Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: i1Gp0HoMVC+7ufvOX5rVPgHHuHZ6MYdsOdm7ntofmhQ=
Subject key identifier: 5A:24:E6:15:D7:32:9E:7D:C0:77:B6:BE:F2:81:AA:6F:A4:EB:DC:26
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019EB98F74CF6F43A725D69CCBA9FD0A905C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 069C
Signing time: Fri 12 Jun 2026 02:00:46 +0000
Manifest this update: Fri 12 Jun 2026 02:00:46 +0000
Manifest next update: Sat 13 Jun 2026 02:00:46 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: +YGM0Xo3GcgguIkc3F3UERGSCpkfRY6FvBOAMTbJAvU=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:74:cf:6f:43:a7:25:d6:9c:cb:a9:fd:0a:90:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jun 12 02:00:46 2026 GMT
Not After : Jun 13 02:00:46 2026 GMT
Subject: CN=5a24e615d7329e7dc077b6bef281aa6fa4ebdc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:29:8f:12:d8:c8:15:0e:6f:7e:2b:b4:93:
c2:63:6e:ac:54:24:71:cd:b8:17:e6:f6:75:4a:27:
8e:47:29:16:5e:c4:cf:33:da:f3:db:fd:95:6e:d4:
da:3a:09:5f:55:44:3d:c4:f4:99:03:e4:f9:ae:bf:
ac:18:f0:73:b1:00:17:30:93:8f:5f:4c:e8:af:db:
60:c3:c0:46:92:a4:77:da:62:5f:cb:09:69:96:5f:
ca:ac:33:48:34:bd:c2:d7:68:1f:61:28:c6:ae:7e:
07:0b:0a:0d:f7:f1:57:b1:2e:4b:fa:9c:81:4c:54:
4a:2b:27:2b:6f:f2:b8:42:0c:7f:f2:cf:68:0a:66:
eb:c0:53:00:fb:68:a8:99:39:63:13:75:d8:a0:8f:
fb:d0:3f:0d:d1:73:6d:35:4d:69:9b:3b:a6:ed:04:
6c:10:5e:22:67:72:77:72:34:34:e9:33:0a:bc:d0:
e6:3f:be:ff:cc:3c:a5:9c:e3:de:48:85:48:73:c8:
5a:64:b7:e2:d7:f7:0f:c7:12:0b:9c:77:67:75:41:
53:bf:0d:75:3d:a8:6d:ec:92:26:42:27:5e:8f:f7:
57:a1:87:9b:a7:3f:14:f8:91:8b:69:25:29:19:a4:
3a:54:04:cb:70:7c:88:65:74:db:f9:0c:ae:e2:4b:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:E6:15:D7:32:9E:7D:C0:77:B6:BE:F2:81:AA:6F:A4:EB:DC:26
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:d0:d1:76:a3:40:b2:dc:dd:db:67:0f:80:e7:b8:40:f3:
b3:51:fb:ae:45:3d:9f:7d:76:d8:f5:25:c5:43:27:79:88:c2:
fc:90:d1:38:d3:fd:8e:e1:35:da:0c:e2:fd:36:fd:c1:32:2d:
e2:ac:65:32:4f:30:67:5a:b2:3a:70:b3:e9:b6:60:87:fe:8d:
b6:56:63:90:f8:d8:e7:27:76:ba:f0:22:1d:bb:01:a4:73:f1:
1b:ae:af:db:ab:3f:b3:18:33:1d:8f:42:cb:00:54:c4:6f:d9:
1d:11:c0:01:27:1a:93:d2:ec:6a:69:e3:ce:74:26:26:f1:e3:
f3:f1:6e:b3:14:24:54:b3:1b:b5:3f:ec:9f:34:7b:51:3a:a0:
ba:d9:41:c0:4f:43:4a:60:0f:9b:95:e2:30:e7:58:ba:59:32:
4f:58:04:ab:e8:5b:7a:84:b2:43:4e:99:92:2f:c0:85:49:40:
6f:1b:e8:b3:ca:39:9c:2b:46:af:91:84:fc:b1:d6:90:1b:0b:
b4:08:63:ab:41:1f:3f:89:32:4c:5f:08:99:cb:39:26:fe:05:
c4:b1:d8:c0:58:1b:b5:19:42:8a:12:75:14:7e:77:0e:7a:17:
93:a8:94:72:3f:1b:06:44:8b:7b:6a:ba:1c:66:c8:3c:ba:65:
ce:a3:1a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j3TPb0OnJdacy6n9CpBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0
NGQ2NjEwHhcNMjYwNjEyMDIwMDQ2WhcNMjYwNjEzMDIwMDQ2WjAzMTEwLwYDVQQD
Eyg1YTI0ZTYxNWQ3MzI5ZTdkYzA3N2I2YmVmMjgxYWE2ZmE0ZWJkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xopjxLYyBUOb34rtJPCY26sVCRx
zbgX5vZ1SieORykWXsTPM9rz2/2VbtTaOglfVUQ9xPSZA+T5rr+sGPBzsQAXMJOP
X0zor9tgw8BGkqR32mJfywlpll/KrDNINL3C12gfYSjGrn4HCwoN9/FXsS5L+pyB
TFRKKycrb/K4Qgx/8s9oCmbrwFMA+2iomTljE3XYoI/70D8N0XNtNU1pmzum7QRs
EF4iZ3J3cjQ06TMKvNDmP77/zDylnOPeSIVIc8haZLfi1/cPxxILnHdndUFTvw11
Paht7JImQidej/dXoYebpz8U+JGLaSUpGaQ6VATLcHyIZXTb+Qyu4ku6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFok5hXXMp59wHe2vvKBqm+k69wmMB8GA1UdIwQY
MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt
MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0
LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf57Q0Xaj
QLLc3dtnD4DnuEDzs1H7rkU9n3122PUlxUMneYjC/JDRONP9juE12gzi/Tb9wTIt
4qxlMk8wZ1qyOnCz6bZgh/6NtlZjkPjY5yd2uvAiHbsBpHPxG66v26s/sxgzHY9C
ywBUxG/ZHRHAAScak9LsamnjznQmJvHj8/FusxQkVLMbtT/snzR7UTqgutlBwE9D
SmAPm5XiMOdYulkyT1gEq+hbeoSyQ06Zki/AhUlAbxvos8o5nCtGr5GE/LHWkBsL
tAhjq0EfP4kyTF8Imcs5Jv4FxLHYwFgbtRlCihJ1FH53DnoXk6iUcj8bBkSLe2q6
HGbIPLplzqMa/g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:57 2026 by rpki-client