Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: NwOshmZcmnPrHS08opNeL6MdfbrgzJAU1OSvQJHmKSs=
Subject key identifier: 28:D8:8D:53:50:14:D2:EC:69:CD:73:D8:A4:32:3B:DF:68:EE:7C:47
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 01A08B31813F409F137231684F69A7BA3E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 0329
Signing time: Thu 10 Sep 2026 12:01:12 +0000
Manifest this update: Thu 10 Sep 2026 12:01:12 +0000
Manifest next update: Fri 11 Sep 2026 12:01:12 +0000
Files and hashes: 1: Jy76E1q7dDTCejXtPafJsRSES8Y.roa (hash: 1WiGvZJxKYYrQ+5QCN5Y0ow1dlNCCLa6+9MgNHjV0TQ=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: f9ENQQtAmyr9iind40ck/vL1dD17zGgQ0Gb8bVTjjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:81:3f:40:9f:13:72:31:68:4f:69:a7:ba:3e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Sep 10 12:01:12 2026 GMT
Not After : Sep 11 12:01:12 2026 GMT
Subject: CN=28d88d535014d2ec69cd73d8a4323bdf68ee7c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:eb:7e:f8:28:0a:2d:4e:40:08:06:56:e0:
11:ea:52:fd:24:82:96:d7:69:ec:59:be:21:fe:f2:
7f:19:2e:ee:ce:64:5b:db:7c:2a:0a:f1:69:f0:1d:
11:74:a6:a8:da:91:10:64:15:83:9b:cb:85:7b:7f:
59:60:23:76:f1:5a:2a:5b:1c:6e:65:11:d9:6f:cb:
87:28:7d:bc:4a:f5:16:ad:5a:89:f2:68:bb:2f:96:
d4:6f:6a:7f:30:34:e9:dd:e2:44:27:10:50:bc:f5:
36:3a:15:d6:75:fb:6f:37:d0:13:c7:7e:41:d5:68:
bf:22:29:ce:a7:73:89:cd:17:cd:2a:5b:c3:65:83:
b4:f7:5e:0e:f8:0f:88:e7:6f:0f:d6:4d:e1:00:0d:
09:91:db:44:97:55:6b:35:35:71:63:01:13:4a:b3:
83:01:37:a6:ab:2f:cf:24:88:de:91:7c:60:0d:40:
f9:03:14:ef:a6:39:14:6f:fa:cf:ce:ca:f6:d8:62:
57:22:94:fd:ad:d1:51:4c:bf:6a:4a:46:c8:98:9d:
74:dd:95:70:37:c4:f5:9c:21:83:fe:45:32:d1:1c:
85:25:60:56:2d:1b:e6:37:5d:50:12:20:b3:36:5c:
e6:ca:a7:6e:09:5b:46:67:ba:04:3b:99:a9:fe:70:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:8D:53:50:14:D2:EC:69:CD:73:D8:A4:32:3B:DF:68:EE:7C:47
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9e:9e:07:b2:62:7d:8c:54:8b:ed:7c:a8:f7:b1:43:9e:f6:
e6:6b:54:5b:bb:f5:6f:b5:8a:8f:68:b7:b2:97:2e:ce:19:6c:
b4:8d:3a:48:cc:79:17:ee:c1:40:b7:28:3b:a5:92:18:2d:ca:
09:76:c7:80:a0:f4:73:d6:cb:34:f9:73:00:c4:90:48:52:54:
36:24:69:b3:a8:95:d1:79:0d:75:1c:01:3e:2b:2e:33:82:49:
26:86:a3:48:dc:d9:79:9f:d8:4e:0e:50:c5:7b:38:0d:76:1b:
98:ee:81:97:bd:82:41:09:b7:bc:c9:ce:2c:4e:db:ef:00:8a:
b4:a8:70:35:ef:93:1e:39:d5:a4:de:97:3b:a0:29:87:82:1b:
03:bd:d1:1c:a4:c8:44:74:38:5c:64:aa:41:49:76:76:87:80:
0d:0d:e8:bf:13:87:b9:37:6f:02:11:f7:56:f6:48:eb:02:d0:
86:bf:d6:a9:c0:ea:80:61:dd:0d:ac:37:75:dd:5f:fb:1c:67:
bf:54:59:29:0f:5d:f8:f5:48:be:e7:04:61:a4:1b:6f:7a:98:
ca:7a:80:0d:44:2a:1d:ce:81:c6:a5:67:5b:31:3a:90:90:1e:
ec:76:6c:ac:fb:f8:31:c6:9e:18:29:45:b4:c2:5c:a0:67:a1:
c3:16:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:10 2026 by rpki-client