Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: KwtYpXZeuZ8Im0wozzQjlZlhdmegegd4AJkquR+g+IA=
Subject key identifier: B3:80:89:31:94:24:F6:7E:DE:14:C6:74:32:BD:A8:B7:88:FA:D6:4C
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019DFA600DE2587669F67012448C5748D761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0358
Signing time: Tue 05 May 2026 23:01:32 +0000
Manifest this update: Tue 05 May 2026 23:01:32 +0000
Manifest next update: Wed 06 May 2026 23:01:32 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: Wlmeg3SjYQkXVcn+5NlYJ+xa1AuzYgffn67Dq1u5Opw=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:60:0d:e2:58:76:69:f6:70:12:44:8c:57:48:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: May 5 23:01:32 2026 GMT
Not After : May 6 23:01:32 2026 GMT
Subject: CN=b38089319424f67ede14c67432bda8b788fad64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:a4:b1:c3:7d:42:00:06:37:fe:92:21:a4:
4b:33:25:21:f7:b1:29:34:3e:a6:d0:85:1c:f3:06:
3a:c4:dd:80:b4:e6:b6:ce:65:ad:e6:fb:15:e8:af:
12:1c:4b:37:1d:e3:25:59:3f:50:a5:d4:3b:80:35:
38:db:33:e4:57:16:25:2c:e7:7f:d3:78:01:2d:3e:
c8:d9:31:07:56:ba:e7:00:85:06:ab:36:1e:d8:46:
0a:3a:10:f7:9c:4e:b5:8e:29:d6:f3:62:90:23:6a:
88:dd:3f:35:44:14:5c:13:69:74:21:2c:20:eb:32:
93:77:28:a2:97:12:b8:68:16:a4:eb:87:ef:41:e9:
8c:3b:9f:9f:3e:a9:ac:af:e8:25:8d:58:67:a3:d1:
77:3f:48:df:93:b0:3d:c5:33:94:32:00:97:67:eb:
9c:34:c0:03:74:05:ce:21:d0:0f:5d:f3:69:30:b2:
27:04:d5:30:f0:e3:cb:0d:61:3b:81:ca:c6:99:c2:
c9:36:6f:cd:9f:c8:00:42:db:5b:b3:35:f6:6d:3b:
22:fc:45:93:3c:4e:3a:7a:77:33:57:95:76:3e:06:
43:37:89:50:9a:f9:86:11:ff:4b:e1:c4:12:f7:21:
5a:ef:df:dd:f4:0f:e5:9f:16:2b:7e:2d:25:35:7c:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:89:31:94:24:F6:7E:DE:14:C6:74:32:BD:A8:B7:88:FA:D6:4C
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:59:c0:14:6c:28:c4:93:23:2f:0e:a0:b9:cd:38:96:a2:4e:
04:fa:b7:0b:f8:ff:9b:4d:24:69:3c:39:70:11:03:43:45:02:
9a:3a:15:c4:1a:57:cb:ec:c9:e9:7c:56:f9:1c:07:5c:3a:54:
ff:c2:70:47:a6:3e:e3:94:69:85:95:ad:72:ba:e9:6c:02:05:
3a:c7:6d:85:c2:82:be:76:10:24:3b:5f:65:04:68:00:6c:6b:
15:30:db:56:b9:ed:fa:eb:dd:dd:a8:94:94:ad:02:7a:8c:3d:
b6:24:10:a5:61:69:2e:53:0f:f7:03:f4:84:e3:c1:79:e6:66:
c1:d8:13:72:a9:48:ce:94:c4:b0:25:fc:83:f7:41:e4:a2:5e:
92:da:7c:e4:23:3e:48:c9:92:3f:ec:42:ca:de:39:be:41:27:
82:ea:a6:7b:33:92:41:8a:d7:3e:f1:08:4f:de:5c:b9:8f:f9:
f8:26:e2:a0:81:23:39:a2:cc:7a:02:db:0a:2a:30:7d:24:0e:
63:a0:f4:e9:ed:d6:5c:c8:28:17:d2:1f:07:e2:27:52:f5:fe:
45:9f:66:54:fd:84:af:14:51:6c:43:a1:ea:c2:9f:3e:2a:bc:
ae:1c:0e:4f:b1:1e:13:dc:70:92:82:24:d6:d4:b8:85:c8:2b:
f0:6e:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:26:57 2026 by rpki-client