Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
File: NYx3zUAYPEEVsr8NznFuC8XQv9U.mft (raw, json)
Hash identifier: XXhBcJyNWBcdSuxmN/Ba4B1BxVZMVqMLsyekipwk2nk=
Subject key identifier: BA:7A:FA:0C:86:4D:78:50:F9:F6:92:17:05:8C:39:DA:EE:14:71:F8
Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Certificate serial: 019D389BD121F1841333019D7283CF515E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
Manifest number: 05FA
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: NYx3zUAYPEEVsr8NznFuC8XQv9U.crl (hash: jBJbp6q/PeCBM2bPTdWw/1K9oMMLolaZrrWkUn8bDDY=)
2: UlEC3VpAKX5fgFyuoTuBA8htBuc.roa (hash: OCopTvk4i816iUhH+QXazE3VcJpYfdLODiRXhmC1WXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d1:21:f1:84:13:33:01:9d:72:83:cf:51:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=ba7afa0c864d7850f9f69217058c39daee1471f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:57:1b:08:6c:0d:a1:6c:48:49:45:5b:1a:
cd:4e:42:64:99:4d:83:42:2c:07:0f:61:d3:3a:07:
1c:f7:03:29:93:64:5b:5f:3f:b2:d6:d3:4c:17:e1:
ca:97:4a:00:31:da:5b:bc:68:30:a0:0a:b2:74:cd:
0d:6f:ce:28:15:6e:7b:95:98:83:ab:12:3b:c4:b6:
06:db:8b:c3:cd:8a:43:1d:c1:1c:61:d6:69:23:be:
9c:9b:7d:f9:84:f3:3d:bb:8b:41:18:c1:43:1a:bd:
db:c9:38:3f:4c:ef:df:93:e5:4c:d0:68:93:78:c2:
b2:08:eb:c7:8e:90:44:b0:ef:7d:eb:66:88:15:06:
e2:27:01:11:01:73:2f:98:1e:49:6d:e3:e8:49:09:
69:3c:7f:26:9c:7b:63:53:02:fa:b1:46:8a:79:2f:
c1:12:54:ec:18:60:9a:83:5d:25:fc:3a:1d:1f:ba:
2e:d0:1d:6f:39:09:ba:52:77:61:08:f6:10:ea:9f:
5e:d8:c0:f4:06:f6:68:83:06:27:e3:e5:c6:6f:ac:
1e:a0:37:57:d2:c2:25:f1:dc:fd:40:fe:42:a8:8b:
06:14:ba:cf:36:66:ee:a4:6c:02:2c:19:9f:91:35:
2c:01:53:9e:03:6c:25:ef:e4:3e:3e:81:45:e2:44:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:FA:0C:86:4D:78:50:F9:F6:92:17:05:8C:39:DA:EE:14:71:F8
X509v3 Authority Key Identifier:
keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:37:5c:af:04:76:5b:9e:d8:f9:21:d4:c5:aa:cc:2a:5c:
0b:ba:3b:07:b8:35:64:8f:9f:b1:a2:52:af:20:63:b9:d0:ba:
d3:f3:66:e3:24:12:46:eb:de:74:3e:9d:56:f4:04:ba:b1:6d:
08:93:c9:f8:bb:df:bd:18:36:2a:12:1c:6e:4d:a2:4d:51:ea:
e2:7a:a4:83:93:9b:5e:c0:ec:a7:d7:e4:83:0c:9d:d8:04:7f:
c9:15:32:88:6e:d2:32:93:ce:4b:57:4e:56:cb:95:80:0b:84:
18:38:f6:27:e0:39:25:1d:f4:da:d4:2d:39:51:eb:54:9a:e7:
1f:ba:ff:df:f0:7b:c3:6c:9d:7f:3d:c9:55:de:30:7e:77:a1:
d7:1f:04:a9:41:96:9b:d1:b3:88:07:6e:22:c1:20:88:19:52:
20:c0:b2:2f:f8:9b:ba:21:10:6f:90:35:ca:2e:e2:04:13:27:
00:57:84:93:03:2a:7f:e4:0b:4d:8e:9f:f9:13:a7:1d:1c:85:
6f:4e:9e:c1:8d:99:a2:81:49:0d:3e:21:54:df:d7:9a:b1:85:
22:c9:e2:cd:51:7a:d7:9b:ac:23:2a:bd:0c:20:81:96:36:f0:
69:e2:90:35:04:bc:aa:ac:b0:28:b2:77:bd:c3:9e:2f:f1:d9:
7b:2e:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client