Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: Tm8p2L8VLS8rHuK2/ee1zAtpaI6OGQXmSJN6t4EZQgM=
Subject key identifier: 03:4D:31:03:DB:F9:4A:D0:7F:1E:55:EE:83:22:4D:9C:E6:E4:55:EA
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019CABD9D6B169E3DB73FB006C1B14D3B560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0B4C
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: 59AM2LCHrte8T0xMa0wuvZL8RkHPlGN/zHB/9e5KLmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d6:b1:69:e3:db:73:fb:00:6c:1b:14:d3:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=034d3103dbf94ad07f1e55ee83224d9ce6e455ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:d2:05:46:b1:29:6f:65:58:9d:f9:5f:96:
28:0c:0d:75:b8:ea:c4:3e:d8:45:dd:b4:a2:77:b6:
2a:7e:c5:ea:b6:c2:e0:bc:a0:94:84:ae:0d:02:f0:
bc:14:9c:b5:c2:44:ab:68:77:85:33:76:e7:21:90:
6b:b7:1c:48:e6:25:fd:07:be:2b:d6:35:41:61:7b:
57:b6:aa:43:96:f1:5b:36:b0:43:dc:db:87:41:7f:
4c:98:f7:c7:27:c5:25:6b:a5:9a:cd:92:2b:f6:bb:
66:ea:21:cc:b2:a8:b0:56:eb:00:68:e0:97:e4:d8:
73:a2:f9:03:62:82:fa:7c:e2:60:e8:c3:b5:0a:c0:
58:2e:bd:59:c9:5a:43:03:2d:94:f4:fe:ce:c1:25:
5c:fc:e7:f9:a3:c5:71:aa:12:67:97:4f:98:de:0e:
d7:55:c5:df:ab:f9:f4:f3:d2:27:cb:f0:6f:bc:2c:
8b:74:b1:fc:0f:d2:d3:82:a8:57:ed:0e:4b:05:b9:
b5:0f:7a:90:25:f4:0b:70:d3:76:a4:35:ec:fd:81:
aa:04:e9:ed:ec:6c:b7:fb:98:45:a8:ec:95:62:27:
e7:c4:69:0e:0b:00:d2:11:3e:42:fb:dc:c0:a9:e5:
d5:48:50:01:16:88:2c:c9:5e:6b:29:cc:b2:6d:12:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:31:03:DB:F9:4A:D0:7F:1E:55:EE:83:22:4D:9C:E6:E4:55:EA
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:c9:84:6a:24:02:e1:c1:67:7f:8d:af:6c:7f:9c:ca:d4:
80:fe:69:42:77:f3:3c:f7:41:39:b5:55:03:64:53:bb:57:b9:
0c:3b:af:94:9d:85:90:5f:af:49:4f:4a:96:b6:2c:e1:c5:a2:
3d:b4:f3:58:1f:e4:44:31:17:cc:7f:9f:32:6c:b1:bc:ff:16:
c9:b2:7e:91:58:44:94:c1:36:ba:ac:f2:16:4c:92:b8:5c:38:
af:e7:6f:fa:13:16:b6:d7:48:bf:28:4a:f6:83:e9:6f:3e:74:
e4:5e:d3:0f:16:54:e0:35:70:29:ae:6a:cc:96:4e:75:7a:b3:
ba:da:f0:e2:9c:fc:f1:48:df:06:a1:2c:12:23:b7:b7:b8:ad:
b8:07:bc:d6:33:07:78:f2:ca:57:56:72:5d:93:44:f6:84:b4:
be:9d:cf:3c:78:da:29:6c:2d:4e:f6:86:1c:dc:ea:3a:d8:f0:
e7:22:f0:ce:29:d1:95:13:94:28:25:1d:58:25:2f:f5:53:07:
d5:8f:af:e9:5e:9c:ae:dd:7a:5b:0e:e4:8e:07:17:60:ae:d3:
54:0c:58:b4:7a:ea:0f:90:98:36:25:9e:66:a1:f0:0f:2f:99:
77:ea:23:8c:fa:75:ae:0d:66:7a:40:5f:41:64:30:55:3e:d1:
0a:58:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:23 2026 by rpki-client