Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: waRtxjYuyIEU7GPZPcABHOjqfGRSzoptBzJuIXM7wjU=
Subject key identifier: 08:56:5F:F8:9B:0A:06:8E:2A:F3:07:7C:CB:F1:0C:E8:BF:93:F5:FF
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019CA8A13DE40FEC6BFF4581D01F0721674C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 5D
Signing time: Sun 01 Mar 2026 09:01:05 +0000
Manifest this update: Sun 01 Mar 2026 09:01:05 +0000
Manifest next update: Mon 02 Mar 2026 09:01:05 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: +IKxAHFplAGTBr7eHi+m3ZrjFVMZMXVcZR+LWEkJ4rQ=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:3d:e4:0f:ec:6b:ff:45:81:d0:1f:07:21:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Mar 1 09:01:05 2026 GMT
Not After : Mar 2 09:01:05 2026 GMT
Subject: CN=08565ff89b0a068e2af3077ccbf10ce8bf93f5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:9e:29:4a:93:ec:39:f4:89:84:6e:d9:3c:
cf:cd:1f:60:68:9a:f6:4b:6d:cb:df:9b:0a:be:72:
85:3c:db:10:14:09:51:18:c0:49:99:83:b6:c6:54:
b2:83:9e:d9:2e:4e:0d:d9:85:a2:73:43:77:15:60:
ca:b0:f5:cf:b3:23:b2:7b:68:df:f0:9b:84:1a:df:
db:97:57:4b:62:b5:bb:0d:d0:16:32:39:93:2f:0c:
7a:21:e4:dc:4b:4e:e3:4c:f0:d7:25:bb:4e:37:a0:
7d:8f:82:5d:47:b1:a5:63:b8:e1:8e:e6:d6:f8:3e:
f6:dc:54:9d:b8:ab:78:d0:c8:3c:fc:22:15:c2:a3:
35:4f:f4:85:0c:98:a4:19:28:5a:08:75:cf:f0:3c:
0b:69:1b:92:62:10:f2:79:ae:aa:12:ff:d2:a0:82:
a9:14:20:2f:d5:fd:f3:92:be:d7:61:29:09:7d:5b:
50:59:f1:8a:7e:c9:d6:e8:bd:41:25:e6:32:2d:3d:
dd:d6:29:0a:d1:7f:0f:eb:a7:d5:77:8e:2b:74:33:
48:f1:75:41:40:b0:9b:0a:c6:37:1f:34:80:14:61:
4d:e1:e2:02:3a:b3:31:63:03:87:32:a1:b1:8c:a1:
3a:c2:e1:7a:d5:ca:83:16:fe:01:27:0b:0d:28:5b:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:5F:F8:9B:0A:06:8E:2A:F3:07:7C:CB:F1:0C:E8:BF:93:F5:FF
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b8:ca:a2:df:93:00:71:71:d8:f8:7d:9c:f0:44:9e:9c:38:
2d:b4:0d:39:93:37:9b:dc:1a:59:84:76:45:11:06:1d:52:cc:
5c:4c:00:88:5b:a8:e5:3f:c1:8e:7b:1c:70:84:d9:52:f1:fa:
73:fa:0d:d3:9e:dc:21:8c:b6:5c:1e:31:0a:2b:48:7e:09:0b:
e4:3c:5e:d6:98:12:19:af:60:8e:51:60:c9:d1:1c:59:8c:b0:
ec:60:83:d6:c5:74:c6:9c:36:83:6d:34:00:f7:bc:a3:8f:d0:
d8:f6:24:cc:03:2c:7f:d4:e0:bf:f1:08:5a:03:ce:79:67:51:
ff:aa:d0:21:c5:2a:ca:fd:2b:fb:3a:2d:e2:5c:a6:42:43:1b:
ee:a3:b7:7a:06:2d:4c:3a:70:af:69:72:f8:e1:3c:f7:cc:7c:
72:7f:f4:63:25:18:a8:93:4e:6e:e6:05:77:13:e4:84:9d:47:
2d:d9:65:64:91:40:89:65:5c:b3:94:a8:c1:13:0a:e5:c2:54:
a4:54:93:27:0d:f6:84:80:14:34:f6:ae:2a:1e:6f:6e:ba:57:
d3:2c:de:a8:6d:c6:01:6d:a0:f7:9e:8a:9f:c7:df:ee:b1:43:
93:65:71:63:8b:7b:9a:80:20:3d:64:98:9c:39:d3:cb:92:4a:
61:51:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:37 2026 by rpki-client