Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: BsrxrrnDSpiy00qozUv8QO1ewsPwHxmjzhiIshYXM9c=
Subject key identifier: 75:F0:AB:76:AA:D2:48:5A:13:A1:89:10:B4:31:A4:43:4F:4D:24:90
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 019CAFECB4E22AD7FC157F4DCB44B16A5C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 0129
Signing time: Mon 02 Mar 2026 19:00:51 +0000
Manifest this update: Mon 02 Mar 2026 19:00:51 +0000
Manifest next update: Tue 03 Mar 2026 19:00:51 +0000
Files and hashes: 1: 5AyUcUP8UFa03d6jQItDEbWXyi0.roa (hash: ZjaIy+ybGhKGWcrRG6dw/kl40YV5Z1/+6QWlVZn1AoA=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: 8IsBfXB2jJX3cXeFJ0mAkBbcaykVihDsLbum24CAxYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:b4:e2:2a:d7:fc:15:7f:4d:cb:44:b1:6a:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Mar 2 19:00:51 2026 GMT
Not After : Mar 3 19:00:51 2026 GMT
Subject: CN=75f0ab76aad2485a13a18910b431a4434f4d2490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:6d:54:3f:c6:a7:68:7e:b8:1a:7d:a8:73:
6a:45:79:ff:fc:88:60:3f:d0:c7:51:9f:85:43:b9:
ae:89:a9:95:65:c8:d5:b7:b2:e3:7f:91:35:66:c6:
ca:49:fa:e0:2a:75:e5:08:5d:a5:39:f3:52:a1:d2:
0d:2d:20:8c:99:f7:b3:99:15:eb:6a:93:81:c8:fa:
c4:ee:4f:ef:24:43:6b:9e:59:41:48:17:7b:17:f6:
d1:6e:20:bd:6f:c0:21:c4:a4:10:0d:21:a3:ae:02:
b0:34:34:ef:ba:08:4b:57:09:63:09:3e:e4:66:7c:
ed:98:be:8b:4e:30:78:57:50:af:71:4b:92:ed:9c:
07:73:c5:48:15:f1:9f:ed:f0:fe:c9:70:9c:f0:3c:
49:4c:1c:82:07:71:42:49:0b:d5:8d:6e:65:ce:2a:
36:37:07:11:62:d2:6f:d4:a5:ce:90:28:b8:b6:9c:
fc:90:8a:2b:3b:83:06:f8:20:c0:ec:5c:6c:fd:05:
a5:45:1c:d8:51:ce:ff:12:1d:de:f8:4b:9f:2e:bd:
fb:fb:04:67:a6:e6:73:43:04:90:c1:b3:73:fe:b8:
e2:e2:08:82:67:a5:d5:c8:d6:0d:3b:a1:1d:74:63:
b5:c0:93:39:a0:9c:7c:ba:f1:fb:ad:5a:56:44:bd:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:AB:76:AA:D2:48:5A:13:A1:89:10:B4:31:A4:43:4F:4D:24:90
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:f1:ef:cf:00:ee:91:5b:ab:75:96:29:0d:fc:55:94:3d:
96:1f:eb:13:60:e8:25:ae:12:7c:1a:fd:af:3c:93:4c:16:58:
b3:be:f5:44:9e:69:ba:38:97:7e:41:a3:b8:93:51:d9:83:b7:
de:d5:b9:60:e7:27:c1:5e:13:fe:1d:7d:92:ec:fb:19:6f:4e:
8c:4d:9a:e1:55:d4:1e:7c:fc:c6:07:b3:76:99:61:70:05:53:
19:35:f0:73:cd:5c:0d:ac:e3:ad:80:4c:0e:77:9b:b7:d6:ad:
23:19:fd:44:11:32:77:91:0d:8f:c4:de:2b:12:fd:aa:72:34:
ae:76:b6:f2:a6:6f:89:3c:21:28:8d:aa:3f:22:0c:db:b0:55:
f8:0d:9a:65:8f:73:ee:fc:db:ea:f4:5a:e1:3c:dd:9c:fe:ef:
c1:c2:8f:40:1a:74:47:e0:fb:9c:18:11:fc:91:b9:f4:fb:ea:
07:47:7a:28:21:b0:ed:e6:fe:18:7d:62:8a:23:08:20:08:30:
22:ab:d2:72:46:bd:32:02:3b:60:32:d5:35:40:1b:f4:39:e9:
d8:b5:75:4c:78:07:ef:1a:d9:e2:54:d5:9d:87:c3:41:a8:bd:
87:e4:66:71:79:f7:99:a0:6e:20:e0:0d:a1:ce:38:29:85:2f:
1a:0a:94:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7LTiKtf8FX9Ny0SxalwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGNkMjY3YzU0YTNmYzIyOGJjYTFkZWUzNzJkOTZjNjAz
NzNjMjcwHhcNMjYwMzAyMTkwMDUxWhcNMjYwMzAzMTkwMDUxWjAzMTEwLwYDVQQD
Eyg3NWYwYWI3NmFhZDI0ODVhMTNhMTg5MTBiNDMxYTQ0MzRmNGQyNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAZtVD/Gp2h+uBp9qHNqRXn//Ihg
P9DHUZ+FQ7muiamVZcjVt7Ljf5E1ZsbKSfrgKnXlCF2lOfNSodINLSCMmfezmRXr
apOByPrE7k/vJENrnllBSBd7F/bRbiC9b8AhxKQQDSGjrgKwNDTvughLVwljCT7k
ZnztmL6LTjB4V1CvcUuS7ZwHc8VIFfGf7fD+yXCc8DxJTByCB3FCSQvVjW5lzio2
NwcRYtJv1KXOkCi4tpz8kIorO4MG+CDA7Fxs/QWlRRzYUc7/Eh3e+EufLr37+wRn
puZzQwSQwbNz/rji4giCZ6XVyNYNO6EddGO1wJM5oJx8uvH7rVpWRL0xSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXwq3aq0khaE6GJELQxpENPTSSQMB8GA1UdIwQY
MBaAFDWM0mfFSj/CKLyh3uNy2WxgNzwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWIt
OGEyZTlhNDY4MTliLzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWItOGEyZTlhNDY4MTli
LzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5nx788A
7pFbq3WWKQ38VZQ9lh/rE2DoJa4SfBr9rzyTTBZYs771RJ5pujiXfkGjuJNR2YO3
3tW5YOcnwV4T/h19kuz7GW9OjE2a4VXUHnz8xgezdplhcAVTGTXwc81cDazjrYBM
Dnebt9atIxn9RBEyd5ENj8TeKxL9qnI0rna28qZviTwhKI2qPyIM27BV+A2aZY9z
7vzb6vRa4TzdnP7vwcKPQBp0R+D7nBgR/JG59PvqB0d6KCGw7eb+GH1iiiMIIAgw
IqvScka9MgI7YDLVNUAb9Dnp2LV1THgH7xrZ4lTVnYfDQai9h+RmcXn3maBuIOAN
oc44KYUvGgqULw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:38 2026 by rpki-client