Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File: NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier: lYGA8KQRGSUBQF93CdrMjfAJmsWWVqR+/2k/4pwkxTM=
Subject key identifier: 51:30:D0:49:0F:91:8C:88:80:F5:E8:04:A7:55:24:F4:D1:09:F7:5B
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer: /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial: 01A174391426186D0F980165DBD36B6A44A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number: 0AFA
Signing time: Sun 25 Oct 2026 18:00:59 +0000
Manifest this update: Sun 25 Oct 2026 18:00:59 +0000
Manifest next update: Mon 26 Oct 2026 18:00:59 +0000
Files and hashes: 1: HpNoPyQg0FUOf8oxwArXB82edsU.roa (hash: 90HgYD+gZxel+odW0C1ibu7Dxis/Nvml6GTHNV4NnPc=)
2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: WaXRBIc4L9MDY4TeqiBK01ynwj9jrXsFG0BffF7NMHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:14:26:18:6d:0f:98:01:65:db:d3:6b:6a:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Validity
Not Before: Oct 25 18:00:59 2026 GMT
Not After : Oct 26 18:00:59 2026 GMT
Subject: CN=5130d0490f918c8880f5e804a75524f4d109f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:e8:b8:ed:1d:bf:0a:32:06:17:eb:58:d0:
37:37:2d:77:89:0b:40:b4:db:71:65:00:ad:0c:8e:
f6:f6:9c:40:4b:51:a3:94:24:41:ce:64:b6:8f:8d:
0a:6d:74:41:d9:0c:eb:2b:b2:6b:95:16:8e:db:9e:
bd:db:ab:85:8c:e3:b0:ee:58:da:73:85:1e:c1:ee:
54:37:40:d7:65:78:1d:67:b3:6b:8b:c8:aa:92:9a:
20:ec:15:2d:3b:12:e1:4b:f2:03:e5:ba:fd:21:85:
8b:1d:74:60:43:88:03:48:67:3d:7d:e8:d7:80:1b:
fe:33:00:01:c6:54:1a:35:19:7e:65:db:d9:cd:3c:
66:18:28:cd:8e:7e:ca:8b:87:14:10:08:47:0e:29:
30:78:7a:71:fb:33:af:3c:78:42:b5:28:f9:64:0f:
cd:10:bb:12:a0:66:97:94:70:c4:b7:42:88:98:56:
0e:81:5b:ff:46:b9:80:77:e3:97:8e:96:dc:50:97:
dd:c8:eb:02:c8:65:09:3d:20:9c:1d:4a:eb:1f:f4:
2c:0f:bf:45:e8:a5:3f:05:25:92:20:63:27:55:91:
99:f0:f2:80:52:6f:a0:0b:ce:24:a9:32:02:99:62:
5c:cb:8b:2b:c8:ef:6d:c1:7d:5c:ef:82:50:b4:c9:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:30:D0:49:0F:91:8C:88:80:F5:E8:04:A7:55:24:F4:D1:09:F7:5B
X509v3 Authority Key Identifier:
keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b9:19:ef:5f:06:0e:df:ed:e8:9c:d1:49:83:91:5d:68:0b:
75:54:20:bb:2f:bd:d5:bb:a5:56:b2:83:de:da:e9:23:5e:bb:
9d:3d:dc:1e:50:0a:77:f4:50:db:35:9f:7d:36:d2:31:0f:c4:
a3:ce:93:44:52:cd:a6:87:ee:22:bf:a9:cd:ff:4a:6a:83:65:
30:9d:5f:d8:66:58:f2:8d:4d:fb:ee:1a:7b:21:fe:26:40:1b:
ab:5a:41:84:ed:d4:f1:a6:62:5e:ae:4c:57:35:65:75:53:01:
cd:91:41:9a:a5:ac:47:4d:7a:84:34:8c:52:bd:97:a6:3d:73:
d6:56:9a:61:64:34:e3:81:52:97:e2:4a:b0:ac:35:dc:0e:16:
68:62:e7:23:ed:03:15:ad:6c:90:e9:93:c7:94:c9:72:8b:b5:
ab:07:79:9e:4b:14:ff:94:20:fb:97:ff:95:4a:d9:5e:30:60:
51:65:c6:47:0d:17:9f:9f:92:68:a6:6a:1a:44:b9:8f:96:06:
63:01:01:65:ce:ac:23:30:8c:25:38:dd:ec:dc:76:14:8f:28:
5f:81:28:ee:84:30:9d:0d:b0:db:f4:4b:d4:3c:a7:e5:9e:bb:
52:9a:cb:13:a7:71:08:14:28:22:8e:fc:b2:fa:64:dd:52:a9:
ef:a8:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:07:58 2026 by rpki-client