Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
File: ny8WbQXql29prtWORqQfflBSRHU.mft (raw, json)
Hash identifier: AH/Nnf+96GARso3W1rPMgnAlgNsdsaYtRQoCS6eMwNI=
Subject key identifier: C1:B7:9A:5A:09:16:FF:BA:0D:A7:16:F4:9A:AF:F3:05:4A:FC:07:B5
Authority key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
Certificate issuer: /CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Certificate serial: 019CAA58F96B768F4F13EE1E98C8F6158F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
Manifest number: 15BC
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: ny8WbQXql29prtWORqQfflBSRHU.crl (hash: eP1/rBXyv6fNBsGGh3eunuiI5J9oyY4ZKqz17PvxwIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f9:6b:76:8f:4f:13:ee:1e:98:c8:f6:15:8f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=c1b79a5a0916ffba0da716f49aaff3054afc07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:aa:94:49:f2:c8:22:a1:11:8a:c1:77:dc:
c5:cf:54:7f:31:36:c7:19:c0:37:9e:d5:bf:e6:47:
2e:bd:7c:f2:25:c6:af:9f:10:60:6e:ce:3d:22:2f:
98:75:f0:ce:18:cb:48:a9:97:c8:05:c1:13:f7:83:
74:48:89:00:fe:4a:bc:c8:f3:a4:9c:8d:93:15:b8:
dd:88:0c:ac:72:14:30:f6:65:8e:2c:0c:68:36:ec:
5f:30:e7:ae:ff:42:3e:95:95:6e:cd:d5:0c:70:ff:
3b:8a:c2:ba:73:1e:85:dd:5c:89:26:22:7a:dd:df:
16:d2:b7:0a:1e:09:ba:66:4d:eb:45:d4:42:e1:88:
06:cb:f2:4e:10:7a:c7:06:4c:74:65:c4:ed:03:70:
13:b5:cb:c7:d7:1e:ad:be:74:82:df:66:25:9b:ea:
3b:54:7d:8b:bd:82:8f:d4:a2:f1:6e:e5:5c:69:64:
5e:96:02:e3:87:79:5c:ef:1c:2f:f7:7a:a0:68:ca:
1d:99:81:5f:79:d3:2c:f4:77:71:63:74:d2:f2:a7:
75:f8:67:7e:bd:44:80:01:c5:b5:fc:d0:a2:fd:ad:
39:e8:36:39:5b:96:fd:45:39:e8:7f:ff:e3:eb:a5:
1d:a5:bf:56:29:65:b2:14:72:b7:d2:25:7f:2f:d2:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B7:9A:5A:09:16:FF:BA:0D:A7:16:F4:9A:AF:F3:05:4A:FC:07:B5
X509v3 Authority Key Identifier:
keyid:9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:91:9b:ed:03:12:34:81:67:e6:0b:86:4f:b4:52:11:0a:
64:f4:6c:af:3c:a7:8a:b0:c4:e9:f1:01:8f:b3:97:dd:b5:7d:
9b:a5:34:2e:07:0e:f6:dc:aa:6b:38:65:4d:b8:70:5e:69:db:
c4:a6:12:3e:fa:2a:b4:1d:cf:31:de:1a:00:80:69:6c:16:92:
42:ed:a8:b4:cf:fa:61:cb:9f:27:38:10:67:cb:09:39:98:6f:
38:ee:41:84:26:e4:aa:b2:e2:3b:eb:74:ec:0d:22:55:f0:89:
ad:40:e0:da:fd:88:15:bc:7b:d3:c1:f6:c9:33:45:58:11:56:
6c:6a:1d:d8:f5:33:f6:18:5d:2d:73:73:b1:36:28:69:b7:ca:
08:24:a9:42:f9:2b:f7:31:84:27:4b:e6:6b:7a:40:b7:07:cd:
e9:26:52:41:da:79:97:9b:3f:77:c4:7d:4a:0a:43:6c:f8:2f:
0c:bd:fc:61:f0:92:d1:3a:d4:da:90:bf:d5:f6:92:05:ab:28:
d8:9f:26:01:93:21:3c:c0:a6:5a:9f:d3:d0:0d:d4:13:2a:9c:
09:f9:91:0e:1d:05:b6:56:f8:7d:c7:e7:7a:11:ae:3d:91:7b:
6c:e6:50:22:92:c6:16:10:fa:b2:55:52:e7:dc:5a:d2:b1:a8:
c6:20:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:08 2026 by rpki-client