Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: Tw141157pM4KPVAyEsE/IPWJZOCH7YQahYWhodfbpVY=
Subject key identifier: F0:17:F9:FD:BB:09:3E:D1:75:E1:84:38:CC:6C:8D:FA:78:78:3A:23
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019EC1800B49C4B0512B1DAF6C26E3D73E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0173
Signing time: Sat 13 Jun 2026 15:00:54 +0000
Manifest this update: Sat 13 Jun 2026 15:00:54 +0000
Manifest next update: Sun 14 Jun 2026 15:00:54 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: RT5d1x0zqg5xbtrqM25CBsMdhOqgcVZUfUXZxFeDyMY=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:0b:49:c4:b0:51:2b:1d:af:6c:26:e3:d7:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jun 13 15:00:54 2026 GMT
Not After : Jun 14 15:00:54 2026 GMT
Subject: CN=f017f9fdbb093ed175e18438cc6c8dfa78783a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:ba:76:22:c2:c7:86:f0:82:68:4c:81:88:
53:63:bf:58:93:c0:2a:ad:42:70:41:1c:e6:60:5a:
10:95:80:28:4d:e6:4d:59:d2:77:a2:a5:a5:51:88:
a0:fc:8a:8f:0f:42:30:a6:e7:fc:19:7b:8e:fc:60:
d2:b4:06:f0:c3:d5:0e:e1:bf:0b:ad:51:aa:83:1e:
62:26:ec:03:d5:be:fd:2d:29:19:16:c5:37:6b:7f:
48:95:84:cb:9c:af:63:7a:53:41:03:94:2c:41:9f:
75:ca:b5:be:10:fc:d9:fd:f5:a1:e4:9d:9a:78:8e:
42:77:8f:f8:02:ec:46:85:83:4b:f5:ac:da:9b:b5:
0b:c7:24:46:68:c9:7e:43:4f:b2:c0:99:21:93:2a:
b5:00:ec:9d:84:09:a9:a7:ab:be:2e:fd:d8:6f:cb:
85:4e:ff:88:5a:d6:6f:f7:5b:f4:26:19:ff:9b:ce:
03:76:d5:d7:4c:f9:c2:a7:e7:68:36:56:0a:a9:c6:
3e:1e:5b:e8:2e:64:21:d5:1a:e7:c5:d1:1c:b3:9c:
c1:79:d4:5f:63:68:1a:cb:95:8c:dd:e5:9e:7b:1d:
c3:a2:5a:ec:32:7d:be:3b:db:64:d4:2a:6f:a7:f4:
38:00:13:b3:5b:68:cc:f7:78:08:04:88:6f:e1:6c:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:17:F9:FD:BB:09:3E:D1:75:E1:84:38:CC:6C:8D:FA:78:78:3A:23
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:81:2f:d3:1c:d6:fc:0d:18:f6:58:92:78:cc:87:46:6d:88:
d8:f3:31:32:d7:d2:85:a8:4d:8d:56:a4:5d:2e:9a:b9:59:69:
9d:50:6f:af:96:e9:77:83:5a:ff:d6:95:87:cb:32:db:3a:eb:
4e:35:dc:f3:82:40:30:18:56:65:66:1e:65:bd:82:f4:48:56:
97:29:aa:71:d7:0a:bf:29:05:8a:f7:0e:6b:42:12:8a:16:f9:
a5:04:67:17:7c:2c:aa:30:ab:bf:eb:49:60:bd:26:d1:e4:6e:
c5:d1:4e:17:49:52:8e:45:58:aa:a1:1c:83:12:cd:17:69:30:
03:55:d5:42:cf:16:91:d9:ea:2c:61:a1:03:87:14:8a:c3:c9:
c1:58:6e:e5:ef:2d:b4:23:14:1e:9b:ca:55:9d:a2:6a:66:0a:
bd:16:e3:75:d9:0d:ce:11:e6:61:d6:25:8e:16:b8:21:45:1b:
96:37:9f:81:b7:1a:1b:58:cc:8e:43:a3:43:60:da:bb:78:29:
3b:cf:8e:94:99:a7:a9:80:9a:81:c6:b4:43:34:2a:d5:16:90:
27:ea:64:ef:63:b2:3e:1c:12:70:a2:ab:c1:91:d2:65:93:44:
7c:5e:16:ca:02:3e:35:90:82:83:d4:c1:5f:e3:23:7e:e0:ac:
e1:d4:35:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgAtJxLBRKx2vbCbj1z4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjM3M2U3YTg0NDA2Y2VhYjVmN2FhOTE1MjM0YzkzZDhi
ODhlOTEwHhcNMjYwNjEzMTUwMDU0WhcNMjYwNjE0MTUwMDU0WjAzMTEwLwYDVQQD
EyhmMDE3ZjlmZGJiMDkzZWQxNzVlMTg0MzhjYzZjOGRmYTc4NzgzYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ha6diLCx4bwgmhMgYhTY79Yk8Aq
rUJwQRzmYFoQlYAoTeZNWdJ3oqWlUYig/IqPD0Iwpuf8GXuO/GDStAbww9UO4b8L
rVGqgx5iJuwD1b79LSkZFsU3a39IlYTLnK9jelNBA5QsQZ91yrW+EPzZ/fWh5J2a
eI5Cd4/4AuxGhYNL9azam7ULxyRGaMl+Q0+ywJkhkyq1AOydhAmpp6u+Lv3Yb8uF
Tv+IWtZv91v0Jhn/m84DdtXXTPnCp+doNlYKqcY+HlvoLmQh1RrnxdEcs5zBedRf
Y2gay5WM3eWeex3DolrsMn2+O9tk1Cpvp/Q4ABOzW2jM93gIBIhv4WzMcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAX+f27CT7RdeGEOMxsjfp4eDojMB8GA1UdIwQY
MBaAFDcjc+eoRAbOq196qRUjTJPYuI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYt
N2ExZWM1ZDQ5ZDMzLzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYtN2ExZWM1ZDQ5ZDMz
LzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoEv0xzW
/A0Y9liSeMyHRm2I2PMxMtfShahNjVakXS6auVlpnVBvr5bpd4Na/9aVh8sy2zrr
TjXc84JAMBhWZWYeZb2C9EhWlymqcdcKvykFivcOa0ISihb5pQRnF3wsqjCrv+tJ
YL0m0eRuxdFOF0lSjkVYqqEcgxLNF2kwA1XVQs8WkdnqLGGhA4cUisPJwVhu5e8t
tCMUHpvKVZ2iamYKvRbjddkNzhHmYdYljha4IUUbljefgbcaG1jMjkOjQ2Dau3gp
O8+OlJmnqYCagca0QzQq1RaQJ+pk72OyPhwScKKrwZHSZZNEfF4WygI+NZCCg9TB
X+MjfuCs4dQ1sQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:39 2026 by rpki-client