Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: jETnJ4Pnracj9BFyPfVefYI9xh/K1Fxdy1064HoTuss=
Subject key identifier: F4:5B:AC:52:6F:13:79:3A:74:89:7C:C1:E9:B5:C0:8F:CF:BE:81:D5
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019D37530E22E3C76CFCE061F37EBB94282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 05D4
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: IIvoIX+zR9GirKhJ4CSf/MfiCJ/wKN93sjs0HWYyC4A=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0e:22:e3:c7:6c:fc:e0:61:f3:7e:bb:94:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=f45bac526f13793a74897cc1e9b5c08fcfbe81d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:76:04:1f:12:23:54:92:f1:f8:14:d4:a4:
3c:2b:f3:2d:0f:95:28:b5:07:23:e8:8b:27:55:90:
8c:ca:bc:b4:5a:8c:0a:7c:37:4e:df:69:77:89:b7:
c0:a8:36:de:ed:bc:28:c9:51:35:ac:0e:68:b0:95:
a8:d9:b8:0a:44:01:b3:d1:09:ce:f0:05:77:4d:c1:
31:e3:99:8f:85:4b:66:67:2d:3e:7f:1b:b4:a9:87:
d9:db:3d:66:19:05:7e:29:d1:46:96:ef:6b:1d:11:
31:cf:fe:80:59:66:bf:07:cc:8d:c9:d5:2e:18:2d:
4b:d4:a5:28:5e:5f:5d:0c:92:74:43:17:1b:50:e5:
f5:ce:48:93:52:d5:71:ec:f3:81:f9:51:5f:bb:07:
a4:98:61:a9:50:bf:df:19:8e:5c:34:f4:ea:c9:27:
c9:d8:d7:5f:1e:c0:19:cb:89:af:56:44:fd:37:ab:
16:dd:22:ad:8b:1a:fd:06:13:ba:6a:28:a5:d0:45:
ef:07:29:63:6e:a8:1e:23:89:ef:9d:04:d5:6c:01:
fc:bd:ac:74:ce:7d:3b:53:3d:82:a3:6b:a2:fa:5c:
0d:88:6b:c1:a5:12:e6:d3:18:87:04:3e:99:74:8f:
43:5b:bc:8b:ed:7a:31:2c:6f:e4:9b:cc:ea:77:f7:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:AC:52:6F:13:79:3A:74:89:7C:C1:E9:B5:C0:8F:CF:BE:81:D5
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:db:ba:4f:26:7e:85:c5:71:27:d3:ce:4f:50:22:4e:5b:6c:
d3:0c:99:57:74:bd:e6:7a:7d:89:e8:2e:a9:3e:54:95:6d:7b:
ff:c6:b5:04:63:48:9d:ea:7d:c9:f9:35:7e:77:75:1c:f1:11:
26:33:e7:d5:73:d1:7c:85:e3:94:eb:a7:cc:08:14:b4:03:96:
c8:d1:11:2a:66:c0:12:68:6f:ef:b5:a4:97:2c:09:b0:b5:99:
92:92:1b:9c:bf:02:b1:af:9c:d9:4c:4f:e7:a7:56:11:5d:85:
8c:d7:58:5e:ea:93:5c:3c:13:69:ae:bd:91:25:23:72:c0:f5:
85:ef:40:78:7d:b7:63:d9:a2:19:99:cd:84:18:dc:e7:c7:e1:
74:c2:a9:b6:6e:ca:30:a7:c6:90:4a:e7:a6:60:48:88:59:07:
19:7f:61:cc:af:5d:ea:0e:56:90:9c:40:2a:0b:29:63:3b:71:
be:90:9e:3e:11:77:85:96:12:df:81:7e:ae:09:f0:05:ab:c2:
07:30:38:34:5a:46:a9:98:37:37:50:6d:89:17:e1:5b:cf:54:
d4:06:ad:47:94:e9:07:47:c1:9c:fc:e7:ba:9e:6b:e2:f1:90:
31:8d:2a:77:5c:4c:cc:ab:55:55:92:08:3f:49:56:af:f9:9b:
c9:eb:95:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uw4i48ds/OBh8367lCgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0
NGQ2NjEwHhcNMjYwMzI5MDIwMTIzWhcNMjYwMzMwMDIwMTIzWjAzMTEwLwYDVQQD
EyhmNDViYWM1MjZmMTM3OTNhNzQ4OTdjYzFlOWI1YzA4ZmNmYmU4MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mN2BB8SI1SS8fgU1KQ8K/MtD5Uo
tQcj6IsnVZCMyry0WowKfDdO32l3ibfAqDbe7bwoyVE1rA5osJWo2bgKRAGz0QnO
8AV3TcEx45mPhUtmZy0+fxu0qYfZ2z1mGQV+KdFGlu9rHRExz/6AWWa/B8yNydUu
GC1L1KUoXl9dDJJ0QxcbUOX1zkiTUtVx7POB+VFfuwekmGGpUL/fGY5cNPTqySfJ
2NdfHsAZy4mvVkT9N6sW3SKtixr9BhO6aiil0EXvByljbqgeI4nvnQTVbAH8vax0
zn07Uz2Co2ui+lwNiGvBpRLm0xiHBD6ZdI9DW7yL7XoxLG/km8zqd/dNTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRbrFJvE3k6dIl8wem1wI/PvoHVMB8GA1UdIwQY
MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt
MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0
LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddu6TyZ+
hcVxJ9POT1AiTlts0wyZV3S95np9ieguqT5UlW17/8a1BGNInep9yfk1fnd1HPER
JjPn1XPRfIXjlOunzAgUtAOWyNERKmbAEmhv77WklywJsLWZkpIbnL8Csa+c2UxP
56dWEV2FjNdYXuqTXDwTaa69kSUjcsD1he9AeH23Y9miGZnNhBjc58fhdMKptm7K
MKfGkErnpmBIiFkHGX9hzK9d6g5WkJxAKgspYztxvpCePhF3hZYS34F+rgnwBavC
BzA4NFpGqZg3N1BtiRfhW89U1AatR5TpB0fBnPznup5r4vGQMY0qd1xMzKtVVZII
P0lWr/mbyeuVRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client