Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: udQ8F8rI1EtFcMWjSCNB6/rFnSAZBha6y6LUCwkYbiM=
Subject key identifier: 32:D4:E2:55:12:9F:52:0F:DF:25:06:C6:C5:FB:55:3B:4A:4B:EC:82
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019EC300556E24A2833F6A7EFC24CD6F803B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 03FB
Signing time: Sat 13 Jun 2026 22:00:39 +0000
Manifest this update: Sat 13 Jun 2026 22:00:39 +0000
Manifest next update: Sun 14 Jun 2026 22:00:39 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: +lwnAT6jnzGaSViPQqzgv9R3V2sSlSBAh4KNC+MuMoo=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:55:6e:24:a2:83:3f:6a:7e:fc:24:cd:6f:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Jun 13 22:00:39 2026 GMT
Not After : Jun 14 22:00:39 2026 GMT
Subject: CN=32d4e255129f520fdf2506c6c5fb553b4a4bec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:c2:4a:bd:e1:3e:e6:48:fd:71:6f:c6:9e:
de:b1:7f:06:50:90:6f:3d:1d:37:6c:ff:b2:20:4e:
3a:ab:71:c6:e1:e0:6d:97:3c:ca:2c:8f:77:24:6c:
70:68:70:0a:c4:66:45:bd:40:06:d6:18:a4:f8:82:
96:bb:3e:0e:82:ed:44:70:a5:42:5f:5e:4f:64:1c:
5d:7f:de:60:c0:9b:c0:a7:85:6d:2c:50:9a:e0:86:
40:0e:c4:ea:0b:7d:cd:13:37:6d:92:13:d9:3f:b9:
49:e8:89:80:21:3b:c3:60:fc:b7:c1:27:a4:86:c2:
a3:83:85:4d:ce:f9:ce:74:86:44:70:e4:67:1c:4a:
ac:33:1d:45:65:b8:76:f4:b0:fc:bb:50:f3:ab:f4:
4c:4e:cc:61:60:d6:fd:4d:47:c5:93:b9:00:48:ed:
1f:bc:c2:c7:49:fc:bc:6d:c6:4f:84:f7:ff:4f:6a:
a0:1c:ae:ac:d9:28:49:2f:e2:65:51:5e:55:6d:9b:
03:ae:b4:59:6f:ec:6b:da:51:4d:3a:bf:b3:d1:77:
ef:7b:06:57:d7:82:ca:98:16:99:17:67:1a:32:78:
61:fa:8d:f7:f2:c8:e1:fd:1f:9d:0b:ca:3f:b8:6d:
d4:10:c4:e9:c1:02:93:08:a5:2a:2f:f2:7b:f0:66:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:E2:55:12:9F:52:0F:DF:25:06:C6:C5:FB:55:3B:4A:4B:EC:82
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:47:e1:72:e9:91:5b:22:ea:b1:3d:55:be:f8:f5:6e:a5:
6a:79:03:8a:da:99:71:00:26:b8:65:bc:c0:ef:44:58:61:33:
a3:b7:87:24:26:7a:85:71:12:ce:01:e4:9f:3a:1a:29:5c:3b:
6b:3a:1e:1e:03:0a:ba:98:88:4d:ce:80:3f:e1:fb:88:db:82:
70:a0:0d:26:05:94:58:3d:0e:42:50:83:30:6e:d8:02:58:f0:
45:df:02:d1:b3:fd:6e:eb:5b:47:1a:1e:7a:f1:b7:26:dc:e5:
c8:5d:af:2e:82:8f:ff:1f:be:67:c7:e6:ee:91:db:cc:8f:0b:
e9:f8:76:ba:f0:51:dc:2e:28:45:4c:e3:e8:41:81:f7:fb:18:
1c:33:45:69:95:0d:c1:0b:ad:4c:4f:d1:9a:62:d4:3b:22:4b:
be:33:56:17:44:af:2e:ea:eb:54:66:f5:1b:9b:8d:59:d6:14:
23:53:75:9e:d9:4e:d8:ea:a5:db:2b:d3:bc:17:7a:2c:b8:0d:
68:ca:64:f3:2b:98:15:81:fb:7d:e1:01:0a:3a:96:db:f5:c1:
ca:a0:7a:4b:0a:49:a1:17:e9:08:dd:43:0e:56:82:2f:2d:59:
9b:69:7c:a3:41:6d:f4:eb:dd:87:e4:e5:44:72:7f:67:b5:22:
f6:03:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:10 2026 by rpki-client