Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
File: ny83TJpzj63o-FDKq11507kARYQ.mft (raw, json)
Hash identifier: Fl4jKkNSKVPiNeESp82BMtEaNm20/lcVIBcsrozXu/o=
Subject key identifier: 24:C7:94:8A:F5:E1:D6:92:EA:4B:AB:9A:7D:71:3A:8F:D9:12:7C:82
Authority key identifier: 9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
Certificate issuer: /CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Certificate serial: 019CAB6B745D261890BA70CE7C422B06C6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: ny83TJpzj63o-FDKq11507kARYQ.crl (hash: 7fnXRNofvLZbZ/Z+gCPxt3jAQvUr451Ez9U/Y3n002k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:74:5d:26:18:90:ba:70:ce:7c:42:2b:06:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f374c9a738fade8f850caab5d79d3b9004584
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=24c7948af5e1d692ea4bab9a7d713a8fd9127c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:54:bf:cd:fb:3d:02:d7:a1:1e:c6:cc:5b:
83:1b:1e:e3:68:6f:40:6a:c4:19:67:2a:cd:02:8f:
de:d9:82:8a:09:c2:f2:d4:9f:70:11:9d:4d:c1:15:
c7:24:bb:24:8a:4e:43:a5:fd:45:8a:08:a0:f3:c7:
5c:b9:e2:4b:48:a1:e2:34:29:c1:85:ea:f9:f7:b5:
f2:b1:7b:08:25:4d:05:29:d3:1b:9e:50:2f:1b:c6:
39:87:7f:8f:39:ba:a6:18:fd:db:b3:7d:b5:38:87:
44:60:60:b5:59:b6:9d:eb:7b:14:b7:bc:33:bc:b3:
d1:d7:a5:b4:9a:07:b5:27:8d:05:5c:61:a2:95:0e:
8d:62:b9:f1:c1:bd:b3:fb:ec:37:c8:31:53:aa:dc:
76:b0:f7:2e:62:af:4a:40:af:dc:61:e7:4f:40:f6:
cf:38:ec:df:e5:31:ea:c1:4f:f2:5e:54:08:43:27:
2f:7f:bf:3a:2d:78:fb:01:17:c7:f5:04:3a:45:cb:
aa:5b:99:ec:97:e8:e4:43:9a:32:0d:5b:73:12:8b:
b9:61:47:f6:1f:cb:04:93:60:98:c2:a8:94:0d:d3:
48:ad:e5:8a:ac:23:c4:5f:ec:68:43:38:cb:c1:69:
52:02:5c:1c:a7:8e:1e:83:02:cb:d2:c2:53:de:39:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C7:94:8A:F5:E1:D6:92:EA:4B:AB:9A:7D:71:3A:8F:D9:12:7C:82
X509v3 Authority Key Identifier:
keyid:9F:2F:37:4C:9A:73:8F:AD:E8:F8:50:CA:AB:5D:79:D3:B9:00:45:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny83TJpzj63o-FDKq11507kARYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/634e76-5c5f-44c4-b8a4-524e930e5fd1/1/ny83TJpzj63o-FDKq11507kARYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a2:b5:e0:14:ab:c5:d7:d0:e4:dd:6a:55:79:d0:3b:8d:0f:
c4:26:e5:05:86:6d:18:bd:86:1e:e0:f3:b7:4e:0e:1d:d8:6f:
cb:f9:fb:44:4c:ab:b0:94:21:c8:eb:48:04:ed:b1:f0:06:51:
29:84:62:5f:56:d4:78:30:b4:4c:d8:e3:fa:f5:ae:45:62:4b:
86:0e:17:b8:eb:18:65:b8:80:cd:95:75:9d:7b:9e:68:72:f8:
ac:c9:8d:4c:9a:32:f8:6d:e0:df:66:16:45:c7:b0:47:34:95:
24:70:a3:26:8e:07:15:52:33:33:2e:40:ac:88:8b:2b:68:b8:
33:6f:0e:db:68:28:d6:1e:75:4b:1a:b7:31:13:32:cc:2f:d8:
bc:92:89:49:b3:57:d7:9d:ec:36:96:7c:03:9d:72:20:47:fd:
29:3b:29:9c:76:1f:c1:cb:8b:51:ef:7c:8d:5f:94:1d:66:b9:
2b:58:24:70:82:fa:db:9b:5d:75:cb:3e:4c:e7:99:c8:de:6f:
da:1b:9d:06:23:a0:24:77:fb:84:59:db:32:b7:5e:64:c4:a6:
e9:2d:24:c3:36:07:14:77:bf:41:d5:95:e9:29:1f:fd:4d:7f:
7c:b8:e0:41:1f:bf:c4:f7:94:b3:2b:42:82:20:cc:e3:e4:a3:
4e:37:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:28 2026 by rpki-client