Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: XzKw7eSwc/m3o33OkkalF4Eu5h/lZNTK0vTu0mwpJL0=
Subject key identifier: 8D:FB:6D:BC:69:02:66:4B:D6:5D:A7:95:FF:F1:73:5F:10:55:2E:47
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 019D12A13A5D1C0CFF5252B66507CB7D5765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 02E0
Signing time: Sat 21 Mar 2026 23:00:49 +0000
Manifest this update: Sat 21 Mar 2026 23:00:49 +0000
Manifest next update: Sun 22 Mar 2026 23:00:49 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: Uv+l9ovrqocEWXzI9MCuLoDeORXOqamqIaZthwvdu9s=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:a1:3a:5d:1c:0c:ff:52:52:b6:65:07:cb:7d:57:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Mar 21 23:00:49 2026 GMT
Not After : Mar 22 23:00:49 2026 GMT
Subject: CN=8dfb6dbc6902664bd65da795fff1735f10552e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:71:6f:ec:ee:52:dc:a8:63:e0:85:7c:ab:
b6:80:21:82:ba:8b:56:d6:20:87:14:e1:e2:c1:a6:
fb:8d:c9:ec:94:fd:72:15:1e:04:d2:44:85:d2:64:
4c:c9:29:a8:6d:2e:e6:ef:6e:75:56:ad:52:3d:4f:
3b:1c:1e:ca:4c:40:25:6f:b6:28:88:89:25:ee:fd:
50:bf:08:5f:9a:7c:ec:5b:77:1b:c0:4c:34:5e:7e:
a3:56:51:fc:a0:d3:57:90:5d:25:21:7d:1d:41:c6:
1d:67:68:37:eb:a4:90:59:5f:a8:32:92:f2:36:44:
99:50:86:d3:f2:44:0c:46:ea:13:0a:12:2a:05:5b:
b2:55:26:01:ae:59:b8:1f:54:3b:3b:d2:f7:ae:05:
42:62:a2:fd:dc:64:0c:f4:e3:3b:e3:33:e0:fe:48:
b0:24:7b:30:5b:b5:a6:7b:c2:8f:a4:83:a8:05:3a:
61:39:e9:32:ed:30:9f:ad:0e:da:1d:10:c1:d7:74:
66:40:0b:b6:6e:5c:14:d0:80:a9:78:97:92:f6:f7:
63:d2:fe:f0:63:8a:8a:82:15:bc:66:3a:36:ca:36:
24:c6:f0:cb:03:39:21:2f:61:3a:36:52:27:b6:b1:
59:e4:db:10:7b:d6:48:9d:2d:df:2f:cb:bd:7b:1c:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:6D:BC:69:02:66:4B:D6:5D:A7:95:FF:F1:73:5F:10:55:2E:47
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c6:39:17:28:6a:1f:a7:e5:4a:38:94:28:1f:2c:04:1b:b4:
d6:48:ec:c2:90:fd:74:90:5f:27:36:98:1d:5f:9c:f1:c7:10:
01:c6:ad:b3:2e:31:48:81:9c:f1:55:1a:f9:6c:ea:18:db:85:
cd:ca:73:0e:e9:7e:70:a9:22:cd:c7:5f:49:f8:e8:09:6c:10:
ad:7b:89:73:a5:87:86:e1:61:f2:5a:ec:b0:0b:49:62:9b:9d:
42:98:e4:6b:bc:ae:17:4c:fd:57:2f:33:ac:88:fa:04:41:9a:
c3:cb:fb:f8:25:bc:15:5e:aa:39:8e:67:cf:d0:4c:02:7b:f7:
1c:06:92:94:96:c4:4e:cc:ea:8e:f3:bb:37:07:b7:95:50:11:
33:91:aa:19:46:f7:2a:40:e4:b2:31:57:4c:ac:56:31:15:cb:
ab:a0:db:75:69:5b:a7:c9:77:c5:1b:8c:64:bd:27:18:7d:08:
6c:60:2c:ce:16:06:91:4d:68:34:f7:8c:ab:0e:c2:be:b4:58:
5e:22:34:41:b0:85:97:45:33:08:53:08:88:5f:4d:85:1c:f4:
82:f1:c4:22:71:2e:c3:c4:58:54:95:8d:3d:85:da:4c:a5:2b:
3c:45:04:93:eb:07:2c:f6:a9:9b:63:4d:02:4b:48:4e:80:5f:
68:0a:26:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0SoTpdHAz/UlK2ZQfLfVdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2
NGFmYjYwHhcNMjYwMzIxMjMwMDQ5WhcNMjYwMzIyMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZGZiNmRiYzY5MDI2NjRiZDY1ZGE3OTVmZmYxNzM1ZjEwNTUyZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/1xb+zuUtyoY+CFfKu2gCGCuotW
1iCHFOHiwab7jcnslP1yFR4E0kSF0mRMySmobS7m7251Vq1SPU87HB7KTEAlb7Yo
iIkl7v1QvwhfmnzsW3cbwEw0Xn6jVlH8oNNXkF0lIX0dQcYdZ2g366SQWV+oMpLy
NkSZUIbT8kQMRuoTChIqBVuyVSYBrlm4H1Q7O9L3rgVCYqL93GQM9OM74zPg/kiw
JHswW7Wme8KPpIOoBTphOeky7TCfrQ7aHRDB13RmQAu2blwU0ICpeJeS9vdj0v7w
Y4qKghW8Zjo2yjYkxvDLAzkhL2E6NlIntrFZ5NsQe9ZInS3fL8u9exz9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI37bbxpAmZL1l2nlf/xc18QVS5HMB8GA1UdIwQY
MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct
OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx
LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMY5Fyhq
H6flSjiUKB8sBBu01kjswpD9dJBfJzaYHV+c8ccQAcatsy4xSIGc8VUa+WzqGNuF
zcpzDul+cKkizcdfSfjoCWwQrXuJc6WHhuFh8lrssAtJYpudQpjka7yuF0z9Vy8z
rIj6BEGaw8v7+CW8FV6qOY5nz9BMAnv3HAaSlJbETszqjvO7Nwe3lVARM5GqGUb3
KkDksjFXTKxWMRXLq6DbdWlbp8l3xRuMZL0nGH0IbGAszhYGkU1oNPeMqw7CvrRY
XiI0QbCFl0UzCFMIiF9NhRz0gvHEInEuw8RYVJWNPYXaTKUrPEUEk+sHLPapm2NN
AktIToBfaAomEA==
-----END CERTIFICATE-----
Generated at Sun Mar 22 01:28:46 2026 by rpki-client