Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json)
Hash identifier: d9S7zSI83XUCWN/8hyHMyHYyUJzQb35RPPcY3WtTqn8=
Subject key identifier: 88:0E:2E:EF:2F:B5:6C:88:13:9F:6D:0B:02:AE:CA:62:01:64:EF:E5
Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Certificate serial: 01A117F43B1F6558820DB41708D797C4F4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
Manifest number: 04F5
Signing time: Wed 07 Oct 2026 20:00:44 +0000
Manifest this update: Wed 07 Oct 2026 20:00:44 +0000
Manifest next update: Thu 08 Oct 2026 20:00:44 +0000
Files and hashes: 1: PaBVWTqfTN6gd6Z8D19CR2fYk7c.roa (hash: m2T9S9EKZbJSGv+M7mLflkfyJDI4Kx/hV8vptZ6M+ps=)
2: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: DidIR/bw2eoEQQ2QZ5dLn0BCucZEzu2omvnamYAbiOk=)
3: qCf2kL5HR_0TFcYIAu90nJaNoM8.roa (hash: t35XD35S8HKBRQvAYSF43vFRrgaSHFB5oatLbXcAg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:3b:1f:65:58:82:0d:b4:17:08:d7:97:c4:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6
Validity
Not Before: Oct 7 20:00:44 2026 GMT
Not After : Oct 8 20:00:44 2026 GMT
Subject: CN=880e2eef2fb56c88139f6d0b02aeca620164efe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:ac:a6:c1:ec:84:d5:02:09:af:df:ef:dd:
32:b9:47:de:31:48:9a:b2:2e:4d:d8:a6:84:76:59:
d3:f6:72:e1:52:7c:15:07:f2:64:86:5e:69:41:91:
c6:81:1d:01:3b:d1:7f:25:31:40:c1:7b:be:bf:ae:
f5:93:7a:84:1b:0b:b4:88:3e:50:d6:c8:7b:d9:2a:
47:61:d4:8b:ea:fa:0d:77:04:0b:ca:98:bc:e2:17:
45:55:fe:70:2c:d4:65:5a:49:e2:df:0a:d9:a4:b9:
9d:45:a3:a4:9d:eb:65:59:64:ca:20:85:39:85:83:
0d:c7:11:e4:7f:ad:3a:9b:d1:9b:dd:0f:d0:bb:0b:
99:41:f4:62:ad:16:7c:1a:3c:bd:48:2b:a0:66:24:
60:5a:e4:6b:2b:f9:57:db:10:3d:8b:ce:0a:49:7f:
b8:cc:b6:2d:27:d8:ba:d0:3a:6a:3a:2f:ea:9a:e4:
7a:06:19:76:9c:b8:d9:2c:3b:7b:e1:b5:38:a4:b2:
57:2b:f4:b6:58:37:66:6f:fa:da:1f:d7:3e:ee:c1:
e5:a7:e4:62:e5:57:16:ba:c2:0e:a6:0c:02:44:b1:
df:e1:90:67:99:77:6c:a0:ce:7b:62:de:9a:b5:f0:
4e:fb:07:18:38:bd:99:87:50:ba:a4:a0:23:a2:44:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:2E:EF:2F:B5:6C:88:13:9F:6D:0B:02:AE:CA:62:01:64:EF:E5
X509v3 Authority Key Identifier:
keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:e8:2f:f0:91:4e:e2:22:31:d3:f4:a5:9b:3e:3e:a0:6f:
ef:ad:81:81:94:84:07:18:54:85:9e:61:7c:8c:bc:25:d5:0c:
e4:e3:ca:1a:1d:2a:e8:06:43:1b:aa:91:06:14:cf:ee:2a:d0:
8d:b9:70:b5:57:34:ea:3f:46:79:1b:80:42:28:0e:aa:eb:67:
d4:92:f4:d3:f5:3a:3c:4a:84:e7:35:f5:d5:f2:ba:96:c0:95:
c4:bc:93:4d:e7:1a:b0:53:5c:d4:8e:d4:3b:84:b1:9c:c1:eb:
9d:09:f0:ba:12:de:75:1f:13:1e:dc:cb:ec:4e:50:92:3e:fd:
a1:6b:f5:e0:ca:44:2a:c6:5a:f9:56:9f:fb:92:1a:68:a2:06:
b2:d4:63:85:dc:79:58:1e:04:85:c6:85:96:e6:45:08:10:e2:
0d:11:86:78:3e:5c:f0:74:c0:c7:cb:41:c9:07:c4:a1:05:ec:
7a:ac:f5:27:92:74:39:12:09:26:d1:1a:15:14:d6:be:99:d9:
66:d3:1d:6e:8a:e8:5f:24:b8:d3:17:9a:d8:ae:f1:d2:a8:3b:
05:c4:e6:0f:18:6d:87:63:89:f2:e1:0e:b0:a0:95:fb:52:97:
89:04:fa:3c:ec:4c:24:6c:c9:6e:77:6a:5a:8d:a4:39:e4:e4:
fa:ed:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:02:45 2026 by rpki-client