Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: 2jkfiXjwXnVaCTR7qqahc9gklKBIiUEidbhf6LoMqxY=
Subject key identifier: FD:55:71:B3:5D:92:52:06:F4:DC:F3:09:39:EB:11:2A:F8:14:D4:B9
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019EBF9172E9DF6ECF2E0F90D18AD1B45B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 06:00:40 +0000
Manifest this update: Sat 13 Jun 2026 06:00:40 +0000
Manifest next update: Sun 14 Jun 2026 06:00:40 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: l+wGmPsROAkC77Xs2T4jo4whb9zz3uRe3T8RHfd3oCM=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:72:e9:df:6e:cf:2e:0f:90:d1:8a:d1:b4:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jun 13 06:00:40 2026 GMT
Not After : Jun 14 06:00:40 2026 GMT
Subject: CN=fd5571b35d925206f4dcf30939eb112af814d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:83:8e:b4:65:1b:ac:22:af:de:69:41:17:
01:1b:2f:40:07:9c:c4:40:36:92:65:6d:18:2a:cf:
59:78:03:95:3a:3d:f6:eb:94:75:78:11:4b:5d:32:
d6:ae:5d:23:c5:41:61:d6:a8:72:ff:27:4a:cd:a4:
0b:bc:fe:6f:69:a2:27:25:b7:33:d6:ff:0d:e1:2f:
af:57:52:56:3a:6f:65:33:23:34:20:ce:e1:f8:40:
60:01:99:a5:eb:c1:a0:69:bc:42:76:ef:3c:be:8a:
bd:d9:01:b9:51:15:40:d0:44:a1:d2:12:03:e7:0d:
25:f8:04:27:0b:ff:e8:ed:d2:f5:4a:e0:4d:02:88:
04:2d:24:9c:e2:05:0a:fe:67:45:58:7e:3d:46:8a:
dc:4f:47:64:c6:ae:a7:92:7d:0a:a7:2d:95:5f:c4:
40:ce:b9:55:c7:06:61:ad:4b:6b:71:a9:22:e4:db:
98:27:e0:f4:b2:02:4d:c7:62:5e:97:30:c4:76:e2:
0d:bc:b9:11:d0:d3:66:5c:72:27:9e:d6:b9:9f:e9:
f2:28:a4:31:83:95:26:c1:99:9e:12:8b:1a:c3:9c:
a8:9f:38:2c:1f:c5:b0:2a:83:e0:eb:ca:ed:7e:db:
40:6c:14:60:d5:43:4a:2c:d5:3d:81:5a:87:77:cd:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:71:B3:5D:92:52:06:F4:DC:F3:09:39:EB:11:2A:F8:14:D4:B9
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:fb:74:05:76:6e:b2:44:5b:ff:9a:71:93:4f:37:11:45:a4:
6e:50:44:db:ad:77:82:4c:16:61:c5:1b:61:89:f4:96:53:20:
ab:e1:67:16:03:47:61:82:97:6e:6e:27:88:b2:4f:90:6b:68:
d2:f8:52:06:59:17:77:b9:8c:c6:ce:bb:3f:2b:de:44:97:15:
b2:20:13:0a:b1:cb:b7:8c:48:46:fc:38:89:b3:92:2e:75:05:
62:e2:1b:7b:11:76:d6:63:e1:79:93:8e:b7:65:0f:e8:0c:12:
46:d4:14:3b:83:db:20:26:04:00:18:a3:44:76:12:be:95:0f:
b6:5f:f1:cd:62:b8:89:ca:11:9d:7a:73:8d:0a:cf:63:e2:47:
a3:ee:93:84:f1:6b:9b:14:b0:8e:18:0c:e9:0e:0e:37:0e:3c:
08:d1:44:11:7d:cb:e5:2c:b8:aa:2e:ab:e8:8e:39:64:26:16:
35:21:91:86:a7:4c:fe:73:9a:19:01:7b:bc:3a:f9:2d:0f:c1:
e1:c8:9e:2d:0e:d5:85:ba:a9:22:0f:c9:b6:7a:57:10:64:94:
60:02:2b:9f:64:e0:24:7d:0c:df:1e:1b:d5:98:53:fe:90:7a:
60:49:9e:ba:f0:e2:d5:fa:5d:a9:15:52:98:44:d5:10:0b:98:
49:30:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:44 2026 by rpki-client