Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
File: nYwI9K2P6tNx2j58ArbP1on8pbo.mft (raw, json)
Hash identifier: Eeh0BWIU4hxZ8gvoV5JJX1kJT9PwtGhAbUYAOr964DI=
Subject key identifier: 3B:47:29:41:45:62:77:17:7A:31:BE:27:42:F5:ED:47:A0:7E:65:F7
Authority key identifier: 9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
Certificate issuer: /CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Certificate serial: 019EB80EF288AF0D2369023E2DF7EFA2472A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
Manifest number: 0CB3
Signing time: Thu 11 Jun 2026 19:00:47 +0000
Manifest this update: Thu 11 Jun 2026 19:00:47 +0000
Manifest next update: Fri 12 Jun 2026 19:00:47 +0000
Files and hashes: 1: gCdkelcku20UE3AgB6eQSuQOOYY.roa (hash: dJjFIayFe8nzFROO5Sz7ye6wsmq4p85VT0pjVrRuHPw=)
2: nYwI9K2P6tNx2j58ArbP1on8pbo.crl (hash: BKT6/+hE7FsanrM9tlnPxPTU93Ufh4leAwbFlQD0LUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:f2:88:af:0d:23:69:02:3e:2d:f7:ef:a2:47:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8c08f4ad8fead371da3e7c02b6cfd689fca5ba
Validity
Not Before: Jun 11 19:00:47 2026 GMT
Not After : Jun 12 19:00:47 2026 GMT
Subject: CN=3b472941456277177a31be2742f5ed47a07e65f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:58:36:09:c2:12:62:95:33:53:b8:49:cc:
bc:53:52:de:e2:4c:d8:35:8c:fa:38:d1:49:15:f8:
72:c0:21:8b:7c:ea:6d:d6:7d:b7:e1:b1:55:28:76:
c5:5d:18:c5:76:63:3e:cf:ba:1d:c8:d6:a6:4e:a5:
08:5f:5c:00:e1:9d:98:bd:ef:80:21:1e:dc:47:fd:
a5:c6:ca:11:08:92:c2:fd:63:49:67:fe:d3:58:82:
2d:42:bf:b7:b8:1f:b5:22:84:5a:bd:16:ae:ec:1a:
03:ec:2f:24:f8:a8:f9:19:b6:d4:3b:09:bc:75:25:
56:29:01:53:19:f5:20:8f:d0:4c:79:c7:25:8c:70:
c2:53:8f:c5:a2:6f:2a:c9:89:89:d2:c6:f2:3a:e6:
99:91:e7:49:d6:44:78:22:d9:b7:0d:d7:c0:a7:95:
8b:b3:1b:b8:82:d8:7f:a7:cc:c1:59:e8:d8:f4:65:
43:d7:67:1b:1b:84:54:4e:75:54:8a:2c:03:af:e8:
58:d9:2a:41:d9:07:c0:a3:e1:68:0b:9a:2b:60:10:
1f:56:f6:98:0f:e4:50:8b:ae:ce:22:ce:c9:48:0b:
d2:54:86:66:30:93:c5:4f:9b:c0:1a:58:71:a2:d4:
d5:44:f6:e2:21:8f:c9:55:2c:7e:6e:da:89:1e:0c:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:47:29:41:45:62:77:17:7A:31:BE:27:42:F5:ED:47:A0:7E:65:F7
X509v3 Authority Key Identifier:
keyid:9D:8C:08:F4:AD:8F:EA:D3:71:DA:3E:7C:02:B6:CF:D6:89:FC:A5:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYwI9K2P6tNx2j58ArbP1on8pbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/faa50f-4de1-4d1c-b803-19bf7810961b/1/nYwI9K2P6tNx2j58ArbP1on8pbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:5b:6d:ad:82:2c:7a:a9:f0:68:b0:77:40:2e:07:f1:ba:
0d:7d:84:70:b2:8d:37:78:48:d2:94:86:f1:1e:2d:47:02:87:
48:11:62:89:33:a4:74:d0:a0:f2:4f:17:b9:c7:fc:25:2b:78:
bb:a2:84:4a:6b:db:97:24:37:f2:f0:a7:8c:b6:96:63:73:54:
3b:f1:84:9c:4d:6c:c9:e3:a2:57:14:80:47:fb:56:82:d3:22:
99:30:42:c4:a0:7f:08:5e:04:b3:a7:74:be:4d:76:c8:ec:d6:
89:6e:e8:17:71:28:6b:ff:fa:74:d9:80:6f:48:75:2d:53:55:
99:6b:27:e0:40:5b:b2:a3:0f:a8:e4:65:4d:c6:34:ca:6b:1b:
fa:52:74:7e:7c:37:e8:0e:79:2c:ce:86:2f:5b:d4:57:c5:95:
60:a9:48:3b:1c:20:47:34:db:8d:ca:33:45:6b:9d:75:96:d7:
9a:b0:98:b1:75:37:ad:fd:7c:ae:e9:a2:12:ac:37:77:67:39:
89:be:d1:b4:2c:af:11:0a:77:be:16:fd:07:a8:50:0d:a7:2a:
12:74:d7:bf:25:ca:63:9c:1e:12:1c:1b:93:64:d7:c2:3d:64:
b2:4a:c6:91:d2:d0:ff:a6:ae:50:7b:95:0b:9e:b2:79:7d:57:
1a:5f:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:48 2026 by rpki-client