Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File: nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier: j6VWkQ/ybQFyGr0ZfAaazN/2Eq6wG392Pgikw/TYtM0=
Subject key identifier: 92:6F:F0:1C:88:9C:3F:9A:2C:36:B4:C1:F8:1B:7C:B2:F9:5E:B9:E1
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer: /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial: 01A17ADFA323194D0A7E429493A734D9F3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number: 17A3
Signing time: Tue 27 Oct 2026 01:00:38 +0000
Manifest this update: Tue 27 Oct 2026 01:00:38 +0000
Manifest next update: Wed 28 Oct 2026 01:00:38 +0000
Files and hashes: 1: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: WDUDaOQeSP3PuYFnoJKr536la2JnEbuArO0Ub5BE6Bc=)
2: yc62V3uIeA0-wy5Fq3O35pcJbHU.roa (hash: 7ByXG9IeLzWoaYBiJRWc0wUwLkE/yLcff/PMKmyqASg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:a3:23:19:4d:0a:7e:42:94:93:a7:34:d9:f3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
Validity
Not Before: Oct 27 01:00:38 2026 GMT
Not After : Oct 28 01:00:38 2026 GMT
Subject: CN=926ff01c889c3f9a2c36b4c1f81b7cb2f95eb9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:ec:98:1e:60:32:4c:69:49:cc:f2:da:ca:
2b:8a:3e:c3:e6:42:76:1d:a3:fb:d2:0d:88:ec:52:
3c:d1:ea:c0:88:bc:98:a5:35:22:b9:0c:85:39:9b:
ec:38:81:1d:b6:45:0b:67:3e:24:d3:92:3a:ca:c7:
c2:ca:d3:d4:d9:8e:9d:27:2e:37:54:eb:80:a7:6d:
b1:9c:9a:37:48:55:02:1b:9f:12:2b:c1:3c:74:5d:
4e:a8:d3:cd:7a:77:0d:d2:28:a6:2e:fd:eb:5d:b4:
97:83:10:24:d1:e2:06:c5:58:fd:71:59:a2:4e:8d:
2f:93:c3:7f:00:01:c4:fb:a1:42:99:95:db:c8:b8:
ae:e9:5b:58:52:bc:9d:56:6d:6c:25:c5:3e:65:79:
18:88:d7:c5:56:37:fc:18:eb:47:b6:63:5f:61:d7:
54:e6:5b:94:60:c4:69:cc:b5:e5:4b:54:e3:e0:fc:
24:ac:df:7b:1c:46:0c:f3:2e:e3:92:12:93:c3:1d:
e4:67:3a:e6:ea:4c:9b:5f:82:07:40:bf:19:9b:58:
17:55:2c:50:5f:5f:7c:95:b9:3e:37:eb:0a:d5:93:
e5:cb:ca:18:70:0d:a9:80:d6:31:20:f4:4d:4d:1d:
1d:ca:a6:63:1a:cd:36:a5:f5:a1:f1:d8:61:d9:e8:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6F:F0:1C:88:9C:3F:9A:2C:36:B4:C1:F8:1B:7C:B2:F9:5E:B9:E1
X509v3 Authority Key Identifier:
keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:d5:0a:b0:66:c0:e1:4c:e3:fb:26:57:59:6c:0f:b7:ae:
7c:16:9f:d5:6d:2c:20:fa:6e:d7:25:ed:2b:97:82:af:c4:db:
85:1b:4f:4e:4b:48:80:f9:80:dd:79:26:0f:7a:c2:12:e7:8d:
4f:b2:0c:6a:0e:11:f2:0b:76:2b:ec:ee:0e:91:2c:d8:e7:04:
3b:04:c1:93:c8:8c:7f:9f:90:7a:4c:34:32:d2:f9:dc:e7:a0:
f0:fe:46:b0:ca:eb:fa:c9:1f:fc:2a:ba:24:25:21:06:71:8c:
9d:61:b7:75:62:3f:88:20:42:8d:5d:c1:d8:39:1d:5d:89:e4:
91:e7:f9:ff:f0:e0:04:7a:0c:c2:4d:05:b8:bd:3e:08:ea:10:
f1:72:1b:5d:0b:6d:c7:bc:fc:fb:8d:3b:1d:ee:42:2f:dc:2d:
e0:7d:6f:79:d8:78:e9:46:66:f5:09:7d:ea:dc:1b:a5:51:7f:
43:a5:a1:1b:cc:73:b4:b1:a7:44:6d:2c:23:a8:fc:2f:f9:a8:
69:20:35:a1:1a:70:41:ef:77:75:1e:b2:83:db:78:b4:5b:09:
b8:83:b6:8a:ef:15:35:aa:64:ec:11:4f:16:08:17:8f:ac:87:
13:ad:77:2f:4e:d0:88:53:9c:a3:08:c3:38:4f:ae:d5:80:a2:
e8:44:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:02:19 2026 by rpki-client