Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
File: Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft (raw, json)
Hash identifier: GVCiNntTQR4YclSBkGnkSRTusgFj6ZpscKWulVGhg9w=
Subject key identifier: 79:00:AD:10:2E:21:29:F2:46:31:11:8D:9E:59:5B:D0:25:E7:0C:67
Authority key identifier: 37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
Certificate issuer: /CN=372f5669f98cfd504e4a9d0e927427c503e33796
Certificate serial: 01A0E73F9152956ACD5202E74055DEB57307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:37 +0000
Manifest this update: Mon 28 Sep 2026 09:01:37 +0000
Manifest next update: Tue 29 Sep 2026 09:01:37 +0000
Files and hashes: 1: Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl (hash: oTTsgeGGzNU8nihk9m3uIhaX94LdcaNzQMQxVgF5x14=)
2: b0w2NwRKZd0v1YirWaHR-yonRpM.asa (hash: Ca6ig3yL/cc9C02+a+qUVEZYxxXimWIDoXfV2NrJQGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:91:52:95:6a:cd:52:02:e7:40:55:de:b5:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372f5669f98cfd504e4a9d0e927427c503e33796
Validity
Not Before: Sep 28 09:01:37 2026 GMT
Not After : Sep 29 09:01:37 2026 GMT
Subject: CN=7900ad102e2129f24631118d9e595bd025e70c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:f1:d6:57:f9:45:41:85:5a:65:80:72:39:
01:a0:c5:88:3b:b1:79:3d:99:29:cc:9f:58:f8:a7:
c1:ef:2e:e6:a0:b2:0b:5e:f7:81:64:45:95:cd:ae:
91:b3:4f:e1:58:dd:37:df:a0:6b:92:88:a7:4d:4e:
20:b5:cc:2a:b1:09:4c:a4:df:ba:97:28:ce:e1:f8:
02:82:e6:d2:a8:bd:82:9c:7c:ba:bc:75:3c:6a:d7:
e7:ba:8c:a4:08:37:e0:b3:2d:1c:65:af:d8:14:e2:
9d:0b:95:fe:c7:fa:37:c3:ca:eb:1f:9d:c8:d0:f5:
88:31:b0:55:25:2e:6e:9d:e1:57:bf:91:cf:d3:b2:
24:b2:9b:8b:48:9f:2c:56:10:a7:e1:33:26:b4:80:
cf:6a:ea:8a:30:18:0a:b8:67:a1:a6:65:c5:7f:66:
76:3f:2f:aa:b8:4f:02:f3:0e:9e:dc:0b:66:a0:d4:
4d:2a:56:e5:fc:d1:d9:9f:67:26:a7:9b:27:21:62:
4a:ef:59:e6:a3:45:f0:f8:e3:21:4e:a3:df:9e:7e:
7f:6d:56:a1:d7:09:71:3f:56:c6:07:71:f4:b9:c2:
a0:27:dd:8d:69:0f:1e:b1:54:51:8c:d8:47:fe:88:
c6:ae:e4:fd:06:2a:b2:d5:95:97:fe:2f:f9:9c:81:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:AD:10:2E:21:29:F2:46:31:11:8D:9E:59:5B:D0:25:E7:0C:67
X509v3 Authority Key Identifier:
keyid:37:2F:56:69:F9:8C:FD:50:4E:4A:9D:0E:92:74:27:C5:03:E3:37:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ny9WafmM_VBOSp0OknQnxQPjN5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/932ca6-13a8-4d06-adad-8d06d8c0e3c1/1/Ny9WafmM_VBOSp0OknQnxQPjN5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:2a:0e:cd:27:42:66:ac:12:ce:7c:b4:b8:ef:17:7b:30:
