Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: d1QJ7rrvYw5Zg4uvd5joN7W1OY+iW6ZZq5u20K0ZBEk=
Subject key identifier: B9:FD:5B:C3:24:0E:D9:44:1D:A6:C2:81:E3:B8:54:D7:EE:AD:73:91
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019D9BF5D482B11C852BC4596500C28D1B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: DB
Signing time: Fri 17 Apr 2026 15:01:12 +0000
Manifest this update: Fri 17 Apr 2026 15:01:12 +0000
Manifest next update: Sat 18 Apr 2026 15:01:12 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: UkfEXbUDKd/EDsqQ/7WMZfrhHKNCOjLAyJv5eDtTiAA=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:d4:82:b1:1c:85:2b:c4:59:65:00:c2:8d:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Apr 17 15:01:12 2026 GMT
Not After : Apr 18 15:01:12 2026 GMT
Subject: CN=b9fd5bc3240ed9441da6c281e3b854d7eead7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:52:2f:61:aa:d9:51:bd:e3:04:f6:28:ff:
54:5f:e3:97:b7:53:9f:d6:c6:90:ad:3e:73:d3:9b:
62:8a:91:2f:7a:cc:53:a6:58:51:6c:13:d2:2e:6e:
66:b2:f3:75:7a:9b:a5:74:2a:75:d3:d8:fa:70:46:
c9:b1:de:5a:40:e6:7d:49:bc:48:38:8f:e9:fe:ca:
62:1f:4b:9a:14:90:b5:34:c9:f8:58:5e:01:99:02:
e0:c0:8f:8d:b7:5d:45:f8:ed:16:91:db:ac:c5:6d:
3a:24:b5:97:d7:3d:af:f5:98:16:89:87:37:49:30:
fa:9c:3b:bb:2c:17:86:e4:c8:d5:bc:e1:6d:63:29:
d7:c9:6b:3c:a9:c7:08:bc:17:e4:84:52:65:6b:7b:
82:46:2a:f5:90:7e:ca:02:ad:ec:44:30:9a:3a:f2:
f8:e1:8c:e7:0a:e9:81:64:8e:ee:01:d9:16:b7:70:
37:03:54:44:ce:d1:2a:e7:27:ba:a2:6c:17:df:54:
48:5a:63:f8:5a:9c:e5:e3:46:5c:01:bf:12:a1:70:
00:83:cd:dc:e9:41:52:da:f6:d2:0c:cc:72:35:45:
03:9a:45:1c:5d:d3:bb:e8:7c:25:89:49:40:5e:a3:
d7:fa:29:ca:d3:e6:60:d9:06:6e:89:0f:f2:6a:d5:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:5B:C3:24:0E:D9:44:1D:A6:C2:81:E3:B8:54:D7:EE:AD:73:91
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:cc:98:ea:73:fa:ea:fc:22:38:14:da:94:47:1e:da:ea:
da:ed:0d:8b:e8:09:37:dc:f3:ef:3e:1c:c2:90:6f:b9:6c:f1:
d7:f5:00:7c:d4:d0:7b:65:8a:e4:ec:a5:79:a4:ab:c8:f7:8d:
97:92:81:88:44:c4:de:d1:7f:64:29:c2:fc:5f:9f:0a:56:9f:
be:e6:a5:29:ff:5c:c6:5e:c2:89:74:54:16:99:ea:0a:15:c4:
14:ac:cc:f9:bb:24:58:3c:7a:96:71:2a:1b:f0:30:28:e9:44:
f0:0a:de:3b:68:5f:bb:da:9d:4d:72:de:b6:92:3d:cc:ee:f9:
a2:66:63:79:9a:a5:2e:fd:86:22:ba:2a:49:70:ee:56:8b:24:
e1:12:34:1d:ca:a7:9b:2e:93:86:ba:63:e0:76:27:25:8a:24:
e8:8b:83:4b:a2:a3:cd:dd:73:72:83:ff:cf:65:b7:59:be:0d:
d7:a4:ea:1b:bb:e9:38:ff:ee:05:8e:37:bc:dd:69:ec:1c:58:
c6:28:c0:27:83:66:a4:40:04:cd:24:90:30:96:bf:62:a8:03:
2f:ea:5e:e8:f4:f9:14:99:dd:a3:ba:f9:aa:7c:07:d4:09:bc:
3b:66:5d:d6:03:58:6b:18:80:da:0f:54:90:a5:57:00:81:58:
75:b3:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:40 2026 by rpki-client