Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: IyGGkPmCD+0hHXjsGlxrYxp4yvDKXJgtrU//fIN0pfo=
Subject key identifier: 06:DF:5A:6A:40:F1:CA:3C:32:A7:80:8A:16:50:68:86:4C:B7:B3:83
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 01A01909EAA0823EC15D3698C37365721B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 0471
Signing time: Wed 19 Aug 2026 08:01:15 +0000
Manifest this update: Wed 19 Aug 2026 08:01:15 +0000
Manifest next update: Thu 20 Aug 2026 08:01:15 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: HbFIQ/9rnjfFOA0ISe/radpT/FMKI5u5Jvx6CI9nq7Q=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:09:ea:a0:82:3e:c1:5d:36:98:c3:73:65:72:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Aug 19 08:01:15 2026 GMT
Not After : Aug 20 08:01:15 2026 GMT
Subject: CN=06df5a6a40f1ca3c32a7808a165068864cb7b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:c0:7d:c7:9a:17:9f:a3:48:d3:07:ab:09:
dc:58:d5:1b:51:d9:0c:3b:a4:a9:07:3e:ff:e9:8b:
4b:1c:7b:c0:ff:4c:90:cd:71:e9:41:7e:7e:6f:7d:
ca:85:3c:6a:dd:04:78:a4:04:79:8f:5a:d4:31:20:
b6:29:20:d4:41:f1:d9:4c:19:ce:5d:17:76:5e:c7:
45:7d:0b:34:3e:53:34:ab:d5:33:8a:21:92:66:ed:
03:ba:70:67:68:6a:75:03:48:2e:a0:cb:eb:9c:88:
6f:cc:61:9c:0f:c2:fb:cd:9f:34:89:eb:75:a8:3f:
8a:be:6a:af:94:d3:77:ea:f1:35:50:1e:e6:9a:96:
39:c4:36:3c:9d:35:4e:35:c6:e8:1a:d8:68:94:61:
36:eb:03:06:a1:51:d3:5c:8b:29:8e:9d:e7:7c:c4:
10:bb:d5:5c:cf:d0:c7:be:02:4f:d8:16:64:9e:9b:
7e:6d:f4:7b:64:34:2c:b4:10:77:8a:04:2e:92:07:
23:d8:f6:2a:b9:9f:84:88:a8:f0:8d:f5:1b:86:b2:
27:7c:25:98:7a:fe:5f:f2:a5:f1:ca:9c:75:fc:91:
be:b5:95:25:8c:13:d4:07:d4:c1:4a:02:0d:48:19:
73:84:9a:99:c6:57:ef:fd:32:dd:49:8a:9a:e8:1e:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:5A:6A:40:F1:CA:3C:32:A7:80:8A:16:50:68:86:4C:B7:B3:83
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:48:85:1c:da:b5:3d:ab:9c:30:f8:94:87:ac:aa:3e:77:34:
13:37:72:47:ae:46:29:18:f6:67:44:cc:df:da:68:c7:8b:35:
48:bf:52:36:1e:e3:90:fd:08:63:0f:16:28:f0:3d:81:4a:85:
f6:a1:7f:62:ef:1f:8a:e5:ee:2f:3b:eb:93:8b:fc:8a:e2:11:
80:45:7c:60:f8:68:e5:bb:4c:58:da:65:b0:39:a5:ef:85:26:
8f:60:d4:cb:d6:81:18:1c:c6:b9:f0:28:9a:88:31:80:cc:82:
f3:ac:5b:c3:de:3d:39:6f:d7:d6:08:23:c0:0a:a7:a5:98:31:
c8:9b:f7:6a:c5:ae:48:00:36:c4:10:b6:df:fc:2d:02:c3:0c:
0b:d2:9a:e4:5e:ef:2a:94:7e:9e:cd:0f:d1:13:15:a8:de:0b:
a4:45:8a:1e:94:08:48:0d:e5:ce:8b:2e:cf:13:18:0f:f0:a7:
be:65:d6:cd:de:97:23:67:40:87:f2:e8:15:66:6a:b1:64:77:
3f:ab:97:f7:f0:8f:85:92:bb:e0:8f:8f:2c:c6:4d:51:62:e9:
de:1f:04:8f:d5:7c:35:cc:53:e1:2e:0f:6a:04:dd:f8:ac:e1:
fd:b9:1f:8a:63:a5:73:fa:9c:ff:33:6f:60:da:11:ff:63:a9:
bc:49:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:50 2026 by rpki-client