Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: oMmssXUgjyYqXTojPTGCmiyCRL7lFHZ1B8Utw8sYZdQ=
Subject key identifier: F3:3D:39:C2:D2:ED:FF:42:66:FD:A4:4E:A0:C8:E1:04:C3:D5:20:4A
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019D9BF5BDE160E3876CCDA17AC0134F8EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 15:01:06 +0000
Manifest this update: Fri 17 Apr 2026 15:01:06 +0000
Manifest next update: Sat 18 Apr 2026 15:01:06 +0000
Files and hashes: 1: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (hash: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns=)
2: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (hash: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y=)
3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: b+D0v4u7Ta3GWRdH4r32PVe95qUO9JUO0conO7OgDZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:bd:e1:60:e3:87:6c:cd:a1:7a:c0:13:4f:8e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Apr 17 15:01:06 2026 GMT
Not After : Apr 18 15:01:06 2026 GMT
Subject: CN=f33d39c2d2edff4266fda44ea0c8e104c3d5204a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:25:c5:17:c8:5e:40:5f:ff:04:a5:a0:6a:
c9:94:57:e5:66:5e:6d:e6:d5:8f:6d:f5:a8:75:13:
25:2f:02:a5:ec:2f:d4:7b:44:84:ba:60:15:13:ad:
70:6c:ae:70:e0:d6:45:0f:87:7f:54:2b:44:6e:eb:
24:30:ee:1d:76:7a:a8:3c:5d:97:c8:84:a8:99:b1:
57:a2:8f:b8:da:e6:e5:8a:d4:bf:75:d1:7a:cf:9f:
a1:64:60:c8:a7:f5:d7:c3:9b:c7:0d:a2:d9:d2:88:
f6:a0:f2:c1:5b:80:74:94:17:a5:c5:dc:4a:a3:ac:
e1:70:d1:a2:09:ec:9c:f7:a6:0d:2f:5d:b3:ee:a2:
0e:d8:7c:4a:5c:0e:9f:8f:a6:d8:e0:20:1c:80:ca:
6c:37:87:2c:5c:fc:59:5a:b6:9e:79:c9:47:87:41:
bb:79:40:a5:55:3d:c5:4d:d9:e1:0d:e4:19:2d:eb:
6e:a7:5f:3f:8a:b8:19:7d:0f:89:56:2d:0e:20:fd:
8e:f1:d1:c1:02:2a:0c:0b:6f:42:5c:fa:73:43:d6:
1b:50:fb:08:fa:0d:45:e7:8b:18:05:7c:69:2c:9d:
af:87:43:15:15:69:87:68:2f:ec:dd:b5:73:fc:ee:
b0:86:2b:30:22:0f:c1:42:5a:0d:f8:ba:0d:1b:80:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:39:C2:D2:ED:FF:42:66:FD:A4:4E:A0:C8:E1:04:C3:D5:20:4A
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:04:05:4e:8e:48:a0:7d:11:5b:2f:5a:74:68:75:e4:fe:
5a:5a:51:6a:b9:05:f7:6e:b2:3b:1b:48:d7:28:be:b3:f8:df:
78:e4:fd:d9:3f:75:70:df:06:95:77:51:12:d7:01:85:de:46:
a4:eb:67:a7:59:f6:99:70:78:6d:db:60:06:c3:d6:c4:e6:5d:
4e:35:51:e7:31:b4:7b:42:02:e5:a5:5c:f2:33:71:e9:5c:16:
46:c1:6d:40:0a:98:0f:fd:3e:8b:bf:0d:5e:d0:39:ff:45:e2:
14:20:02:8c:ea:ff:b5:ae:91:85:56:b9:2b:42:df:a0:e4:b3:
ee:39:fb:07:a5:98:a0:d3:6a:3a:7e:d3:8d:e0:27:30:c8:d4:
0f:1f:74:68:7f:9b:64:36:7e:cc:8f:56:e5:33:8a:3a:8d:4c:
9f:80:77:79:5c:7e:5f:4e:29:91:e5:43:2e:a4:2e:7e:ff:2b:
5b:3f:a7:d1:5f:db:ec:0e:11:19:81:81:2e:24:f9:14:70:0a:
2c:7f:0e:57:29:fb:53:ab:4a:d8:59:85:3e:3d:3f:49:01:96:
c2:41:cb:7a:44:1f:4e:b2:fb:d4:bb:a9:0c:c6:74:93:c7:e2:
9c:81:af:fc:7d:01:1b:7d:4f:d5:62:f9:07:e0:06:d3:41:4b:
5d:4a:66:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9b3hYOOHbM2hesATT47tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz
ZGVhYTgwHhcNMjYwNDE3MTUwMTA2WhcNMjYwNDE4MTUwMTA2WjAzMTEwLwYDVQQD
EyhmMzNkMzljMmQyZWRmZjQyNjZmZGE0NGVhMGM4ZTEwNGMzZDUyMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlolxRfIXkBf/wSloGrJlFflZl5t
5tWPbfWodRMlLwKl7C/Ue0SEumAVE61wbK5w4NZFD4d/VCtEbuskMO4ddnqoPF2X
yISombFXoo+42ublitS/ddF6z5+hZGDIp/XXw5vHDaLZ0oj2oPLBW4B0lBelxdxK
o6zhcNGiCeyc96YNL12z7qIO2HxKXA6fj6bY4CAcgMpsN4csXPxZWraeeclHh0G7
eUClVT3FTdnhDeQZLetup18/irgZfQ+JVi0OIP2O8dHBAioMC29CXPpzQ9YbUPsI
+g1F54sYBXxpLJ2vh0MVFWmHaC/s3bVz/O6whiswIg/BQloN+LoNG4C8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM9OcLS7f9CZv2kTqDI4QTD1SBKMB8GA1UdIwQY
MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct
NTU0MjYzODE5NTNjLzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj
LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbogEBU6O
SKB9EVsvWnRodeT+WlpRarkF926yOxtI1yi+s/jfeOT92T91cN8GlXdREtcBhd5G
pOtnp1n2mXB4bdtgBsPWxOZdTjVR5zG0e0IC5aVc8jNx6VwWRsFtQAqYD/0+i78N
XtA5/0XiFCACjOr/ta6RhVa5K0LfoOSz7jn7B6WYoNNqOn7TjeAnMMjUDx90aH+b
ZDZ+zI9W5TOKOo1Mn4B3eVx+X04pkeVDLqQufv8rWz+n0V/b7A4RGYGBLiT5FHAK
LH8OVyn7U6tK2FmFPj0/SQGWwkHLekQfTrL71LupDMZ0k8finIGv/H0BG31P1WL5
B+AG00FLXUpmxw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:25:32 2026 by rpki-client