Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: B/nUr5y8ng0Z8wM15vzPonl7GFVdYDSJr18jkNedPVc=
Subject key identifier: 4E:22:B2:55:81:B3:01:3C:EA:83:1A:12:4B:A3:B3:26:0D:85:98:FE
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 019EFCF24C3BB42B16A5B65045193CDC9755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0FBB
Signing time: Thu 25 Jun 2026 04:03:18 +0000
Manifest this update: Thu 25 Jun 2026 04:03:18 +0000
Manifest next update: Fri 26 Jun 2026 04:03:18 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: thZsNeR2V3o/X4wjLhJWQKLVL4hBZElit11ORU7ZHXI=)
2: aGJMNViunI3sW8LPBTbWuO2JMU4.asa (hash: IYFle/3hjx48l13pLg/VjqdcHmOV1LkxhQSSbNvNDQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:4c:3b:b4:2b:16:a5:b6:50:45:19:3c:dc:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Jun 25 04:03:18 2026 GMT
Not After : Jun 26 04:03:18 2026 GMT
Subject: CN=4e22b25581b3013cea831a124ba3b3260d8598fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:ef:40:20:98:93:3f:19:c0:b4:05:67:df:
68:d6:30:7f:42:15:7b:06:61:8f:ce:e2:58:31:45:
d2:60:94:e3:3d:ba:84:07:eb:72:d9:b6:3e:28:03:
c7:21:50:75:fb:3b:4f:a8:82:7e:2c:70:85:d9:d6:
31:d9:07:22:0e:47:12:4b:b6:30:06:22:39:f1:02:
17:5e:ab:84:02:06:0d:05:2f:e1:fb:84:0d:e8:86:
2f:76:73:dd:24:ab:9a:3f:c5:ae:12:1f:0d:8d:be:
8f:c1:f5:e0:80:16:4e:d5:65:9e:2e:03:ce:30:91:
24:d0:8a:c2:f0:64:e5:83:7c:d1:8d:e5:20:d1:64:
81:6e:36:75:28:5e:03:04:3f:9a:70:e2:c4:24:d4:
c5:5b:77:91:be:63:ec:e9:90:d3:c0:3f:36:76:7f:
52:f5:25:d0:3a:21:6c:20:31:b4:41:0d:fe:76:a7:
eb:8d:12:4f:bd:9b:e6:d9:7e:39:b6:30:31:42:20:
ff:e5:c4:cc:be:ca:27:0d:67:8b:34:a1:48:01:3f:
11:a0:ae:4b:28:4c:f3:d1:6c:c7:41:41:55:71:e6:
e4:69:01:77:75:fa:b4:f1:73:9a:37:1c:32:10:af:
b6:6c:bc:e1:dd:96:8f:e1:3d:ff:8a:47:58:bd:37:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:B2:55:81:B3:01:3C:EA:83:1A:12:4B:A3:B3:26:0D:85:98:FE
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:a0:00:ea:8d:05:9d:27:04:d6:f6:1b:dc:e6:9b:23:f1:
84:1c:1d:2a:d2:aa:1f:a5:9e:2a:90:f2:07:07:43:35:b8:98:
19:be:33:67:f6:fb:5e:4c:ad:fd:ae:f5:63:38:78:fa:8d:70:
ed:8b:b2:93:76:de:8f:8d:2f:6f:f2:db:ce:e2:16:f4:bf:57:
20:cb:79:2f:8a:6f:df:85:46:61:73:16:71:17:eb:41:83:ba:
3e:59:58:16:e4:ee:c0:73:41:65:ef:7e:ea:81:5f:72:75:1c:
29:e8:6d:95:b8:aa:0d:63:0e:84:8b:51:52:fd:63:71:40:1f:
4d:c7:52:4d:88:6e:a5:c3:99:8b:2c:33:6a:8e:9c:69:13:fe:
a4:c2:5e:0f:85:ed:22:b9:0c:52:6b:55:48:ed:3e:1e:ac:40:
da:bd:c1:16:47:b2:03:99:80:1c:21:9a:7b:8f:43:66:44:49:
82:5f:88:ac:01:1e:ec:f7:12:14:46:ff:0d:a0:2b:a6:c8:87:
a6:8c:09:d4:13:65:58:e6:3f:cd:aa:2d:07:ac:70:26:a9:e9:
40:e2:da:72:dd:c6:a6:1b:b7:98:60:45:95:43:25:a0:bf:e3:
23:b4:03:28:f5:1f:5d:7c:5a:e0:5a:26:6a:02:e6:a1:17:09:
ed:3e:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:16 2026 by rpki-client