Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: 7ba9AW3rQa2jQgq7K2J6bFsZSCMUvZmgAo80tA90vKk=
Subject key identifier: 4B:3C:E2:54:44:CE:5C:15:77:F1:24:65:62:AD:DC:D7:6C:FC:21:4B
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 019D9D75F362918FBEEFD962B229FB3E2336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 01A4
Signing time: Fri 17 Apr 2026 22:00:45 +0000
Manifest this update: Fri 17 Apr 2026 22:00:45 +0000
Manifest next update: Sat 18 Apr 2026 22:00:45 +0000
Files and hashes: 1: 5AyUcUP8UFa03d6jQItDEbWXyi0.roa (hash: ZjaIy+ybGhKGWcrRG6dw/kl40YV5Z1/+6QWlVZn1AoA=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: gTumC+AznIY7jRcUjfNj92LBgvn/KexiNVRGPmoJh20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:f3:62:91:8f:be:ef:d9:62:b2:29:fb:3e:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Apr 17 22:00:45 2026 GMT
Not After : Apr 18 22:00:45 2026 GMT
Subject: CN=4b3ce25444ce5c1577f1246562addcd76cfc214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:1b:ba:54:02:11:21:46:c8:75:d4:90:89:
33:21:6b:19:51:c8:57:d4:a2:9e:42:fa:ec:cd:fb:
19:51:4a:f5:f9:11:fb:7c:01:0f:4d:9d:02:84:26:
5f:d0:fe:ac:3e:62:bf:e4:41:1b:f0:41:17:e6:95:
7d:e7:7f:a6:22:bd:83:d6:2b:a7:82:9a:1f:86:f4:
5a:01:ff:9a:62:ac:6d:e1:45:30:dc:39:00:5d:37:
c4:1d:59:9b:f3:53:e0:e5:4e:ca:11:05:db:17:82:
51:fa:53:6a:3e:73:95:cf:cc:f3:eb:63:43:cd:10:
92:7d:45:69:63:9b:cd:65:6d:5f:82:61:68:34:b3:
ac:93:ad:55:f9:b1:d6:7d:f3:d0:3c:1f:03:ad:f1:
20:80:df:e5:c1:82:ac:6e:26:ba:7d:d1:07:e8:75:
d0:ef:44:53:85:34:5d:7e:58:dd:80:b4:f6:d2:ab:
8e:d4:11:2e:91:c6:41:be:97:b7:1d:08:0f:a5:fb:
4f:bb:f8:06:ff:13:f8:9e:7c:ad:e5:41:15:71:f4:
ec:8a:08:23:89:0d:8a:55:38:ba:0d:02:69:d1:c7:
ca:53:65:33:bc:1c:d5:9b:b9:64:27:70:b8:ff:51:
a0:fa:ce:28:48:af:c3:c8:10:91:fb:a2:35:c1:d4:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:E2:54:44:CE:5C:15:77:F1:24:65:62:AD:DC:D7:6C:FC:21:4B
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bb:69:56:98:c7:b8:0f:3e:be:73:cf:74:1e:b4:67:62:33:
12:ff:37:e5:e8:91:20:be:60:43:4d:f9:17:bc:81:f7:dc:6a:
2f:ae:b9:96:28:fb:17:84:a6:00:7a:3a:0b:09:6f:82:d5:08:
c4:8a:a6:f6:5d:a4:da:05:94:00:0d:4a:08:18:c9:f3:05:ad:
2b:ff:b9:e3:1f:e3:61:9d:2e:c1:80:9e:97:65:02:14:d3:f2:
b1:5d:30:e8:89:0d:d2:ed:ba:4e:34:7e:4e:3f:b0:b9:24:7b:
ef:81:59:5c:22:61:e4:17:54:0c:3b:3b:0b:4b:66:02:2f:74:
33:61:9c:9a:5b:c8:b0:64:4b:db:87:ba:18:28:ab:cd:94:43:
55:76:83:22:30:fd:d8:45:46:0a:76:9a:aa:ce:13:57:ae:9c:
09:44:0a:2d:0f:8d:8b:77:bc:57:69:c3:d5:2f:5f:d2:17:9a:
06:21:cb:5a:29:f7:33:a9:c1:1d:01:3e:5f:bd:06:f2:f4:c8:
eb:5e:59:6a:05:9e:1e:e1:22:a6:de:b0:68:7d:ca:af:17:9c:
9b:82:f4:4d:80:a8:8a:9e:85:4e:9e:7b:52:60:56:4d:dc:99:
40:51:e5:29:53:5d:01:d4:e4:80:21:b8:7f:61:92:24:8a:b4:
14:ff:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:36 2026 by rpki-client