Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: RbzlWm+7AhBns4TAqxLx25Gc0GNWBX7M8MCwVVJ1tPw=
Subject key identifier: B7:B1:0D:12:CB:1B:A5:E5:72:06:EE:1A:5B:06:62:AA:DD:01:70:B3
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 01A0CA7DA2606BC3CA3B7A93C932532D73C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 0508
Signing time: Tue 22 Sep 2026 19:00:26 +0000
Manifest this update: Tue 22 Sep 2026 19:00:26 +0000
Manifest next update: Wed 23 Sep 2026 19:00:26 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: lFfjNdDpBuaxMh94BSe3dfkeMSZvRx9HglPH2QQT978=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:a2:60:6b:c3:ca:3b:7a:93:c9:32:53:2d:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Sep 22 19:00:26 2026 GMT
Not After : Sep 23 19:00:26 2026 GMT
Subject: CN=b7b10d12cb1ba5e57206ee1a5b0662aadd0170b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:20:fc:cf:f1:00:57:cf:9a:9d:ab:e3:e5:
12:c2:c8:7f:ef:a8:c2:3b:2f:80:06:d0:96:96:00:
7a:1d:49:18:c0:89:96:72:51:bf:bf:ef:90:ca:c3:
8b:4d:4c:01:6e:50:b5:a5:38:9b:90:62:0c:6d:3a:
00:7e:c9:ee:15:a0:5b:ac:b3:6e:c3:87:9e:b6:26:
10:51:d5:a0:1e:bc:36:ba:9f:76:f3:51:5c:34:0b:
23:a7:2c:6a:5c:51:58:28:d9:22:fc:fa:54:e1:9e:
d3:55:d7:b8:f0:d9:3e:10:5d:91:e2:c3:45:f9:61:
30:d5:e3:26:16:cc:7a:0e:fe:34:fd:34:f4:18:67:
00:55:d1:6f:51:9e:95:88:11:55:63:8d:5a:90:14:
2a:71:ab:f3:2a:79:55:67:6f:d5:86:f0:17:2c:c6:
70:2a:de:b8:1c:7f:a4:e5:d9:ed:98:11:d9:2a:ea:
07:2b:1d:b5:c3:cd:37:69:32:42:3c:79:66:d7:b5:
f7:4d:2e:15:b7:2d:31:17:92:35:ff:ca:6c:08:3e:
64:9c:5b:86:cf:88:48:b8:e4:7a:32:b2:9c:c2:bf:
0d:d6:f9:4d:aa:10:e3:d9:2d:b3:f5:05:11:59:1e:
95:7c:dc:82:8b:8e:d1:d8:34:aa:2f:93:22:53:79:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B1:0D:12:CB:1B:A5:E5:72:06:EE:1A:5B:06:62:AA:DD:01:70:B3
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f6:69:ae:e0:cc:54:41:be:b5:06:fb:ad:f7:db:d7:d0:d1:
86:d3:d7:d5:80:c1:f1:6a:18:90:54:c8:a3:d4:34:09:84:64:
bb:7b:47:c7:00:3f:7c:f9:38:83:8b:2b:63:55:9d:4d:d5:d9:
cd:b4:31:3c:bc:a4:b9:91:15:bf:33:70:d3:80:df:88:c5:07:
95:7a:6f:6c:e7:33:64:87:06:74:4c:29:b4:f1:47:38:83:f4:
22:b5:85:e7:d0:77:73:00:59:22:6b:4a:8b:2d:cd:2b:28:87:
a9:4d:42:c3:e5:ff:cb:13:65:0a:e3:b5:89:74:98:3a:65:af:
5b:61:4f:4b:21:c4:22:e6:41:a9:7f:3d:52:92:16:da:d0:67:
eb:88:d5:89:c5:6c:a2:5f:30:66:be:13:35:35:5f:40:71:df:
56:8f:be:86:08:bc:d1:b9:2e:da:09:63:3c:60:a6:43:12:8b:
7e:3a:df:f7:1e:ee:71:46:1a:ff:81:8e:d3:7f:3d:b0:45:ee:
54:30:bd:88:db:3d:04:f3:02:fc:6e:eb:25:a5:4a:66:b3:42:
fa:0a:8f:6c:04:bf:10:0d:cb:50:35:c7:0b:57:da:db:af:82:
cb:6d:9b:e6:1b:43:bb:a1:12:06:37:89:f3:d4:44:5b:0c:3a:
fc:65:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:38:10 2026 by rpki-client