Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: OMRVeoidn8MzobtUWpEIKuCJefL61jSdK2qUG/AR7T8=
Subject key identifier: A9:FD:8D:13:DA:B1:9A:91:18:7A:AF:BE:50:F6:E3:CD:99:05:5A:82
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019FA93E56E5AB7DBFFB6E1896FA67C2094A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 15:01:02 +0000
Manifest this update: Tue 28 Jul 2026 15:01:02 +0000
Manifest next update: Wed 29 Jul 2026 15:01:02 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: qe8ErWNc5aH8itiyXAX3IsF/TPxdYItySNTj8BRgl58=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:56:e5:ab:7d:bf:fb:6e:18:96:fa:67:c2:09:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jul 28 15:01:02 2026 GMT
Not After : Jul 29 15:01:02 2026 GMT
Subject: CN=a9fd8d13dab19a91187aafbe50f6e3cd99055a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:fe:60:0f:56:ee:15:db:48:1d:e8:71:bb:
f9:24:5d:ce:60:7e:fd:a0:2d:19:24:f1:27:cf:76:
ad:45:e7:7c:5f:2f:43:4f:d3:d3:b0:f0:fc:2d:0c:
f0:c8:37:b8:ce:09:3a:98:13:ad:98:58:79:34:29:
2c:db:2e:d1:4f:10:ce:0f:6e:02:2b:27:02:f5:64:
f2:f3:2c:90:27:e6:98:fb:e3:e2:de:03:63:03:51:
c1:6a:25:84:b7:ec:18:91:85:e8:83:d3:16:a2:38:
5d:89:8c:a2:61:8c:fa:90:46:de:01:73:84:75:c2:
7a:20:3b:f1:c4:df:90:61:cc:09:a3:65:ee:69:e4:
8f:46:1b:0a:c9:cb:b0:ee:4d:8e:83:b4:9d:88:80:
52:e8:c9:c6:8c:1d:4f:a7:1e:1c:29:56:24:4b:16:
c2:0a:a5:5c:0d:5d:79:38:d6:75:19:ac:30:37:4f:
fc:89:11:99:17:59:c6:b8:ab:0a:22:32:71:1c:fd:
72:e8:83:86:76:38:4f:b5:02:6d:c1:e5:09:ba:63:
ab:15:9f:bd:30:b3:c9:1f:3a:74:2a:15:dc:03:29:
e5:f6:0f:2f:72:a1:2a:47:46:b5:b6:a7:68:f7:1f:
b4:5a:1e:70:88:53:ef:4c:d4:28:3b:da:b1:b4:aa:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:8D:13:DA:B1:9A:91:18:7A:AF:BE:50:F6:E3:CD:99:05:5A:82
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3c:55:10:51:c3:6b:5e:5b:fd:89:8f:42:32:8b:c6:4a:b4:
75:b0:67:d4:ab:e9:15:99:8e:63:95:68:15:94:2a:03:d7:33:
60:db:5b:18:cd:00:16:6d:7a:3d:d4:2c:b1:71:2c:4e:cd:e9:
33:a3:69:7c:ec:9f:e7:b6:60:3c:91:e4:a6:21:ee:a2:01:96:
64:d4:47:96:26:60:8b:10:2f:27:d0:68:49:c8:b0:0d:44:de:
d8:2d:2a:fb:37:0f:d9:4f:d4:4e:54:2c:fc:49:a3:9c:c3:77:
7a:e5:6e:5d:91:5d:ff:80:8b:15:33:06:1b:fe:59:e3:b2:70:
2e:a7:26:15:a6:d6:96:07:69:43:f5:cc:93:7c:b9:a7:32:62:
6a:0b:a4:66:b4:21:69:4a:86:0c:4e:de:6c:e1:88:15:35:3f:
64:34:f1:1e:b4:a8:62:5a:4d:7c:0a:92:1a:1d:7b:cd:e5:2e:
77:50:0a:03:ed:1f:3d:97:cf:9d:fc:60:92:43:3e:45:28:b1:
a7:c5:92:65:f0:64:cf:c6:79:bd:0a:10:3a:ec:58:5a:de:cb:
02:37:08:a6:ad:26:db:ea:92:32:db:4c:54:3d:a5:31:82:55:
cb:30:10:cd:53:fa:09:56:b4:74:8a:c5:81:8f:a1:74:3a:5a:
99:f5:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:04 2026 by rpki-client