Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: ApVmUa08HIo5Y4VSbnNV+0A4IoWS8N6JtkZiBfZi1gg=
Subject key identifier: 9D:7C:8D:01:1F:B6:EA:61:8D:1B:8B:28:BE:F9:0F:F5:71:83:4B:70
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019D37898255004D39649340DCF452A7957A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: 6LGUf0VEtE5xXSHXFolSCKIdOSM1jaDrpP9rGkPn61A=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:82:55:00:4d:39:64:93:40:dc:f4:52:a7:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=9d7c8d011fb6ea618d1b8b28bef90ff571834b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:2d:e6:77:97:de:86:fb:a8:f6:4e:36:30:
0c:5c:1a:0a:80:19:cf:49:21:c9:b0:c6:7a:49:51:
a1:b4:c3:59:b7:e0:17:e6:f5:13:4e:fc:38:e1:c4:
c4:e7:75:e3:3c:98:0d:c4:ad:a8:ea:b1:5b:1e:1a:
1f:3d:e8:34:aa:70:0f:43:ca:2a:ac:d4:58:98:72:
d7:18:5b:f7:aa:5f:86:86:c7:c7:92:4d:e3:b4:35:
67:a1:78:cd:66:91:d4:30:af:60:de:c0:5e:f7:ba:
d8:e6:f0:fd:19:c8:a1:62:ab:0a:a9:dd:51:28:90:
38:60:38:1c:c4:97:33:f1:3f:0d:8e:46:52:2a:81:
56:43:19:40:e7:f7:c6:be:35:b9:8b:e6:08:3d:9b:
e3:95:3f:70:0b:7c:78:ee:69:ed:34:da:ef:af:fb:
aa:5b:66:0b:fb:7b:33:16:04:b8:c8:3a:ce:fc:8e:
75:86:d4:bc:39:8b:61:38:3f:f8:38:46:d4:d8:7e:
36:81:2c:cd:02:66:bd:2e:a1:1b:67:bc:6b:81:6e:
28:c2:e5:9c:82:2d:64:8c:09:e1:74:6e:94:cf:fd:
90:d1:ca:66:48:31:fe:9d:04:fe:92:f9:42:66:4f:
2c:89:0a:80:39:a6:5b:68:45:64:d7:cb:0f:78:d8:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:8D:01:1F:B6:EA:61:8D:1B:8B:28:BE:F9:0F:F5:71:83:4B:70
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:a5:f4:b9:99:8f:74:c8:1f:9d:6f:8c:84:25:c1:0e:bd:
ec:69:86:86:d2:f1:af:81:2b:e4:94:75:39:a1:c6:03:03:42:
3a:8d:32:96:d1:bd:a7:83:11:ed:a8:0a:27:71:dc:b8:c0:04:
7e:ec:f6:52:ef:a4:6a:46:cb:93:af:c6:bf:f3:7d:61:b7:34:
bb:7b:d0:b8:54:70:eb:64:52:59:23:7e:d7:97:06:8a:b0:6a:
7d:41:e5:e7:12:a5:67:12:51:34:72:0b:70:5c:44:eb:ab:ab:
ed:d6:97:f8:8b:e7:6b:07:c5:8b:5b:71:da:a9:f4:ec:ec:77:
75:1c:26:e5:8f:d6:5f:be:88:39:a7:6e:fd:17:9a:2a:da:5d:
6e:c9:f2:c5:01:ed:db:e0:de:98:1a:fc:21:0e:9d:99:90:4f:
82:71:b8:f3:a2:a1:a6:54:f9:8c:79:86:85:0c:be:50:1b:a6:
5b:39:3d:58:3c:0b:3d:cc:da:d1:1d:dd:60:29:08:7a:8a:49:
25:16:8a:fe:3a:ce:db:df:bb:f6:2d:61:a1:a6:06:85:59:c6:
89:cf:f0:a9:0c:5d:f9:be:4d:51:f2:37:70:14:eb:83:c9:1a:
a3:59:38:c9:7c:8f:5e:0e:5f:15:73:ed:3d:62:9a:f0:e5:77:
a7:b0:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:01 2026 by rpki-client