:90:e4:f4:42:d9:cd:49:4b:
43:c7:87:81:64:52:04:fc:cc:aa:6d:2e:0d:ac:15:3f:db:38:
d5:fe:fb:d2:0b:aa:e3:e6:84:e0:30:44:36:6f:1a:29:32:15:
ac:7d:e1:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL8eSv8x7cn94YbegC/IeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx
NGMzYzgwHhcNMjYwNDE5MTAwMTA1WhcNMjYwNDIwMTAwMTA1WjAzMTEwLwYDVQQD
EygxMDE2YzQ1NjVjZGUxZmE3MDRlYzNiNjJjYTQwZWY2ZTVlMDE1OGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+9PnJLaLqODI59XYbP240Gj6M24
GYqhHo406osZhDsQuSf7t6cJg5COEl4EUbVKBypa6t90YWwD9JAOjqMVfkMXeos6
KW/k0kkUfe/QVQ9pHaMcnxBBC+XOjQhicid+lEF9yeCvFC4PFj7LJtjAbsqeuIDm
W8Traz1z4m8RlHcDt5t19lShRRaeVCNMEIyVnxBZdnIxue0VUSXnxcfKvc/n9EJR
X10YnF9nVyNJv5eY976fJnAhH3yrPyc3yH3tMmJjTs9xNgKX5huqNqFNrmqj//r5
wDPENbNvyPCHKKmQsOCtTMlsbCBg3W607DgGs/7jYLCl4VjSm141+qh6OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAWxFZc3h+nBOw7YspA725eAVj/MB8GA1UdIwQY
MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt
M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz
LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbxcds2+
PGmCzN7kOZlqjhTedrCcisBvu3NHe+RJ+1U9gqvlaNpXHudDT8OcBXBoGa/w02uK
szLwy+slknvQs/gpD96JEI+98MrqLPe4NcQeytrdcvanAGLjmj1u6BrZNelEMCEm
zOeVnam9L+hHTw2UWuOS3k0T/SFuCYeO60l+qdUeSylamGqt3prm7NejtAbInMcb
/VcnqJkPOn5xkPrbboGwExn3/EVYA7y1j5CuYNw+0yQfiGgS01tLTYBh1pf15Tfi
aMVHhJj5hzw5gpDk9ELZzUlLQ8eHgWRSBPzMqm0uDawVP9s41f770guq4+aE4DBE
Nm8aKTIVrH3h9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:19 2026 by rpki-client