Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: kKvp3jNxd2j9g3vo8JFfiyRf3PVy6vp9OlYkTdWmnJg=
Subject key identifier: 3E:6F:74:8F:F0:76:38:B8:D6:94:8F:9B:7A:94:76:F7:B4:1C:35:CF
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 01A1803D7E563046DF805139B5562B4CB0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 080C
Signing time: Wed 28 Oct 2026 02:01:15 +0000
Manifest this update: Wed 28 Oct 2026 02:01:15 +0000
Manifest next update: Thu 29 Oct 2026 02:01:15 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: O/XFfEFPFLqAkgwaQxf433YT0uDBhyR3KPIx0eMpq0k=)
2: VNK9xrc1EHlh_47X-bXBVSsi6Dk.roa (hash: sg+OCkb5fndiZ8FwlBNBmAX4erTA64UptD+HdwtQH/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:7e:56:30:46:df:80:51:39:b5:56:2b:4c:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Oct 28 02:01:15 2026 GMT
Not After : Oct 29 02:01:15 2026 GMT
Subject: CN=3e6f748ff07638b8d6948f9b7a9476f7b41c35cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:10:22:62:7e:95:13:a9:c4:72:de:7c:d3:
94:69:f2:13:64:2f:49:06:80:7a:d0:17:68:67:7c:
77:29:2c:83:ed:2d:a9:2a:eb:5a:d0:08:c7:18:ae:
0a:54:59:21:d0:4a:c8:ae:da:62:75:1d:b7:ec:70:
40:4b:f2:79:ca:49:3b:ca:46:b4:2a:b1:f5:80:76:
e0:3e:4f:d7:bd:20:ad:e4:e6:5f:ed:48:62:a6:64:
5f:99:47:a5:ef:7d:2d:9f:34:63:7a:5c:e5:b9:fb:
d0:cd:16:2b:fa:f2:b6:c9:e8:37:ad:77:83:0f:14:
5e:30:08:5c:22:48:0c:be:44:05:f9:f7:a3:95:cf:
1a:72:e4:20:85:7f:1b:72:f4:55:83:ca:4f:5f:e6:
aa:c7:80:a8:df:24:fc:00:5e:68:d4:84:e9:97:8f:
b3:3a:3c:79:6f:80:f9:d3:bf:dd:6e:c9:70:ea:97:
58:32:4e:2b:b9:1c:c0:9f:62:4c:22:58:a6:b8:1b:
32:25:00:0c:da:c9:22:af:02:92:96:48:cc:12:28:
50:96:33:f5:14:7b:ee:e8:5a:86:de:5b:dc:6f:31:
6e:39:95:8e:89:03:2e:7f:3d:a4:2b:e0:22:80:77:
1c:ae:dc:f6:46:f7:bd:0a:03:da:37:a6:46:76:cd:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:74:8F:F0:76:38:B8:D6:94:8F:9B:7A:94:76:F7:B4:1C:35:CF
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3f:2b:f5:90:fb:a6:5c:f9:25:e2:22:ab:32:63:f1:3d:8e:
83:b8:52:05:85:88:83:c3:c4:9f:f9:bd:97:2d:35:d2:4a:b6:
66:80:8d:fd:04:c6:cb:ae:2b:ff:56:b1:34:7c:72:95:f9:4d:
e8:11:a3:21:23:76:e9:06:41:cb:4b:8e:a3:b6:1a:42:ca:53:
b5:f8:dd:cf:ca:33:40:52:07:68:86:f1:9f:84:d8:8f:d6:b5:
63:48:85:6d:c1:0f:1a:29:d7:2d:68:c2:37:de:ed:0a:a6:49:
ae:d4:f1:21:ed:ef:ac:26:a6:7b:d1:22:f9:14:e4:29:46:dd:
5a:32:45:58:83:4c:7e:fc:77:dd:61:94:9f:35:20:17:45:b4:
41:73:b2:bb:aa:79:b4:d1:82:21:0a:95:0f:b5:99:6a:08:26:
43:d5:24:9b:6b:22:3d:e3:4d:f2:53:f3:eb:48:df:89:45:be:
07:61:db:a2:17:91:be:a4:e2:85:91:f2:e0:51:52:5d:4f:36:
04:7c:b6:f9:a1:9a:c4:4c:eb:7c:be:8e:00:9e:59:89:6a:37:
05:4a:7b:16:46:15:59:43:97:e9:85:6c:4b:d4:15:82:45:a9:
fd:3b:6a:de:8b:c5:63:24:6b:f3:4a:bc:21:73:cc:f1:61:ad:
da:13:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:17 2026 by rpki-client