Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: xqNXnlz6Lj4aF0AAvMGIwzi4zqhUA5gKx+L/5ARegWg=
Subject key identifier: 75:11:5A:91:FC:70:55:9F:CB:DA:B0:33:FA:3F:2E:8F:1A:3C:14:FA
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019F129C21E6BE695C0A8FDB4C798B55EF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 019D
Signing time: Mon 29 Jun 2026 09:00:49 +0000
Manifest this update: Mon 29 Jun 2026 09:00:49 +0000
Manifest next update: Tue 30 Jun 2026 09:00:49 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: smKWJgzxcEgMDMFuRqlpXH2fGHhh9BTujUgS/isLAM0=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:21:e6:be:69:5c:0a:8f:db:4c:79:8b:55:ef:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jun 29 09:00:49 2026 GMT
Not After : Jun 30 09:00:49 2026 GMT
Subject: CN=75115a91fc70559fcbdab033fa3f2e8f1a3c14fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:a4:ac:3d:ef:94:49:3d:9a:95:fc:bf:a8:
18:32:c9:2d:1d:56:e8:37:99:82:56:b7:9b:c5:32:
43:7d:f8:8f:68:f4:8d:06:be:72:1c:e8:28:34:32:
a6:0d:3c:a5:5f:bb:9c:02:82:18:31:3b:2f:d3:1c:
d9:56:ef:07:80:6a:bb:23:98:35:59:a6:18:5c:f9:
5c:d2:75:45:9b:aa:76:81:a2:34:12:41:2e:e4:bc:
28:d8:f8:53:04:2c:99:cf:f0:82:a0:bf:6c:ba:25:
60:a4:53:15:6d:42:73:d1:e1:37:01:9f:b4:86:d9:
03:42:2c:8a:d0:34:62:4b:ad:a2:c8:52:c1:73:d5:
38:49:49:f3:7a:a0:ba:1e:03:98:03:5a:82:a6:d6:
c2:cd:ff:b5:e1:f2:51:27:ad:7c:2d:20:6c:a4:0d:
8c:e8:fc:ce:49:ea:40:74:a6:28:f4:76:7f:fe:f4:
3a:58:75:2b:b1:58:a0:8a:83:0f:b5:2f:c3:e6:e9:
4b:e8:1e:31:c9:3c:74:34:30:40:c2:08:49:95:f6:
2b:89:19:22:92:24:25:93:0f:9e:35:c4:1f:fa:67:
af:d7:8e:c3:42:b5:38:ce:86:30:32:ce:5a:f1:54:
12:8f:84:95:6e:a0:24:12:e6:0e:1c:f6:ac:a3:ae:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:5A:91:FC:70:55:9F:CB:DA:B0:33:FA:3F:2E:8F:1A:3C:14:FA
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e8:01:54:ad:ac:47:15:c6:52:3f:6e:84:44:f8:ed:69:f1:
7b:ad:87:54:80:ca:50:e6:72:44:52:c6:3b:7f:23:bb:2d:78:
4c:1c:c0:54:fd:ef:39:91:a7:ad:fc:7b:38:87:72:ae:a1:2a:
2a:50:1a:0c:b9:aa:50:99:30:44:b7:ba:5a:b1:6b:37:cb:bf:
c8:d4:22:79:56:21:f1:8f:cc:e0:21:e9:f1:f6:5a:42:b6:5b:
82:86:c9:1f:25:20:44:60:bf:fd:ce:7b:74:5b:c8:49:65:c5:
47:db:14:ca:03:29:d1:0c:9d:0d:a0:c5:1f:2e:3e:2e:1a:13:
27:77:ff:77:8f:39:e8:9b:49:3d:41:f0:4f:0a:d4:26:4d:e0:
bd:ff:f8:b6:72:b1:c0:90:d8:d7:d1:ad:5f:6f:2e:42:85:7f:
25:8c:14:fe:e5:e1:f0:f0:7d:b0:ed:93:f4:73:f6:49:0a:ba:
9e:aa:4d:72:53:ae:35:cf:3b:d1:58:b4:3d:e3:dd:28:28:fd:
44:71:1c:de:81:13:f0:53:ef:f4:b2:7f:8d:05:c9:9d:e0:aa:
58:36:e6:43:07:74:92:5b:de:d3:e9:69:11:23:fd:bf:5d:2b:
e9:ec:03:24:a6:3c:33:ce:3c:61:89:7c:f5:0c:dc:d9:40:f1:
91:e6:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:07 2026 by rpki-client