Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File: Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier: RltzpDZf2G6YN+lzAJ7cM2TlMTEN8tp2MSfv4f5A7aU=
Subject key identifier: 2A:3B:79:CD:87:F6:80:5F:72:6B:9A:43:FA:D5:7B:2C:D1:94:EE:AF
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer: /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial: 019D38D3D38AE7B2093B36B1337D504F561A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number: 0B95
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: 9JiIUwRXf9ZuhWlPFlj+Ipzipgr1c4dswk9r93zP3lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d3:8a:e7:b2:09:3b:36:b1:33:7d:50:4f:56:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=2a3b79cd87f6805f726b9a43fad57b2cd194eeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:a9:7b:7a:7c:1a:28:94:49:9b:c8:c3:7f:
7c:a2:61:3b:b9:88:4f:ad:36:b2:8b:e2:6c:da:c8:
d6:8a:d0:69:d3:bc:03:59:64:b6:4a:58:24:e5:bc:
3a:ce:83:a1:da:97:80:99:8c:5c:3a:06:ea:a8:ab:
a6:d7:a9:6b:6b:93:d1:34:1e:93:71:8c:dc:70:ad:
23:e3:cf:d5:e9:2b:7a:a0:80:45:ef:f4:7d:e6:cb:
57:27:09:69:cd:ca:90:f7:e5:75:e6:dd:e8:05:84:
d4:25:fb:f7:0a:8b:a7:31:37:b6:82:0c:7a:93:47:
57:08:88:67:ef:ee:45:11:61:f1:a2:2d:87:e3:9c:
ab:84:79:63:0a:57:9e:f3:08:56:6c:31:d9:c3:67:
01:e3:da:d7:bf:d7:19:80:30:ac:0b:4d:9f:af:2e:
fe:17:57:1b:10:f8:0d:14:e4:20:54:dc:c3:33:3c:
a4:99:86:13:93:5d:03:74:cf:fc:ee:85:0a:47:7c:
f4:40:5c:31:ac:37:69:31:d0:a6:07:b9:d9:74:67:
cf:40:c0:a4:61:c0:82:d8:d2:68:d5:d1:a7:b2:f8:
b9:b8:10:da:04:37:d0:dd:3a:2e:4f:46:34:61:e8:
7d:7d:6a:91:2c:09:ab:14:bb:8e:c6:05:06:1c:d7:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:79:CD:87:F6:80:5F:72:6B:9A:43:FA:D5:7B:2C:D1:94:EE:AF
X509v3 Authority Key Identifier:
keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:bb:7f:8b:c9:39:96:5d:65:ca:fd:b4:96:b3:23:33:aa:
71:3c:17:38:f2:09:0f:64:81:43:ff:37:b0:48:2f:4b:f1:a6:
a7:b8:25:cd:56:e1:72:64:32:26:ba:a6:80:03:9d:e0:32:b3:
64:df:5b:5f:ff:3b:d5:e6:83:7e:b9:82:6b:fe:9d:01:7b:20:
ac:56:6b:11:b2:a7:af:53:d1:f3:e6:8e:94:62:33:8b:a2:3b:
e9:c0:fb:1f:1f:d3:0d:c6:a8:cc:92:50:b5:36:fc:f2:4b:4a:
61:73:7b:8d:59:9f:5f:c0:88:dd:c8:65:ca:0f:4a:93:15:c1:
d6:f7:06:33:a4:d3:64:59:f7:22:db:e0:ea:2b:67:92:03:8d:
98:9f:63:73:00:63:de:09:af:c4:6c:2b:ee:cf:5b:a4:3b:7e:
30:e5:b0:ef:cc:c0:d9:43:7b:54:02:a1:64:ab:95:0d:aa:30:
6b:e9:fd:1d:77:c4:f4:4a:4b:76:da:cb:a3:31:5f:b5:94:09:
95:8f:23:1a:28:c8:e1:e4:ab:8f:ed:7e:65:6f:c5:8a:9d:59:
3c:6b:5f:9b:db:c3:9e:e4:7a:7f:84:1b:dc:24:99:47:aa:b0:
fa:18:26:2c:bc:7a:3b:a0:2e:9f:b1:b7:75:aa:83:6e:25:ef:
44:51:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:09 2026 by rpki-client