Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: d00SpkYSnGykXrkEvRrowIA4CgrFHldU+Ho4JRWcpOU=
Subject key identifier: 90:A1:2E:09:53:40:C0:C4:19:1E:53:C0:87:C7:BF:69:59:54:B6:DA
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 019D99D0DDA3F086CBC2B53B3A55692DFD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 11E8
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: By9XwpaaIZ1vbKoC0EMkQI8xFME.roa (hash: rVTno30bTxW1UXGkTngYyYx+U1Aa9CBafc0WRSX3D0M=)
2: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: uV9QY5hop7pqqCar252QSll0t787aWCug0lzOn9fhR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:dd:a3:f0:86:cb:c2:b5:3b:3a:55:69:2d:fd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=90a12e095340c0c4191e53c087c7bf695954b6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:f1:bf:af:e9:c2:c4:6d:6a:90:95:4e:98:
19:2e:f1:85:64:28:94:21:64:51:68:5a:a4:01:3c:
13:b8:c6:00:8d:1e:7f:60:3e:6b:84:5e:a7:01:39:
7a:c6:de:29:c5:83:f6:8b:26:92:9d:98:e2:50:21:
e4:ca:87:02:b8:30:e2:0e:b9:fc:95:17:41:cc:cb:
c5:02:f8:31:ef:ba:a2:70:5b:ad:d4:98:95:e5:e1:
8b:0c:93:28:da:de:4e:06:e2:c5:bf:e1:b2:d1:26:
a2:86:a8:16:6b:a1:8a:55:b9:0d:29:89:b8:86:70:
16:3e:6c:4b:e3:3b:41:db:20:ca:ba:48:82:c5:20:
1a:0d:4c:2b:ca:02:19:d5:82:9f:17:65:d1:18:cf:
ce:30:cc:72:f2:f6:ca:d1:84:17:4c:45:45:a6:8b:
43:14:05:25:2d:c3:36:b2:ca:16:fa:fd:13:c0:2d:
bd:a2:b1:53:eb:33:be:16:69:00:d2:40:4e:9b:29:
c1:f7:28:f9:5e:6c:f1:62:0d:1c:f0:9f:af:1c:6c:
10:5c:2a:b0:dd:fc:54:f8:3a:8c:4c:a3:c0:0a:12:
34:d0:d5:73:0a:7b:f2:7d:09:db:28:57:f7:f8:17:
5f:f6:a5:76:7e:5d:a2:7c:ca:93:16:ea:74:97:ef:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:2E:09:53:40:C0:C4:19:1E:53:C0:87:C7:BF:69:59:54:B6:DA
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:4b:7c:08:5b:12:ad:15:a7:2b:35:a6:58:b9:3b:74:a0:
ae:a6:5f:64:ce:38:17:d5:82:5c:16:1a:16:80:50:ed:d2:32:
48:bc:bb:b6:f4:a7:3d:77:86:e4:38:b5:80:90:b5:bf:28:4e:
52:3e:ce:7e:57:84:61:ab:d3:38:be:0a:d2:d1:b8:0f:ff:f3:
d7:4e:76:2c:30:11:31:b1:1a:fb:33:e8:0d:27:81:70:5a:80:
0e:a3:0b:56:77:d9:b7:14:a4:1d:47:18:f5:a2:ed:78:da:17:
67:82:92:b9:78:e7:80:88:a3:68:ef:2c:26:0a:0f:1c:b6:0a:
63:3f:b1:8b:00:cb:ad:b7:80:33:68:9f:c0:59:ae:23:b2:8f:
08:bc:d1:ac:e9:b4:19:cf:ab:8b:b7:6b:b8:94:b8:91:60:91:
c0:ed:1d:de:f5:71:13:20:bf:e5:bb:88:36:91:4d:cd:0c:88:
2c:46:bf:2b:7e:b1:dd:fe:a0:00:60:73:0f:51:f1:fc:23:04:
f0:cd:73:f9:72:82:4f:24:6e:bf:24:10:7e:f7:2f:a1:62:b3:
93:49:2d:a0:ac:b6:06:c7:27:f9:2c:54:88:e3:ca:13:61:65:
4d:18:0b:2d:0d:7f:26:e5:9b:36:56:62:f8:13:58:45:56:d7:
31:e7:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:34 2026 by rpki-client