Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.mft (raw, json)
Hash identifier: XWhOBM1mACtlgR+YcgWOW2TelQQQ5D+tIcAffnTEd0M=
Subject key identifier: 1D:E0:4F:ED:0A:3F:6D:EF:74:27:39:DF:26:72:A3:B4:3E:68:FA:81
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 019D37899589F8B95FB86E6711923053A7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (hash: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns=)
2: kl-QOGVe7PK91vpCi2USAa3ccpw.roa (hash: HWbTD/Tv8Ial6ox3QeIYsotL/F4NlFjQ8kHdlhrPJ4Y=)
3: nyvDxVZNQ0OBy3i6R61Yvk096qg.crl (hash: mWcmeX6e50Oj5HNxlbXjo41iJphvYqZC9Rh2CAJi3/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:95:89:f8:b9:5f:b8:6e:67:11:92:30:53:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=1de04fed0a3f6def742739df2672a3b43e68fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:35:c1:84:7c:a3:48:ad:84:54:f8:9d:b7:
f3:dc:88:ad:2c:fb:00:47:d6:8a:2b:09:6c:69:fa:
59:59:74:92:87:84:df:30:ce:e8:8c:d6:46:84:f2:
3c:21:7f:0e:38:55:b0:2b:b3:87:e6:ea:da:a2:b0:
2d:bf:bf:0c:84:b5:6e:71:4f:8a:80:e9:a0:c4:ab:
3f:93:75:96:1f:a0:86:07:f2:c6:39:2c:b8:61:2e:
07:a2:52:da:7c:fa:85:96:3d:32:57:71:76:f8:7a:
12:2b:e9:6d:2a:27:48:1e:fa:73:93:3b:e3:2f:ff:
20:cf:e1:48:07:dd:41:87:ff:d5:6e:41:1d:72:9c:
c3:8e:10:58:8b:89:f6:e9:13:b6:9b:bb:e4:d9:9b:
0b:28:ca:f4:c6:dc:63:c9:70:9b:40:d2:a8:a9:1d:
49:54:b8:bc:27:31:07:30:18:85:6a:5e:7f:85:f5:
2c:a2:d9:e4:8e:1a:94:59:09:c2:48:8b:5a:df:cc:
74:b4:6f:a4:69:5a:df:00:8f:7a:9b:d5:e5:22:51:
c8:2a:30:44:af:0c:d8:5e:16:7d:1c:11:e3:ab:40:
d9:5a:f2:45:f7:d8:54:1b:57:ee:24:4c:b1:7f:88:
29:73:f0:dd:f4:ae:32:e8:96:c4:de:97:0c:ea:72:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:4F:ED:0A:3F:6D:EF:74:27:39:DF:26:72:A3:B4:3E:68:FA:81
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:f2:a2:54:b3:97:14:88:aa:e4:2b:bc:50:16:bb:62:21:
e8:70:d9:79:56:61:cc:50:76:67:9b:02:4c:08:67:1a:b1:4e:
39:4f:34:b1:bb:fc:3f:e2:b0:7d:14:60:b3:88:21:ec:40:3f:
8b:75:0e:d2:6f:1e:c8:6c:b0:a9:32:c5:db:2e:7b:de:50:e3:
83:3c:d9:d4:11:30:2c:cd:57:90:f7:9f:d2:e7:fb:9d:c7:ab:
42:40:13:1a:56:50:6b:71:51:ba:65:21:c0:06:64:88:f3:96:
6e:de:3d:37:3c:2a:b5:35:a6:e1:a6:84:04:5b:71:92:ab:40:
4f:4a:c6:bb:53:e0:60:cf:da:b7:07:ca:cc:11:9d:c6:45:3e:
21:1e:d5:d5:a5:c9:a1:24:2d:94:4c:08:b6:93:4f:b3:57:9b:
8d:fc:df:2b:29:c1:f9:a5:56:b7:ab:b3:1a:00:1b:b2:f9:09:
c3:f3:9b:1a:8c:88:4c:20:de:84:44:68:c7:a2:7c:6a:b5:a5:
e8:7a:d5:4f:85:ff:b7:df:96:3b:c5:63:0f:54:14:9c:fc:a4:
55:3c:96:a3:44:60:86:27:9a:98:31:59:a6:ac:a1:cc:c0:c2:
b4:22:19:28:74:4f:95:21:f7:d3:b4:84:ae:01:97:cd:74:e1:
cd:c1:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client