Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: k4XmccABJkYIDC+npDCOueGzAFZMGGu4KuWiuEtipTo=
Subject key identifier: 0E:0D:77:0A:6C:87:FC:79:3A:22:37:67:81:5F:A0:C2:58:70:E4:EB
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019CADFE64B206DC620D13229A17F27FE84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 02E7
Signing time: Mon 02 Mar 2026 10:00:55 +0000
Manifest this update: Mon 02 Mar 2026 10:00:55 +0000
Manifest next update: Tue 03 Mar 2026 10:00:55 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: fUbds5+UnyNSaV2nMy6s+YhBIaMFVdtKA8rXXyvKVHA=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:64:b2:06:dc:62:0d:13:22:9a:17:f2:7f:e8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Mar 2 10:00:55 2026 GMT
Not After : Mar 3 10:00:55 2026 GMT
Subject: CN=0e0d770a6c87fc793a223767815fa0c25870e4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:1b:ab:11:86:98:d6:c2:fc:d5:7f:9f:95:
bd:70:17:58:5a:71:6d:cd:04:fb:07:fb:62:d0:fd:
df:8b:39:76:87:da:88:a6:b6:71:bb:df:48:de:61:
7f:8d:c9:05:9c:ee:f4:1d:5d:55:70:da:c8:66:8c:
9d:98:f2:a0:8a:66:c3:3c:9e:57:e4:d0:b6:31:23:
cb:13:3f:a2:d1:13:e8:51:92:4a:ed:26:92:1f:29:
ed:7e:93:08:70:a4:fc:b4:49:51:22:33:7c:06:9e:
73:b9:35:83:ac:ba:c2:4b:b0:c5:c1:65:72:9a:d3:
5c:69:ba:f5:f9:2f:be:62:89:d0:5d:6e:82:45:3e:
f0:4c:9e:dc:a3:52:3c:22:67:40:17:7b:f6:4e:41:
b1:7c:36:1c:08:36:66:ca:80:54:9f:06:7d:53:45:
a4:fe:1d:1b:b9:7c:df:c5:0f:b8:e2:b7:e3:94:95:
73:5e:6e:b3:4d:68:70:6e:db:64:17:b0:c7:7a:8c:
26:d5:77:a6:08:4c:6f:94:2c:13:f7:30:72:14:b8:
05:d9:07:d5:ef:28:40:22:ed:d1:e8:6e:8a:82:ce:
9b:d1:84:ed:04:0a:55:eb:c6:a1:8d:f4:f8:d9:a3:
92:3f:71:3e:a8:b0:d8:5c:18:1a:eb:b6:6e:42:e1:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:77:0A:6C:87:FC:79:3A:22:37:67:81:5F:A0:C2:58:70:E4:EB
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:00:0a:55:eb:73:36:e5:90:70:ce:6e:61:9a:2c:87:0b:74:
f0:d9:df:55:f4:7e:77:b0:52:9f:b2:9f:91:11:1c:2e:c0:50:
3e:cb:5b:77:b2:f2:48:5f:5b:bc:e2:10:3b:03:0d:9c:b6:21:
dc:f8:e2:80:34:07:ee:90:12:43:60:f0:57:82:3f:58:27:b6:
ec:50:34:f1:fb:da:5e:2b:d0:0a:9c:19:93:e2:92:90:d8:e3:
c4:a1:f5:d9:ab:99:fc:de:76:d0:d0:7a:69:59:69:6c:c2:4c:
8c:f1:31:67:bc:18:b4:0d:52:86:60:d4:dd:db:9c:5f:d5:bb:
e7:a8:91:d4:4a:c0:14:38:21:38:8b:80:23:22:34:5a:ea:e7:
a4:de:cb:33:f8:88:ad:07:8e:eb:75:54:d2:39:c4:a5:75:9a:
cc:95:6b:ac:95:cb:b7:b0:89:bd:e9:52:49:e5:94:85:63:6d:
b0:09:c7:c0:89:45:31:7b:4c:dd:6d:4c:ff:39:52:16:d6:1d:
5f:26:a4:5b:f0:8e:6a:e6:d6:ab:41:0f:a8:1a:08:c3:52:c8:
b8:54:94:46:44:d0:5c:31:63:00:e5:21:87:92:29:bc:9d:34:
c0:42:23:6a:19:ef:42:f2:6c:a9:6d:d8:18:24:44:f0:8d:f9:
6e:12:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:33 2026 by rpki-client