Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File: nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier: HGNQnIOZxcZQnLfYvVC8cgI/AmS6yyYDKei76cjZsMY=
Subject key identifier: BE:45:4E:EE:5F:57:32:69:F8:5E:C5:5E:6E:2E:75:82:7E:4E:F7:CE
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 019CAC470692AA134FF6B330BA4838BED993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number: 116D
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: By9XwpaaIZ1vbKoC0EMkQI8xFME.roa (hash: rVTno30bTxW1UXGkTngYyYx+U1Aa9CBafc0WRSX3D0M=)
2: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: bk7mpT9Kz07Aco5PS4T67ZAcOOXZgWOGnKnQHJ685xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:06:92:aa:13:4f:f6:b3:30:ba:48:38:be:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=be454eee5f573269f85ec55e6e2e75827e4ef7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:4c:bc:4c:46:8f:ac:4c:2b:8a:01:dc:29:
ae:ae:5b:7b:e3:f1:7b:88:f9:ea:32:a8:1f:53:76:
65:c7:cf:1a:ba:98:a4:96:f3:fc:99:2a:fb:ae:9c:
14:72:45:a3:29:c5:9e:aa:22:c0:0a:be:7f:db:83:
6a:24:9f:01:f9:7e:a0:d1:33:79:3f:5a:88:c8:38:
7b:4c:2a:d5:f6:80:95:c0:c2:4e:58:36:b7:1b:ee:
ac:ab:5c:8c:17:2a:6c:5e:71:3e:e2:b7:59:56:90:
ae:3b:2e:8e:c9:3e:7c:66:32:b4:11:5b:c2:a2:de:
fa:47:75:b3:1b:a5:0d:a5:11:6a:0f:c1:2e:58:11:
96:ee:ad:d2:9b:36:5a:b2:a5:be:4b:8a:03:76:99:
60:77:97:f5:32:fd:e0:22:c8:f1:06:aa:b8:f0:e3:
f4:56:04:64:64:5e:14:89:27:4f:04:9d:19:e9:35:
5b:53:a2:91:82:be:a4:24:bd:bc:35:86:fe:1f:50:
1b:c2:32:e6:6f:30:bc:bc:d9:b0:dc:7e:5e:a8:e1:
f9:3f:5c:12:37:d2:ff:d5:83:df:78:bd:76:aa:0d:
e7:25:77:2f:33:00:a2:de:72:50:84:78:f3:7b:ef:
f8:c3:14:00:e8:df:9c:15:20:da:37:bf:6b:1d:3a:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:4E:EE:5F:57:32:69:F8:5E:C5:5E:6E:2E:75:82:7E:4E:F7:CE
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:95:72:39:f6:da:85:4d:c0:e7:5c:c2:df:f0:a2:30:a7:
1f:dc:37:8e:95:4a:07:2e:cb:45:a4:57:26:b2:3b:4e:0c:bb:
f7:de:b3:60:77:8b:3d:a7:a8:e5:e6:4c:53:0e:04:01:cb:4c:
06:e5:9c:10:59:bb:33:39:46:b7:0e:86:cb:45:99:9a:8c:5c:
bb:f1:14:ef:c3:b5:e5:c6:7f:db:fa:ea:10:40:e6:81:96:82:
fa:f5:a7:ad:fa:00:4f:82:0e:6d:d3:99:a6:20:e0:2c:c1:bc:
76:85:c4:d4:e4:d7:d9:00:3e:fd:7b:62:74:63:01:f2:8f:49:
a3:17:4c:55:a0:91:68:ca:62:fb:63:ea:1c:74:ec:45:fb:ce:
f2:70:14:45:43:4f:c8:8e:9e:8c:83:58:07:3b:e5:e0:61:7f:
37:14:39:36:19:8e:c6:db:d4:1a:b0:99:a5:10:bc:a7:f4:27:
40:b6:03:38:73:3c:87:4c:df:f0:07:35:06:ab:c2:ce:59:6d:
b7:30:77:99:f2:64:a3:9c:25:5f:e1:6d:72:f3:a1:13:f9:30:
5c:58:87:93:61:bd:0f:64:45:61:88:b8:83:18:84:36:53:fa:
7e:f2:aa:09:54:a8:37:3b:fe:e9:22:05:15:43:49:89:16:13:
33:88:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:48 2026 by rpki-client