Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: 4++aHnSivOres8leTAbOQkuC0ttf63d4yLTPCJbXrMk=
Subject key identifier: 29:2A:EC:2C:18:6A:A9:C7:26:EF:E7:E6:65:E9:C4:8A:C0:75:2F:2E
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 019F9FCCC91A7904C9CA5103BE8F2A706AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 16AD
Signing time: Sun 26 Jul 2026 19:00:25 +0000
Manifest this update: Sun 26 Jul 2026 19:00:25 +0000
Manifest next update: Mon 27 Jul 2026 19:00:25 +0000
Files and hashes: 1: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: /R32Dl/vVqYs2DEkcQEf+GOHlXeGiq+ZbCJ3cgsbKYk=)
2: yc62V3uIeA0-wy5Fq3O35pcJbHU.roa (hash: 7ByXG9IeLzWoaYBiJRWc0wUwLkE/yLcff/PMKmyqASg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cc:c9:1a:79:04:c9:ca:51:03:be:8f:2a:70:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Jul 26 19:00:25 2026 GMT
Not After : Jul 27 19:00:25 2026 GMT
Subject: CN=292aec2c186aa9c726efe7e665e9c48ac0752f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:a8:42:92:a9:dd:ca:ec:34:c0:4d:73:57:
e0:d5:a3:96:27:23:82:af:f2:67:f7:69:60:bd:25:
98:5e:bd:24:26:93:42:cc:6c:83:3c:f3:b6:33:92:
b6:21:8e:0e:bb:40:1f:53:17:c1:68:4f:df:96:61:
a0:6e:81:94:e4:15:8b:90:f5:56:70:8c:0d:4b:9d:
38:94:20:19:f2:b0:52:21:41:fb:d0:b0:1d:ec:78:
55:ac:9c:04:17:05:4a:e7:fe:03:aa:ff:4e:a3:b1:
f5:97:b9:40:ef:aa:f6:a5:a0:93:9c:b4:30:f8:a0:
e2:b6:a8:1b:d0:58:d7:7c:43:0d:6a:76:be:36:5b:
a5:5d:bf:a0:28:94:fd:97:44:74:0f:c7:a1:8d:1a:
56:6a:02:5e:35:fb:8f:02:38:c9:24:58:87:41:35:
dc:88:1b:2b:8f:42:1e:b0:37:ab:e2:e7:13:83:d2:
cf:40:06:3d:1e:0c:de:a3:33:07:6c:d3:90:7f:7e:
b7:21:86:96:1e:ed:57:ae:68:87:98:6b:49:e2:4c:
8e:e4:28:fb:09:a0:5a:ba:0d:4c:35:ca:25:ef:eb:
a1:f1:79:c0:9b:50:91:0e:f3:c6:98:c2:4a:0a:47:
d2:7f:5d:e6:66:22:8d:b6:c0:5f:73:5e:53:a8:8c:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:EC:2C:18:6A:A9:C7:26:EF:E7:E6:65:E9:C4:8A:C0:75:2F:2E
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b8:4b:11:70:2c:58:8b:1a:64:d0:9a:79:cb:2f:54:48:57:
2a:33:78:9f:41:36:39:6a:74:ce:5d:5c:27:51:12:e2:30:ec:
fc:e7:46:f4:92:df:b1:b7:6c:ad:e3:55:d4:ec:f6:25:e3:5c:
84:3b:54:84:ff:c6:16:d5:43:0e:70:2d:56:6b:64:d5:e3:a0:
8d:7b:a7:67:9b:dd:11:1c:21:b1:6a:13:84:77:ae:00:4f:d9:
86:b0:61:dd:d1:85:fd:ae:f4:07:ea:aa:74:08:16:d1:24:04:
bb:3b:50:00:a4:5d:b4:00:8d:e2:13:62:75:79:0a:97:0f:63:
76:11:29:74:36:3d:b7:03:f2:09:90:cc:57:3e:c9:1c:07:05:
d0:85:e6:82:29:48:0e:8f:1b:d5:b5:7f:e5:62:b2:cf:ef:c5:
0b:6b:e9:15:8f:d2:2c:32:ac:25:9c:12:fa:67:bd:7f:cc:a2:
a9:a4:e8:68:80:af:ce:39:cd:76:95:61:c4:f3:f7:a0:aa:86:
62:21:7c:32:cd:5b:35:90:d6:8a:1c:7d:bc:de:ad:93:f7:5a:
c2:fc:3b:00:cd:d9:03:c4:a4:19:4b:95:5d:6d:78:d0:13:ec:
d1:c6:6e:0b:24:4e:8c:e4:56:8c:3b:8c:b5:9a:3f:e5:01:ee:
29:5b:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:16 2026 by rpki-client