Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: s5LeXoliR9gvLmxPmr6VFCB5/AZW7Bcztvh7GZjboUA=
Subject key identifier: 7C:46:FA:2D:9C:26:CA:75:61:5F:76:EC:42:45:A0:5B:3A:80:BF:80
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019D9D3F37324C4587D712AC08881CF1CA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0BC9
Signing time: Fri 17 Apr 2026 21:00:58 +0000
Manifest this update: Fri 17 Apr 2026 21:00:58 +0000
Manifest next update: Sat 18 Apr 2026 21:00:58 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: QMu2Ow/5PB7g8b9gW6KS8byUzK0N4vQHvCEa8AHp2hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:37:32:4c:45:87:d7:12:ac:08:88:1c:f1:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Apr 17 21:00:58 2026 GMT
Not After : Apr 18 21:00:58 2026 GMT
Subject: CN=7c46fa2d9c26ca75615f76ec4245a05b3a80bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:ab:c3:cc:93:fa:7f:5a:f3:d7:a5:cd:80:
bd:67:bb:ae:43:75:01:bc:ef:6a:01:68:39:2c:f7:
ab:f1:c1:68:ce:75:86:8b:aa:7e:6a:9d:04:96:20:
e2:e6:2c:a2:94:30:69:e4:8d:e2:aa:23:99:93:1d:
34:80:72:21:e4:70:6f:f8:64:b6:26:5a:ee:e6:20:
6d:af:91:8a:39:79:15:a0:ad:7c:00:2c:42:6d:37:
5d:bb:94:05:47:6d:c0:df:00:b4:69:ad:70:6d:61:
c3:48:b1:00:11:f7:f4:80:5f:5c:e9:f3:e5:44:57:
cf:fc:18:e9:c2:4a:e3:62:9b:2d:a1:5f:85:03:cc:
c8:3b:f1:14:d0:43:97:3a:0f:fa:50:09:5b:8b:bd:
23:9f:5c:23:02:fd:33:e7:43:85:52:81:55:68:cd:
50:df:7f:51:f4:55:bd:59:d6:cb:fe:7e:5e:e0:99:
91:43:30:de:e0:fb:7d:3d:68:32:c5:9f:c2:b5:8e:
68:68:6a:aa:71:32:0b:80:be:7b:40:b4:5e:fd:af:
e3:83:d2:d0:1c:f1:17:2e:fa:f2:f4:74:e9:1e:46:
27:a0:0f:ef:62:66:84:27:e2:1b:a2:49:f2:1d:d9:
9c:14:32:d9:14:bc:1e:61:d0:fa:f6:7c:16:39:ba:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:FA:2D:9C:26:CA:75:61:5F:76:EC:42:45:A0:5B:3A:80:BF:80
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:6c:4f:c5:f8:09:16:da:81:80:c5:91:6b:55:13:2b:97:
ca:85:60:48:53:89:78:78:ca:3e:2a:76:07:64:fc:40:b1:f3:
e2:29:7e:4d:7d:00:a8:89:7e:b6:e0:51:4a:f4:9a:1c:a3:5c:
a1:ff:5a:79:66:c5:9e:47:da:3b:fe:a4:0d:8d:1c:5b:92:61:
30:e3:1b:22:e3:0a:fd:55:fc:d1:b0:7a:bd:f1:cb:27:1f:af:
fd:8c:2c:80:cf:cb:7e:4c:5a:db:05:79:2e:e2:91:47:9c:e6:
11:f5:64:d4:c1:b1:5a:4d:c4:64:d0:b5:a4:84:de:7a:5a:04:
45:58:b1:a2:43:91:52:7d:f7:64:55:0e:41:d5:6f:d4:26:90:
e9:90:4b:3f:83:4a:b0:6b:f7:69:e1:b6:d5:4e:7f:23:bb:e4:
a6:d9:34:8e:42:a0:4b:81:8d:3c:02:2d:bb:92:fd:af:32:05:
55:07:ac:54:43:49:94:fa:16:53:b2:7e:4a:3a:37:96:83:f2:
5e:70:39:3c:07:5c:dd:be:67:20:96:ca:36:8c:d7:3a:87:99:
11:0e:e8:d9:53:e6:15:91:83:4d:ce:a1:47:47:ed:9a:c0:2e:
00:1e:3a:40:15:a8:7b:d6:52:14:e9:67:1f:94:36:3e:eb:af:
1b:bd:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:01:28 2026 by rpki-client