Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File: nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier: HIy3EWz5fLlbUU+csZty56cU/wa8WwrKSlcV/h3DEt8=
Subject key identifier: 72:69:84:31:D4:24:B8:E7:FB:7B:00:A9:B0:BD:5D:85:81:E1:E3:A8
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer: /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial: 019FA1F28B10723A0B7D3D65BEE5051FCFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number: 1023
Signing time: Mon 27 Jul 2026 05:00:54 +0000
Manifest this update: Mon 27 Jul 2026 05:00:54 +0000
Manifest next update: Tue 28 Jul 2026 05:00:54 +0000
Files and hashes: 1: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: olspjPsFqEvw/zTB5KrY4Vo81LP5xvKMAH6t+UrjoRk=)
2: q6CwaYt60BDQuc3_ZWsbWaNz8Dg.roa (hash: JEtY03ZZCO1pOzbBLbHUtClYuSPCvPVo4T1050vxYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:8b:10:72:3a:0b:7d:3d:65:be:e5:05:1f:cf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Validity
Not Before: Jul 27 05:00:54 2026 GMT
Not After : Jul 28 05:00:54 2026 GMT
Subject: CN=72698431d424b8e7fb7b00a9b0bd5d8581e1e3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:d5:6f:9a:ea:62:43:eb:65:36:e9:55:d8:
e2:25:6e:3e:7f:54:08:18:0c:8b:06:d8:c9:9b:f7:
42:ae:50:b7:08:3a:49:30:64:47:87:27:4b:17:5a:
93:41:14:e5:ec:b2:e8:7b:09:bb:30:be:e7:f1:38:
02:dd:51:f9:5f:80:f5:fa:a4:7a:b9:b0:d0:92:0f:
7d:14:fa:f0:25:da:e5:7f:ee:dc:04:2e:9a:77:47:
aa:9c:41:14:64:96:e5:0b:4e:75:85:7e:78:23:5a:
bb:56:d9:e0:a3:f7:22:22:f0:fd:b0:a5:2f:0d:59:
00:8c:bc:3e:22:2b:d5:fb:9c:cf:7f:fb:14:f2:29:
49:7e:bd:80:ca:3b:a6:ba:6a:c0:69:ab:ce:9c:8f:
89:29:54:86:43:dd:23:71:5d:8d:7f:4b:8d:d1:02:
1c:8a:ab:3c:4a:50:d3:c3:7b:71:29:9e:43:27:b0:
72:ff:1e:6b:8f:58:11:4f:8c:f1:0e:c8:80:03:8d:
30:99:9b:2e:91:ec:dd:8c:ea:dc:d8:6a:c4:6b:75:
e1:b3:37:fc:08:a3:2d:9f:ff:d7:92:b7:25:94:3d:
e7:80:46:ca:ba:39:0d:97:73:90:02:ea:25:5a:0b:
6a:c2:9d:4d:1d:53:18:47:75:3d:c2:40:c9:71:d4:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:84:31:D4:24:B8:E7:FB:7B:00:A9:B0:BD:5D:85:81:E1:E3:A8
X509v3 Authority Key Identifier:
keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0f:1a:c6:49:2a:bf:dc:bf:cd:cb:cf:9f:37:cd:75:47:cc:
96:10:51:a4:ca:f6:a9:52:a2:16:90:34:2d:ed:35:b8:3f:45:
de:a6:c1:b8:d5:73:ca:3a:5f:f2:84:3b:17:cf:15:f0:48:58:
a0:ef:4c:7b:b5:42:bf:0b:ff:e4:f0:56:e1:30:a0:2a:1d:c7:
b8:d8:ab:ed:4a:c9:07:02:1f:47:41:ac:6f:f6:5b:9b:cd:07:
c9:b1:15:07:c3:05:8c:a5:db:78:af:7d:b5:80:3c:3b:04:1d:
50:8b:3a:2a:fb:8d:91:2e:5d:33:1b:84:b7:b5:37:e9:f6:56:
fe:da:2f:c4:71:ef:04:79:61:06:79:00:90:08:1a:87:2d:1b:
87:cf:91:ff:f0:08:f0:dc:60:24:de:55:9f:e2:03:12:90:9c:
e6:c2:cd:1b:4d:01:77:bf:d8:47:4b:c2:5b:5e:a6:26:fc:7a:
42:e3:bc:b0:f6:55:ff:8d:8f:fa:4b:29:96:a8:96:39:65:d5:
40:d6:23:95:88:3a:2b:da:c9:84:21:bd:52:48:e2:40:96:91:
dd:4b:e7:6c:6d:ef:b0:8c:69:b4:94:f1:01:92:a3:97:6b:87:
84:ed:0f:66:6a:02:e1:8a:ad:18:cc:bb:98:f1:90:fd:10:94:
65:81:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:35:34 2026 by rpki-client