Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: NNuHSSpnbppMf6ordoyQ4ulLx5AGiJheJgO0JnjZ1mM=
Subject key identifier: 43:91:0E:27:29:32:25:AE:9F:47:28:3B:FE:51:17:C8:92:E0:77:9D
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 019D98F497D5673708DC0F20D599CC72C121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: gxLSL3rGIkwGjQY9heZm1VgJLQypY1xeFj9ywV1L3i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:97:d5:67:37:08:dc:0f:20:d5:99:cc:72:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=43910e27293225ae9f47283bfe5117c892e0779d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:9d:7e:9a:d2:91:ea:53:01:52:af:69:18:
cd:46:12:5a:67:85:44:11:b0:7b:87:38:98:41:35:
50:7d:15:54:a9:78:39:e2:62:76:64:46:c0:7b:4e:
68:b6:43:80:06:5d:99:37:96:2a:37:05:0f:06:ce:
67:13:e6:4f:52:ef:5c:f4:4a:67:ef:37:92:8c:81:
31:93:cf:79:64:22:8e:d6:07:0a:13:59:a4:59:d0:
b9:95:b6:dc:f6:77:a6:03:54:e2:93:64:70:54:ce:
9c:36:fd:7a:e7:44:fe:af:a8:68:bf:58:32:45:aa:
d7:3f:dc:3f:59:26:cd:26:93:06:c8:b5:0b:2b:c5:
36:42:b8:be:c4:b3:a2:35:d9:bb:a7:01:72:91:d6:
64:ff:d6:5a:cb:8d:99:c4:a1:b6:72:da:a5:f8:38:
bf:50:a4:76:9b:5d:bc:98:1b:8f:85:fc:99:8a:38:
2b:ff:ee:3c:0c:a7:42:04:4f:23:14:86:6e:f2:e0:
05:af:40:f3:b1:27:aa:19:89:8f:a6:cb:46:f5:1e:
3f:e3:49:d7:60:61:df:81:a7:5c:cb:e7:f3:41:94:
68:b8:6d:30:e1:ed:a8:70:a9:30:22:f3:02:cf:91:
61:7a:e0:7a:88:d1:b6:9f:54:a9:35:ee:3e:3c:63:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:91:0E:27:29:32:25:AE:9F:47:28:3B:FE:51:17:C8:92:E0:77:9D
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1c:9e:7e:d8:ca:6d:e2:d4:d2:35:c5:1b:90:4f:23:41:7e:
1f:00:85:3c:f7:bf:ff:1a:a4:fb:6a:ed:bd:36:4e:f6:e3:df:
30:ec:10:e1:f8:c7:22:1d:e2:27:77:9e:fd:f4:97:7f:cc:68:
5b:f6:df:72:2e:15:31:d3:e0:b6:2b:e6:f1:a9:fb:b1:57:3c:
57:f0:7f:e8:75:74:be:a1:e2:75:07:d9:f6:13:c1:93:2c:8e:
df:d4:11:ef:b4:ce:b5:b1:54:ea:78:c0:f6:ec:da:86:0f:09:
4b:bc:da:c3:4b:23:9e:b7:86:67:3f:f8:c3:d1:c7:e3:fe:5d:
45:97:7e:f1:95:94:03:fc:cb:8b:56:89:35:b4:ac:66:e3:e9:
1e:ea:0f:68:9b:0b:69:71:85:2e:65:6e:b6:af:c3:ee:c0:7b:
b2:c5:bd:72:ba:3b:b3:2e:f4:ef:55:df:4d:2d:a1:b8:9a:99:
84:8c:aa:c3:40:f5:a2:f0:37:71:01:0b:d7:39:9c:db:71:5b:
08:6d:8f:b3:30:78:88:2c:4f:a7:f6:41:02:27:42:90:2b:72:
28:91:11:92:9d:2e:64:9a:60:5a:bc:98:54:7b:d1:2d:2b:1d:
30:a1:e0:6f:ae:67:10:7a:09:a2:65:50:2c:1e:be:80:9e:10:
20:d3:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:30 2026 by rpki-client