Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: YjLLJzZ3UQk5eOIgEkMpMJKU5nJmnbF0gEJtHYaxqDY=
Subject key identifier: CC:BB:A6:DF:88:D1:A1:5A:C3:62:C2:23:41:ED:F7:D2:43:78:6D:CE
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 01A03826F6A3BF64D8CF36F3CDDDFD2AA5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0235
Signing time: Tue 25 Aug 2026 09:01:12 +0000
Manifest this update: Tue 25 Aug 2026 09:01:12 +0000
Manifest next update: Wed 26 Aug 2026 09:01:12 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: EOvI7tBuboxtv/rohqhLoJksOe424DwcxY91HpcaDFw=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:26:f6:a3:bf:64:d8:cf:36:f3:cd:dd:fd:2a:a5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Aug 25 09:01:12 2026 GMT
Not After : Aug 26 09:01:12 2026 GMT
Subject: CN=ccbba6df88d1a15ac362c22341edf7d243786dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:c3:4b:81:10:4a:2f:12:b7:93:09:ff:5d:
70:84:bd:85:e6:b4:72:49:1b:06:0c:16:eb:e2:5f:
a9:a6:ad:d7:74:d9:6b:41:24:ac:c5:f0:64:3e:e0:
86:bc:b0:90:71:bd:80:ad:27:5a:5f:21:1f:98:3b:
e7:63:9b:1e:94:3b:ec:35:54:c6:d0:a3:a7:b9:be:
7a:c4:57:63:02:64:45:7d:6f:c0:37:8c:f2:a7:46:
5f:27:75:c0:c4:58:f9:df:53:31:e2:52:a6:1a:f7:
97:b2:36:be:bf:ac:29:9a:35:2b:f1:fe:fe:cd:c2:
43:02:4a:be:0f:a7:f1:f0:1b:20:1c:16:16:83:04:
13:82:8e:d7:64:22:28:29:9a:a3:d9:b8:f7:f8:8c:
99:72:f4:b6:f4:4e:c1:d4:a1:54:94:4a:8a:bc:76:
00:f4:1e:05:fd:21:7b:89:57:44:02:55:77:62:2e:
fa:38:d0:d1:03:d5:4d:db:b7:f2:d6:5a:82:4f:0a:
43:13:67:dc:32:06:ad:30:bf:32:e8:a0:be:71:b8:
d4:11:d6:7a:e1:30:4a:cd:1d:d3:07:e1:e8:2b:75:
af:f3:a6:ad:83:15:44:0b:e2:ac:b6:f9:12:bd:a1:
19:ab:98:47:39:ec:44:a3:09:f3:2a:7b:42:5b:7c:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:A6:DF:88:D1:A1:5A:C3:62:C2:23:41:ED:F7:D2:43:78:6D:CE
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:01:60:fe:75:97:44:92:21:37:d1:41:45:46:c2:bc:77:f2:
f6:17:c1:55:5b:b7:81:6f:9b:9e:45:c9:2a:12:67:41:19:07:
a8:aa:a7:a2:14:5f:53:f9:2c:38:21:3b:5b:5c:33:58:f4:c8:
22:24:b6:65:17:70:ee:65:13:c8:e3:95:37:9d:68:76:6a:45:
ee:77:72:63:64:8c:9a:89:83:83:95:79:e5:2c:ae:58:97:6b:
9f:82:20:a6:d7:47:9b:5d:fe:4c:2b:1f:93:b5:26:3f:13:27:
0b:3b:8b:46:e5:be:0a:e4:1b:b6:15:96:71:64:be:13:61:fa:
51:97:74:31:25:99:41:de:a1:e9:f6:90:13:76:59:0e:32:aa:
6d:d0:0b:48:d5:97:e3:b0:c7:b9:29:f5:e1:87:3f:90:ee:1e:
fa:7c:12:6c:c0:4f:c8:b8:9f:5d:8f:db:19:82:df:a1:a8:39:
72:bd:42:b5:a3:9f:82:96:a1:7d:1a:cf:c6:6c:0c:9b:9e:f5:
17:ce:e3:10:35:88:ac:c5:dd:c9:cd:e4:af:92:45:a4:15:63:
62:f4:96:d4:67:61:e2:e8:be:28:c1:1c:d2:92:5b:36:8a:5e:
6f:f9:a8:de:c0:b3:55:3f:8a:d8:52:eb:17:0a:6e:d5:5c:3c:
df:15:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:16:53 2026 by rpki-client