Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: rGQDZHE4zxBC5MQFAIXIxttTEcWa7XNmhtSYzxxu3ls=
Subject key identifier: D8:1C:D5:42:EF:30:AA:FC:1F:D6:C3:D1:CC:A0:6B:55:C1:19:1F:B9
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019CAE6BDCDBD96211C543F13486C9BFDB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:30 +0000
Manifest this update: Mon 02 Mar 2026 12:00:30 +0000
Manifest next update: Tue 03 Mar 2026 12:00:30 +0000
Files and hashes: 1: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (hash: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns=)
2: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (hash: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y=)
3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: f2oUjPUlor5s36heHoKhnGB55b7Yb5f7FhnabxKEt88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:dc:db:d9:62:11:c5:43:f1:34:86:c9:bf:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Mar 2 12:00:30 2026 GMT
Not After : Mar 3 12:00:30 2026 GMT
Subject: CN=d81cd542ef30aafc1fd6c3d1cca06b55c1191fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:16:e0:b5:e5:c6:4d:17:64:77:31:d8:a1:
e7:c0:fe:08:2f:f4:c4:e0:f4:a9:b2:96:85:55:2c:
19:7d:56:00:b1:85:6d:6f:01:f3:0f:56:95:e2:86:
a2:e3:9e:8c:85:71:63:c8:46:02:28:09:fc:14:3e:
fc:9d:5c:ef:3d:04:a9:1d:42:0d:a2:b9:3d:de:48:
c8:d2:6e:5f:6a:46:cc:c9:79:45:ef:bd:e5:d3:83:
91:e2:ee:86:bf:d3:76:6e:90:2c:9a:d8:83:f9:ee:
aa:12:da:9e:f3:52:81:ef:12:a6:f5:f4:95:cb:62:
ca:ea:1e:df:fc:b6:93:aa:48:1b:40:fe:2d:12:2d:
4a:fb:c0:70:7e:aa:fd:bf:2f:a9:51:01:af:42:0d:
b0:98:6e:dd:3c:28:51:65:72:0a:6d:de:bf:dd:43:
5b:af:ff:83:e8:5f:98:06:e5:3a:03:ce:9d:5b:d4:
a1:75:58:06:fe:b2:fa:6b:2a:cb:27:53:e6:b2:b4:
a5:6a:dc:a6:26:8e:9e:a8:44:7e:1a:aa:fd:08:b6:
f1:7c:03:09:f0:c1:f3:4d:b5:e7:ce:d2:eb:c4:b0:
61:a8:09:47:03:b4:51:ba:26:90:29:5a:20:90:5f:
1a:68:31:fb:53:6e:93:fd:29:f8:e6:c9:0c:3a:2c:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:D5:42:EF:30:AA:FC:1F:D6:C3:D1:CC:A0:6B:55:C1:19:1F:B9
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:68:5e:33:28:0a:b4:de:29:62:0d:18:a5:8e:dc:2d:66:68:
22:56:72:e6:c8:ba:8e:bc:30:fb:5d:e7:96:a4:5f:b9:be:27:
40:bb:cd:c2:f1:6c:f3:07:5a:26:a8:84:5b:2c:ee:61:c3:8a:
f9:7a:12:67:8f:19:d2:1b:99:f7:f1:43:94:9b:25:c9:51:e6:
ab:53:21:8b:37:b0:5b:c2:af:c0:de:f1:7c:73:68:89:46:8a:
38:b1:72:c8:37:16:72:d3:0f:29:e8:0a:91:b3:c4:3f:fa:3e:
35:0c:2a:b4:1b:94:f4:e2:34:09:96:1a:32:d8:df:af:ac:ae:
0a:0e:ad:06:3f:98:70:92:33:2f:a1:11:3d:32:80:c7:f4:2d:
d2:86:59:b9:37:74:f9:34:87:bd:46:a2:c2:20:b3:21:39:66:
4e:ec:dd:d2:3c:c3:94:49:02:0b:f2:e1:68:9c:da:58:6b:3b:
53:c5:50:7f:80:85:20:8f:4c:15:82:3c:08:f6:de:3d:6b:c5:
43:bb:f7:97:a3:af:f8:aa:8f:14:f6:6e:58:4b:94:9f:d9:7d:
16:f6:a6:f3:e3:3a:76:75:b9:0d:d0:a2:51:14:7c:3a:03:7b:
1c:44:57:00:ff:dd:b4:bf:97:9a:ce:0f:63:bb:80:f6:a9:8c:
b4:0c:25:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyua9zb2WIRxUPxNIbJv9tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz
ZGVhYTgwHhcNMjYwMzAyMTIwMDMwWhcNMjYwMzAzMTIwMDMwWjAzMTEwLwYDVQQD
EyhkODFjZDU0MmVmMzBhYWZjMWZkNmMzZDFjY2EwNmI1NWMxMTkxZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oQW4LXlxk0XZHcx2KHnwP4IL/TE
4PSpspaFVSwZfVYAsYVtbwHzD1aV4oai456MhXFjyEYCKAn8FD78nVzvPQSpHUIN
ork93kjI0m5fakbMyXlF773l04OR4u6Gv9N2bpAsmtiD+e6qEtqe81KB7xKm9fSV
y2LK6h7f/LaTqkgbQP4tEi1K+8Bwfqr9vy+pUQGvQg2wmG7dPChRZXIKbd6/3UNb
r/+D6F+YBuU6A86dW9ShdVgG/rL6ayrLJ1PmsrSlatymJo6eqER+Gqr9CLbxfAMJ
8MHzTbXnztLrxLBhqAlHA7RRuiaQKVogkF8aaDH7U26T/Sn45skMOizobQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgc1ULvMKr8H9bD0cyga1XBGR+5MB8GA1UdIwQY
MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct
NTU0MjYzODE5NTNjLzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj
LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGheMygK
tN4pYg0YpY7cLWZoIlZy5si6jrww+13nlqRfub4nQLvNwvFs8wdaJqiEWyzuYcOK
+XoSZ48Z0huZ9/FDlJslyVHmq1MhizewW8KvwN7xfHNoiUaKOLFyyDcWctMPKegK
kbPEP/o+NQwqtBuU9OI0CZYaMtjfr6yuCg6tBj+YcJIzL6ERPTKAx/Qt0oZZuTd0
+TSHvUaiwiCzITlmTuzd0jzDlEkCC/LhaJzaWGs7U8VQf4CFII9MFYI8CPbePWvF
Q7v3l6Ov+KqPFPZuWEuUn9l9Fvam8+M6dnW5DdCiURR8OgN7HERXAP/dtL+Xms4P
Y7uA9qmMtAwlCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:21 2026 by rpki-client