Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: v7mWOjVlEfeVBz5/hrZVBpbkYXZJ31nKHP4UKdf5ki0=
Subject key identifier: 7F:64:CC:48:8A:B2:68:5F:11:54:9B:A4:3B:88:BC:55:7F:BD:B8:B2
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 01A195B241D5EE7F111DE7C5D78EC97CEB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 02EA
Signing time: Sun 01 Nov 2026 06:00:49 +0000
Manifest this update: Sun 01 Nov 2026 06:00:49 +0000
Manifest next update: Mon 02 Nov 2026 06:00:49 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: dHi+eg1vUz5edmUFUqkzuba2QXxHvcfgSbzvTuTCRMQ=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:b2:41:d5:ee:7f:11:1d:e7:c5:d7:8e:c9:7c:eb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Nov 1 06:00:49 2026 GMT
Not After : Nov 2 06:00:49 2026 GMT
Subject: CN=7f64cc488ab2685f11549ba43b88bc557fbdb8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:cb:72:d4:74:a4:d3:5b:59:1a:06:d6:bc:
6a:0a:30:ef:2a:02:b9:cc:61:1a:9c:ac:ff:3f:3a:
fc:47:87:45:ff:67:46:e8:d9:d1:f5:ba:09:62:6d:
7e:f3:b2:4c:6c:02:46:05:51:8f:d8:01:e7:cc:75:
34:46:94:21:71:a8:c1:bb:d7:c6:3d:98:f6:53:2f:
3e:33:99:d0:83:47:74:cb:1d:e5:de:7e:78:a7:12:
99:16:ff:55:4c:20:e4:c7:15:d9:0e:0b:c8:48:5e:
c6:4a:bb:fb:59:0f:24:12:0e:1b:c0:27:9e:ef:ec:
52:1a:e0:3e:dd:86:4a:26:aa:ee:f2:3c:19:8a:14:
6f:9e:6f:47:7f:5f:8a:08:65:c1:36:8f:60:8c:a2:
3f:f4:f2:7b:3f:94:82:65:81:90:72:3a:cc:92:44:
e7:53:1c:d1:f4:a3:de:32:ba:af:6b:69:24:cc:60:
73:e2:58:42:bb:1d:41:1a:af:84:56:c4:a1:1c:d6:
e8:5d:1a:46:fd:f0:cd:55:ba:dd:34:1a:92:be:87:
2d:bf:36:48:8e:9c:d4:1b:09:c1:24:50:13:6c:50:
6d:a5:c3:21:57:4c:4e:98:a9:e9:61:85:90:b0:58:
3e:17:e0:7b:df:e0:1e:c9:ce:8c:ca:1c:ec:7a:c9:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:64:CC:48:8A:B2:68:5F:11:54:9B:A4:3B:88:BC:55:7F:BD:B8:B2
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8d:00:9f:eb:a1:8e:c7:77:ed:8d:78:e9:75:10:58:4c:30:
69:a9:1a:12:d4:fd:c1:fc:14:99:85:0a:ad:32:88:c9:2d:d3:
aa:a8:e9:a7:83:06:f9:c0:fe:4e:2e:de:70:49:68:70:39:c1:
5c:df:b1:f9:81:6d:14:ea:e9:28:81:1f:02:6e:fe:fd:f3:1c:
58:03:bc:66:31:b0:53:76:47:5c:04:a9:a8:2c:92:17:1d:e6:
ae:7e:e5:6a:fa:25:a2:7f:5a:47:13:5b:23:5a:fa:18:07:38:
95:3b:91:10:fc:66:4f:4f:32:61:0e:94:82:e1:a0:3a:16:43:
64:a6:07:d3:17:c5:1b:da:46:fa:db:d3:02:6b:34:71:ea:91:
15:49:c9:fa:35:d9:43:fd:b4:2d:8c:35:37:94:a2:7e:96:a4:
4a:43:eb:83:6a:5f:ab:4d:0c:80:60:6d:15:d2:50:5a:5d:8d:
e9:60:a3:a3:b2:c3:02:43:8d:7c:fe:11:b8:37:24:c0:42:0a:
54:31:13:e4:17:8f:2a:f3:b5:41:26:6e:04:c9:02:6a:5e:2d:
94:67:9b:9b:67:05:b8:eb:38:7e:5a:43:7a:75:e0:70:dc:90:
53:63:e0:5d:b6:72:28:45:67:74:ba:bd:61:23:d4:93:ab:15:
6a:c3:dc:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGVskHV7n8RHefF147JfOs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjM3M2U3YTg0NDA2Y2VhYjVmN2FhOTE1MjM0YzkzZDhi
ODhlOTEwHhcNMjYxMTAxMDYwMDQ5WhcNMjYxMTAyMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZjY0Y2M0ODhhYjI2ODVmMTE1NDliYTQzYjg4YmM1NTdmYmRiOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzLctR0pNNbWRoG1rxqCjDvKgK5
zGEanKz/Pzr8R4dF/2dG6NnR9boJYm1+87JMbAJGBVGP2AHnzHU0RpQhcajBu9fG
PZj2Uy8+M5nQg0d0yx3l3n54pxKZFv9VTCDkxxXZDgvISF7GSrv7WQ8kEg4bwCee
7+xSGuA+3YZKJqru8jwZihRvnm9Hf1+KCGXBNo9gjKI/9PJ7P5SCZYGQcjrMkkTn
UxzR9KPeMrqva2kkzGBz4lhCux1BGq+EVsShHNboXRpG/fDNVbrdNBqSvoctvzZI
jpzUGwnBJFATbFBtpcMhV0xOmKnpYYWQsFg+F+B73+Aeyc6Myhzsesl/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9kzEiKsmhfEVSbpDuIvFV/vbiyMB8GA1UdIwQY
MBaAFDcjc+eoRAbOq196qRUjTJPYuI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYt
N2ExZWM1ZDQ5ZDMzLzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iM2E0YzYtMGNlMS00OTU0LWI5MzYtN2ExZWM1ZDQ5ZDMz
LzEvTnlOejU2aEVCczZyWDNxcEZTTk1rOWk0anBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkI0An+uh
jsd37Y146XUQWEwwaakaEtT9wfwUmYUKrTKIyS3Tqqjpp4MG+cD+Ti7ecElocDnB
XN+x+YFtFOrpKIEfAm7+/fMcWAO8ZjGwU3ZHXASpqCySFx3mrn7lavolon9aRxNb
I1r6GAc4lTuREPxmT08yYQ6UguGgOhZDZKYH0xfFG9pG+tvTAms0ceqRFUnJ+jXZ
Q/20LYw1N5SifpakSkPrg2pfq00MgGBtFdJQWl2N6WCjo7LDAkONfP4RuDckwEIK
VDET5BePKvO1QSZuBMkCal4tlGebm2cFuOs4flpDenXgcNyQU2PgXbZyKEVndLq9
YSPUk6sVasPcdw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:53 2026 by rpki-client