Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
File: NYzSZ8VKP8IovKHe43LZbGA3PCc.mft (raw, json)
Hash identifier: jScjeHxtGBlM94V7LeIkM1+lc17kx1nvXq0hYpO1vag=
Subject key identifier: 6C:BD:88:FF:3E:C3:35:51:21:9C:FF:4A:DE:7E:F9:48:EA:62:65:1B
Authority key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
Certificate issuer: /CN=358cd267c54a3fc228bca1dee372d96c60373c27
Certificate serial: 019F8C45D434E0BD7659057023918AD8163A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
Manifest number: 02A5
Signing time: Thu 23 Jul 2026 00:00:14 +0000
Manifest this update: Thu 23 Jul 2026 00:00:14 +0000
Manifest next update: Fri 24 Jul 2026 00:00:14 +0000
Files and hashes: 1: Jy76E1q7dDTCejXtPafJsRSES8Y.roa (hash: 1WiGvZJxKYYrQ+5QCN5Y0ow1dlNCCLa6+9MgNHjV0TQ=)
2: NYzSZ8VKP8IovKHe43LZbGA3PCc.crl (hash: HYoU5PAKAQCoB2gzAemvLrREuh+D1J8zTFlWs7vMkeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:45:d4:34:e0:bd:76:59:05:70:23:91:8a:d8:16:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358cd267c54a3fc228bca1dee372d96c60373c27
Validity
Not Before: Jul 23 00:00:14 2026 GMT
Not After : Jul 24 00:00:14 2026 GMT
Subject: CN=6cbd88ff3ec33551219cff4ade7ef948ea62651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:85:a5:07:55:e0:c4:fd:35:4d:d6:02:6e:
6d:a9:4f:3e:12:f9:73:a7:90:11:f7:13:2e:1d:03:
ea:c4:bf:b4:4b:71:cf:4a:72:3c:42:b8:3a:3d:79:
59:7c:71:81:7f:b1:3d:59:7e:a7:c4:aa:b1:53:83:
4e:94:06:bd:fa:4b:e7:a2:8b:46:82:29:54:42:c3:
9e:5d:44:63:38:ed:ae:2c:c8:04:44:58:3e:b1:c9:
57:c2:cd:fd:86:8f:61:3d:55:67:98:16:36:57:39:
f0:35:4d:1c:11:b2:83:95:1f:a0:86:f8:ad:05:4d:
6d:3d:f4:de:bf:c0:61:9e:52:ec:43:c0:15:47:67:
10:6f:7e:8f:48:24:40:0b:24:81:c4:0d:f2:6d:9c:
6a:a8:82:d1:fb:d2:cc:2a:00:b9:d5:4a:67:88:31:
d0:c4:7f:fe:13:85:fa:c8:e8:1a:e0:50:ec:e2:c8:
04:d1:26:ad:c0:6a:83:2a:08:1b:0c:88:0d:c0:0f:
cf:5d:6d:5e:fc:b0:44:85:31:d2:9a:27:d7:ba:ab:
e5:da:5e:20:23:86:2a:91:d9:f5:3e:ca:e1:ca:b5:
1f:a7:2a:e2:9e:2a:07:ae:8a:46:8a:4a:6e:07:e1:
02:30:21:f9:55:c9:8f:e1:c5:d0:e8:92:41:ef:99:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:88:FF:3E:C3:35:51:21:9C:FF:4A:DE:7E:F9:48:EA:62:65:1B
X509v3 Authority Key Identifier:
keyid:35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:34:57:bf:72:cd:f6:7d:a6:4b:1e:96:72:29:be:fc:60:ba:
