Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: QbMMwuYFassiLjvkKHdZHs3FiKjz/GEyY4/esEx1gw4=
Subject key identifier: 62:D2:2A:2D:99:BE:42:CD:29:2B:DA:C1:53:1C:96:03:08:18:95:E2
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 01A0D493F9442DC7E1B743E5EC76A5B9690F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0286
Signing time: Thu 24 Sep 2026 18:01:02 +0000
Manifest this update: Thu 24 Sep 2026 18:01:02 +0000
Manifest next update: Fri 25 Sep 2026 18:01:02 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: PUWzjM3HvbUiDejdrG2OEbEXmkvmDvW+Beu7VnMm1fo=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:f9:44:2d:c7:e1:b7:43:e5:ec:76:a5:b9:69:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Sep 24 18:01:02 2026 GMT
Not After : Sep 25 18:01:02 2026 GMT
Subject: CN=62d22a2d99be42cd292bdac1531c9603081895e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:28:57:b9:32:14:c1:c3:e0:cc:26:4d:8b:
d1:7c:f3:cd:65:5a:33:7f:06:c2:49:7d:b0:a6:f6:
8b:77:bd:96:fc:7f:bc:74:82:a9:20:59:e1:9e:47:
08:25:33:0f:a7:87:e5:85:46:f5:e4:6f:10:8b:13:
cd:93:a3:fc:c1:26:47:87:8b:e3:e4:6d:d7:69:e8:
e7:1f:31:d8:c6:89:87:e3:e8:e8:2b:c4:18:42:71:
8b:9f:c1:8e:95:f4:af:08:d4:04:ee:4b:b7:ab:ba:
7c:09:58:54:00:e4:12:ba:cc:39:e6:d4:c0:bc:f2:
9f:7c:8a:b3:77:0b:52:27:47:73:29:1c:90:30:bb:
83:89:10:3d:7a:76:03:27:00:44:7e:53:0b:5d:14:
9c:1d:3d:d7:57:5d:97:c9:f0:1e:1c:e7:f4:80:94:
fd:13:f7:6d:de:62:5f:6b:40:22:fc:37:84:98:e7:
ca:c1:fc:1c:8f:3b:35:97:d9:2b:97:00:25:e6:d6:
a1:2d:61:99:95:aa:1c:3b:d0:6d:bd:01:4f:90:7c:
3d:e6:6e:00:1e:35:75:25:5e:1f:1f:9b:3d:01:95:
11:34:58:6a:cb:9d:e5:20:e7:e1:65:3c:48:3a:2e:
c1:02:b3:e5:a6:2a:f3:3b:ec:40:cc:a4:a9:c1:b9:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:2A:2D:99:BE:42:CD:29:2B:DA:C1:53:1C:96:03:08:18:95:E2
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e2:68:e7:91:41:4a:59:1d:82:96:ff:52:bd:7b:f5:de:49:
1b:12:83:7f:bb:fc:52:88:f5:7c:8c:00:e4:a7:54:69:f8:03:
89:c0:98:c1:b2:9b:f1:a5:b4:9d:38:e1:c1:b9:59:ec:3d:b2:
db:c2:2f:c2:a9:5c:64:e8:e3:f5:4d:4c:a9:8a:b3:d4:74:32:
f8:c5:52:40:80:18:fe:63:73:51:73:b9:d2:8c:b9:2e:ac:b4:
d3:63:53:40:bb:17:d9:e4:11:24:8f:7f:23:2e:c8:9c:22:05:
0e:3a:37:4d:59:4e:20:68:02:81:47:87:80:8f:1c:7b:00:b5:
9a:59:a8:a8:d3:c5:e6:9d:4f:75:87:65:dc:6e:d3:cd:f4:4b:
ad:8f:c4:58:c3:89:a0:d7:4e:d7:02:22:44:bf:bd:fe:c2:7c:
7d:aa:3a:fa:28:10:7a:92:9e:d1:1a:5a:9a:52:c5:1b:48:83:
92:d6:3a:e5:8f:f2:48:23:85:52:cc:42:6d:09:4e:30:f0:38:
a6:a6:c9:3a:05:9a:c7:58:ca:2a:0c:6d:3a:eb:f9:02:1c:96:
3f:31:ca:2c:38:b8:0d:74:ce:43:ae:80:64:9c:db:dd:f4:78:
3c:9c:64:64:42:f3:b7:9d:39:75:70:a2:c7:c0:36:c3:fe:d0:
8d:eb:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:25:45 2026 by rpki-client