Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
File: ny8WbQXql29prtWORqQfflBSRHU.mft (raw, json)
Hash identifier: wzqaUD+9i4NYg3LX04kw+ItpcaP/YSEaEe2nF2kJ1OY=
Subject key identifier: 0B:46:58:91:49:ED:EC:C6:8B:5A:76:B5:D8:0D:D0:9E:DA:10:06:34
Authority key identifier: 9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
Certificate issuer: /CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Certificate serial: 019D99D09F5B359ED9161A92055FA437F5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
Manifest number: 1638
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: ny8WbQXql29prtWORqQfflBSRHU.crl (hash: 41+G4g1TDaer0aNDHG7OA+UcMNVG2dbO5t2AhWJ59Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9f:5b:35:9e:d9:16:1a:92:05:5f:a4:37:f5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2f166d05ea976f69aed58e46a41f7e50524475
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=0b46589149edecc68b5a76b5d80dd09eda100634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:8d:9d:6c:b1:af:a9:5f:e6:fa:2a:c7:dd:
ae:af:7d:35:48:d0:b0:a7:d8:6b:05:44:84:6f:a7:
f4:f1:96:39:23:2f:06:b2:b5:23:27:3e:09:89:29:
fa:7a:e6:9c:7b:1d:7f:eb:bb:50:b5:c1:22:81:b9:
3a:31:31:8a:19:34:d9:63:be:81:83:17:08:b0:9f:
d4:b7:a3:18:bd:f2:7f:7e:7d:81:e2:8b:33:c2:91:
01:03:d2:69:f8:0f:bf:bd:fe:ea:64:90:4d:ab:45:
d8:74:66:e3:37:85:d5:02:7a:a3:09:0d:36:1e:51:
54:2a:a1:a2:f4:99:c5:cc:1f:57:42:13:68:03:bd:
2b:1c:81:d8:9d:36:5d:a2:71:3a:14:c7:4e:1e:0d:
fd:26:be:66:fb:b1:53:06:c2:b4:98:bf:b5:05:aa:
ca:79:33:4a:ee:51:a4:7e:c2:03:41:c4:c1:79:ca:
06:70:59:34:79:63:2d:b1:d8:a1:c9:92:08:89:d6:
14:fe:a2:7c:2a:81:dd:11:cc:c0:eb:3e:8c:29:68:
53:40:94:93:02:9b:30:d7:27:27:8a:19:04:13:09:
07:8d:7c:a4:94:f3:36:88:d5:6e:4f:7c:f3:bb:58:
04:bd:4d:f2:8f:24:fe:18:51:3d:5f:09:20:22:e4:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:58:91:49:ED:EC:C6:8B:5A:76:B5:D8:0D:D0:9E:DA:10:06:34
X509v3 Authority Key Identifier:
keyid:9F:2F:16:6D:05:EA:97:6F:69:AE:D5:8E:46:A4:1F:7E:50:52:44:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny8WbQXql29prtWORqQfflBSRHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/22efbb-3659-4a3d-bea4-962d4f0c29b0/1/ny8WbQXql29prtWORqQfflBSRHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:ad:e3:71:57:e5:18:e9:e1:71:aa:e7:7f:c2:16:db:c7:
bd:f0:43:78:5d:0a:a1:78:e5:2f:34:af:37:e6:f5:02:8d:02:
a8:84:3a:6b:ea:3c:0f:f8:2c:02:28:6e:82:c7:fa:56:d1:28:
3e:6b:c4:88:06:5c:a4:1a:5d:7f:9b:12:a2:12:6a:83:78:be:
2a:27:e4:56:22:1d:c0:1a:e6:dc:98:12:1a:90:c5:e0:f1:08:
c6:39:cf:9f:ea:b3:ff:f9:f9:bb:f6:8e:70:d0:2f:7d:ee:7d:
bd:d3:09:61:e8:9f:84:23:21:ea:37:28:d3:7d:fe:d9:db:cf:
08:00:79:fc:de:15:6f:df:1f:11:4f:c8:68:c3:c6:ea:56:b4:
75:2e:59:64:89:28:8c:ae:5d:1d:c8:cc:50:f8:17:54:2a:8b:
70:bd:0f:0d:cf:39:aa:60:c2:f9:3b:7b:b8:4d:54:ae:b5:f5:
f7:34:9b:1e:4c:58:fb:2a:dc:68:8c:5d:da:19:90:35:57:95:
30:eb:b5:c0:50:4e:b7:7e:21:16:63:ef:bb:89:af:f1:93:15:
52:4d:a4:9b:bf:d9:19:9a:75:9b:fa:76:e5:f6:be:98:2c:dd:
e9:f3:fb:da:79:8b:b8:81:5e:1d:4c:b0:65:e6:b6:f1:73:2d:
36:35:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:46 2026 by rpki-client