cf:ea:fa:e0:4e:8c:00:cd:d5:93:c5:92:e5:78:5e:8c:21:50:
8c:f5:5c:52:99:27:b0:3e:d5:9f:0b:87:0f:c8:a2:d7:d5:7b:
6d:8b:c2:e4:93:44:70:4c:f4:3f:0c:d0:ea:68:39:aa:6a:53:
7d:8c:7d:78:eb:ca:36:b9:06:f4:4a:4a:5c:6e:4c:8f:7a:09:
75:7d:52:8b:9d:14:e5:85:c9:92:2f:42:f9:7b:75:7a:13:80:
2a:5a:68:3c:9b:38:99:05:85:32:f7:3b:69:04:be:71:e1:50:
96:4f:53:81:e4:9f:d0:ed:a6:38:d0:39:3d:73:7f:08:39:0f:
f4:b7:72:c2:8e:10:4d:51:30:64:3f:26:74:23:b2:16:8b:61:
8d:26:56:8f:b8:68:d5:4a:17:5d:33:57:ac:df:88:26:84:ae:
39:a5:9d:bc:90:f0:c5:f4:58:be:95:be:62:8e:3c:07:77:ac:
c8:cb:da:c5:72:40:90:7b:d0:71:94:9b:d3:6c:c9:59:ce:df:
1b:3f:ef:7c:f5:66:f8:25:0e:59:77:2f:e9:59:11:60:f2:77:
b3:ad:74:f1:68:bd:11:c0:8b:10:26:46:c8:56:52:2d:04:25:
d8:27:b1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP5FSlWrNUgLnQFXetXMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MmY1NjY5Zjk4Y2ZkNTA0ZTRhOWQwZTkyNzQyN2M1MDNl
MzM3OTYwHhcNMjYwOTI4MDkwMTM3WhcNMjYwOTI5MDkwMTM3WjAzMTEwLwYDVQQD
Eyg3OTAwYWQxMDJlMjEyOWYyNDYzMTExOGQ5ZTU5NWJkMDI1ZTcwYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF/x1lf5RUGFWmWAcjkBoMWIO7F5
PZkpzJ9Y+KfB7y7moLILXveBZEWVza6Rs0/hWN0336BrkoinTU4gtcwqsQlMpN+6
lyjO4fgCgubSqL2CnHy6vHU8atfnuoykCDfgsy0cZa/YFOKdC5X+x/o3w8rrH53I
0PWIMbBVJS5uneFXv5HP07IkspuLSJ8sVhCn4TMmtIDPauqKMBgKuGehpmXFf2Z2
Py+quE8C8w6e3AtmoNRNKlbl/NHZn2cmp5snIWJK71nmo0Xw+OMhTqPfnn5/bVah
1wlxP1bGB3H0ucKgJ92NaQ8esVRRjNhH/ojGruT9Biqy1ZWX/i/5nIE94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkArRAuISnyRjERjZ5ZW9Al5wxnMB8GA1UdIwQY
MBaAFDcvVmn5jP1QTkqdDpJ0J8UD4zeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQt
OGQwNmQ4YzBlM2MxLzEvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MzJjYTYtMTNhOC00ZDA2LWFkYWQtOGQwNmQ4YzBlM2Mx
LzEvTnk5V2FmbU1fVkJPU3AwT2tuUW54UVBqTjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP64qDs0n
QmasEs58tLjvF3swz+r64E6MAM3Vk8WS5XhejCFQjPVcUpknsD7VnwuHD8ii19V7
bYvC5JNEcEz0PwzQ6mg5qmpTfYx9eOvKNrkG9EpKXG5Mj3oJdX1Si50U5YXJki9C
+Xt1ehOAKlpoPJs4mQWFMvc7aQS+ceFQlk9TgeSf0O2mONA5PXN/CDkP9Ldywo4Q
TVEwZD8mdCOyFothjSZWj7ho1UoXXTNXrN+IJoSuOaWdvJDwxfRYvpW+Yo48B3es
yMvaxXJAkHvQcZSb02zJWc7fGz/vfPVm+CUOWXcv6VkRYPJ3s6108Wi9EcCLECZG
yFZSLQQl2CexyA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:13 2026 by rpki-client