Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: plfYSyHXqlEmrEfOqlMzPVTh1M00Fm95kB8/mhT0k4s=
Subject key identifier: FC:A1:5E:ED:75:13:E1:95:F6:72:51:BF:3B:44:04:AD:CE:DA:E4:63
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 01A0C3327401BEB4E45C62D016FCF4347744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 0346
Signing time: Mon 21 Sep 2026 09:00:58 +0000
Manifest this update: Mon 21 Sep 2026 09:00:58 +0000
Manifest next update: Tue 22 Sep 2026 09:00:58 +0000
Files and hashes: 1: Jy76E1q7dDTCejXtPafJsRSES8Y.roa (hash: 1WiGvZJxKYYrQ+5QCN5Y0ow1dlNCCLa6+9MgNHjV0TQ=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: greLsqYL7VU/+SBrVF1zjE2LN2Oa6sDLHS1u89mA5CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:74:01:be:b4:e4:5c:62:d0:16:fc:f4:34:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Sep 21 09:00:58 2026 GMT
Not After : Sep 22 09:00:58 2026 GMT
Subject: CN=fca15eed7513e195f67251bf3b4404adcedae463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:33:fe:d9:4f:0c:4c:cc:e7:53:0a:d7:b3:
c9:d4:19:77:36:d4:6b:dc:8a:16:38:6d:0e:13:c6:
dc:f8:32:42:e5:28:5a:4d:6c:a6:00:8f:d9:db:56:
6d:f8:6a:51:f1:7f:3e:13:77:92:34:6d:dc:df:60:
03:c2:c6:47:ae:69:51:17:d2:7f:de:08:d0:ff:19:
54:77:dc:63:3c:eb:8b:6c:67:48:36:7c:27:3f:fd:
93:f6:b1:2b:a6:ee:7e:8b:20:47:10:26:44:13:da:
7a:4d:7d:b8:ff:3a:48:14:73:d4:ca:c8:41:61:e8:
18:0b:5c:03:f0:69:3c:3c:6b:e5:6e:c4:d7:50:1d:
ee:d8:49:58:ee:d2:af:32:79:57:51:38:87:3e:ab:
09:0a:b4:76:29:b2:1e:43:87:d5:57:bf:94:a1:fc:
6d:d4:6e:37:d2:24:ce:61:aa:aa:78:45:6f:20:71:
54:7d:1c:d6:72:82:c5:09:6b:ed:61:99:39:1b:98:
20:6a:b3:c4:94:e6:96:bb:d5:23:dc:17:47:3a:43:
29:18:20:1b:53:16:ec:d0:99:54:c6:07:50:ae:85:
2e:e0:36:49:30:0c:ce:4c:13:02:6e:bd:79:40:94:
2f:cc:af:10:61:30:4b:cd:c8:53:97:7f:90:2c:b9:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:5E:ED:75:13:E1:95:F6:72:51:BF:3B:44:04:AD:CE:DA:E4:63
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:24:58:f8:47:02:47:6f:a1:26:34:fb:51:3c:50:34:0a:9e:
b5:b8:78:da:a1:5c:05:ce:35:86:8c:11:78:21:48:49:99:05:
5c:e1:0d:b3:4c:a7:3e:43:04:3b:1d:05:01:70:7c:f5:84:6f:
58:71:31:33:51:72:38:f4:29:35:04:a8:59:38:34:76:d0:70:
aa:21:61:ae:d7:c6:f8:9a:7b:31:11:e2:94:3c:50:5a:36:c8:
68:8d:81:11:f3:7b:74:c2:65:82:43:79:82:f5:69:08:da:82:
bf:b1:99:91:b2:60:c1:e4:47:4e:f1:73:e3:ae:7a:d3:59:20:
25:df:56:9a:6e:c0:f5:3e:cd:d1:29:fb:f1:32:36:5e:13:21:
77:a9:89:3a:7c:bf:15:ba:4e:0b:01:a4:5b:8d:88:29:26:4a:
1e:9d:6c:90:99:67:a3:f3:59:48:8a:8d:90:a7:84:30:87:5d:
84:9e:a9:ff:6d:c5:1b:d2:26:ff:ea:33:ac:8b:10:12:72:ff:
a1:a4:16:3c:e5:f9:af:cb:36:97:e6:4f:45:ff:76:c3:67:6d:
11:7a:17:4f:4e:96:8b:70:bd:e5:26:0a:eb:47:54:5d:41:7b:
79:89:bc:49:50:15:b0:36:c8:42:27:d3:80:ab:e2:19:cf:9d:
99:ae:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:53 2026 by rpki-client