82:ec:b0:6f:20:61:9d:a5:0a:06:06:13:7f:8a:85:12:97:ed:
a9:09:84:2d:a5:07:7b:9e:54:3f:1c:66:87:32:65:50:91:e7:
80:b7:85:de:e9:84:6b:26:e7:1a:79:bd:6d:5c:b2:fc:c1:0c:
02:b8:9b:15:4e:82:38:b0:04:b8:7f:5b:2b:21:69:50:23:fc:
fe:b3:9d:2a:0f:f7:d6:a6:42:60:5b:c4:92:d4:94:54:fd:be:
ce:b6:33:5a:e0:23:80:81:c7:e6:06:b5:b6:48:11:81:bf:06:
3d:18:dc:1d:47:2f:ea:52:ba:2c:ed:30:93:bd:68:ee:75:87:
cb:57:43:76:67:02:9e:ac:1f:93:0e:53:9c:13:82:2e:f0:6c:
4e:10:86:fc:f6:7b:1f:f0:85:61:0f:45:a1:01:16:49:3f:73:
dc:aa:a1:30:e8:91:de:09:9e:07:6b:48:f6:2c:00:96:1e:c0:
2f:fd:92:a8:ed:60:d8:d8:fd:0c:55:e4:8b:8a:ea:67:ff:94:
3b:cf:a9:0d:de:c2:fe:61:7f:96:07:06:bc:35:d5:4a:04:7f:
43:0a:e7:88:aa:a7:45:b7:5b:ae:fd:1c:d1:b6:98:a1:79:b6:
f1:d6:e0:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+MRdQ04L12WQVwI5GK2BY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGNkMjY3YzU0YTNmYzIyOGJjYTFkZWUzNzJkOTZjNjAz
NzNjMjcwHhcNMjYwNzIzMDAwMDE0WhcNMjYwNzI0MDAwMDE0WjAzMTEwLwYDVQQD
Eyg2Y2JkODhmZjNlYzMzNTUxMjE5Y2ZmNGFkZTdlZjk0OGVhNjI2NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTKFpQdV4MT9NU3WAm5tqU8+Evlz
p5AR9xMuHQPqxL+0S3HPSnI8Qrg6PXlZfHGBf7E9WX6nxKqxU4NOlAa9+kvnootG
gilUQsOeXURjOO2uLMgERFg+sclXws39ho9hPVVnmBY2VznwNU0cEbKDlR+ghvit
BU1tPfTev8BhnlLsQ8AVR2cQb36PSCRACySBxA3ybZxqqILR+9LMKgC51UpniDHQ
xH/+E4X6yOga4FDs4sgE0SatwGqDKggbDIgNwA/PXW1e/LBEhTHSmifXuqvl2l4g
I4Yqkdn1PsrhyrUfpyrinioHropGikpuB+ECMCH5VcmP4cXQ6JJB75l9AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy9iP8+wzVRIZz/St5++UjqYmUbMB8GA1UdIwQY
MBaAFDWM0mfFSj/CKLyh3uNy2WxgNzwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWIt
OGEyZTlhNDY4MTliLzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84NGExYjUtMWFhZC00ZWRmLWFiOWItOGEyZTlhNDY4MTli
LzEvTll6U1o4VktQOElvdktIZTQzTFpiR0EzUENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazRXv3LN
9n2mSx6Wcim+/GC6guywbyBhnaUKBgYTf4qFEpftqQmELaUHe55UPxxmhzJlUJHn
gLeF3umEaybnGnm9bVyy/MEMAribFU6COLAEuH9bKyFpUCP8/rOdKg/31qZCYFvE
ktSUVP2+zrYzWuAjgIHH5ga1tkgRgb8GPRjcHUcv6lK6LO0wk71o7nWHy1dDdmcC
nqwfkw5TnBOCLvBsThCG/PZ7H/CFYQ9FoQEWST9z3KqhMOiR3gmeB2tI9iwAlh7A
L/2SqO1g2Nj9DFXki4rqZ/+UO8+pDd7C/mF/lgcGvDXVSgR/QwrniKqnRbdbrv0c
0baYoXm28dbgfg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 03:14:43 2026 by rpki-client