Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File: Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier: MVWniDDghvfpuoLROpnixd+sDoE1y+zfZCQTFE6QqY8=
Subject key identifier: 8A:57:04:5D:9E:43:0D:53:66:1E:45:7E:E9:44:93:5D:4A:E9:AC:6F
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer: /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial: 019CADFE23FB6582C18A53BA5882425184C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number: 0A17
Signing time: Mon 02 Mar 2026 10:00:39 +0000
Manifest this update: Mon 02 Mar 2026 10:00:39 +0000
Manifest next update: Tue 03 Mar 2026 10:00:39 +0000
Files and hashes: 1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: qyYmowfAYzvTkbRfjGPqabcNGFF6ZEzPWjZanRQ6HAM=)
2: qA3ImQcdu-q2a1X16c9AUNh8cvo.roa (hash: 0LDllHhDiUHrvufBGDxeRBb8RrRX38Z7Lp/cTDfB448=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:23:fb:65:82:c1:8a:53:ba:58:82:42:51:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Validity
Not Before: Mar 2 10:00:39 2026 GMT
Not After : Mar 3 10:00:39 2026 GMT
Subject: CN=8a57045d9e430d53661e457ee944935d4ae9ac6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:a5:ec:97:37:5c:0c:d5:12:84:d0:83:77:
a7:f9:87:c2:3e:14:c8:bf:5e:6a:19:43:90:92:2d:
c3:a6:37:7d:22:58:36:92:ed:45:87:78:d5:ad:52:
95:d8:67:42:d1:a6:87:17:0b:5a:96:04:fb:5f:85:
20:19:a7:25:cc:42:f9:d8:64:af:36:7c:cc:a4:f5:
44:0c:20:de:c8:b7:e2:6a:d6:ae:11:62:60:a7:6a:
52:91:0f:c2:14:98:a5:f5:3c:ab:ce:01:b6:cd:ea:
f5:1c:84:b4:4e:f7:da:84:d9:e5:15:59:f4:3f:e2:
dc:af:41:cf:17:1e:d1:2d:7f:33:e4:92:41:3a:0a:
c2:d3:7d:ed:bf:89:0d:51:8a:d1:fa:bf:ba:d3:70:
64:60:69:e3:36:35:8f:f4:9c:db:7c:1c:9d:ac:0e:
fb:d1:2c:90:80:84:b5:d6:76:9b:1a:67:c9:29:f6:
0c:a8:ae:4f:21:55:37:98:59:2c:f8:be:a9:c9:a0:
c1:15:c9:72:7b:6e:94:43:90:c8:e7:d9:04:59:53:
69:64:7f:69:64:e0:41:03:1a:65:8e:93:ba:26:dd:
90:aa:0c:69:5d:5e:61:48:69:91:f5:43:83:37:04:
64:bd:e6:80:43:96:5c:29:0e:6d:e3:e0:c2:af:48:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:57:04:5D:9E:43:0D:53:66:1E:45:7E:E9:44:93:5D:4A:E9:AC:6F
X509v3 Authority Key Identifier:
keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:8e:78:9a:90:8c:a9:0b:c9:81:be:5f:22:08:c2:55:33:
4e:8f:1b:fa:f5:b6:87:a7:b0:50:c2:84:07:70:7a:5c:6a:d4:
f1:53:bc:f6:7b:4f:3e:de:b1:9c:15:64:82:1e:9d:bc:8a:da:
a2:06:df:49:88:29:14:ee:43:64:95:6a:19:f9:63:fb:4c:58:
38:1f:5c:7e:43:ae:5a:7b:39:1d:32:24:1a:8e:8a:75:6a:40:
8f:0e:6a:88:4f:03:c3:8d:ad:32:53:77:d1:43:84:e8:89:d1:
94:b8:9e:ad:b2:2e:7c:6e:26:4c:14:a0:c8:00:15:ba:66:37:
f3:f7:a9:b4:0e:ca:5d:51:5a:8f:1c:ae:fb:15:69:9d:66:97:
13:c5:80:87:b6:8e:fa:e4:bb:5b:9e:61:79:c2:6c:a5:87:85:
d3:9c:dd:c5:70:76:ce:d4:bc:68:6a:c7:04:e2:56:ab:79:10:
64:fb:cd:24:56:af:7f:c5:df:c9:4c:32:32:0c:96:de:1b:63:
30:fb:15:93:89:5a:ef:e5:13:35:76:dc:07:01:c3:d5:16:9a:
4d:78:a3:34:6e:3d:c9:a4:93:b3:04:f3:56:36:0b:3a:94:1b:
41:18:04:d9:80:e3:95:c1:1b:47:4a:02:81:83:b8:e1:3b:a6:
6b:16:0f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/iP7ZYLBilO6WIJCUYTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx
NGMzYzgwHhcNMjYwMzAyMTAwMDM5WhcNMjYwMzAzMTAwMDM5WjAzMTEwLwYDVQQD
Eyg4YTU3MDQ1ZDllNDMwZDUzNjYxZTQ1N2VlOTQ0OTM1ZDRhZTlhYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19Wl7Jc3XAzVEoTQg3en+YfCPhTI
v15qGUOQki3Dpjd9Ilg2ku1Fh3jVrVKV2GdC0aaHFwtalgT7X4UgGaclzEL52GSv
NnzMpPVEDCDeyLfiatauEWJgp2pSkQ/CFJil9TyrzgG2zer1HIS0TvfahNnlFVn0
P+Lcr0HPFx7RLX8z5JJBOgrC033tv4kNUYrR+r+603BkYGnjNjWP9JzbfBydrA77
0SyQgIS11nabGmfJKfYMqK5PIVU3mFks+L6pyaDBFclye26UQ5DI59kEWVNpZH9p
ZOBBAxpljpO6Jt2QqgxpXV5hSGmR9UODNwRkveaAQ5ZcKQ5t4+DCr0hALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpXBF2eQw1TZh5FfulEk11K6axvMB8GA1UdIwQY
MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt
M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz
LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1+OeJqQ
jKkLyYG+XyIIwlUzTo8b+vW2h6ewUMKEB3B6XGrU8VO89ntPPt6xnBVkgh6dvIra
ogbfSYgpFO5DZJVqGflj+0xYOB9cfkOuWns5HTIkGo6KdWpAjw5qiE8Dw42tMlN3
0UOE6InRlLierbIufG4mTBSgyAAVumY38/eptA7KXVFajxyu+xVpnWaXE8WAh7aO
+uS7W55hecJspYeF05zdxXB2ztS8aGrHBOJWq3kQZPvNJFavf8XfyUwyMgyW3htj
MPsVk4la7+UTNXbcBwHD1RaaTXijNG49yaSTswTzVjYLOpQbQRgE2YDjlcEbR0oC
gYO44TumaxYPhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:38 2026 by rpki-client