Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: LKEzTcsDL7ZD0wwLwY7tJNCH/71e/X/rg/7jZB8QgtM=
Subject key identifier: A6:FE:B3:41:BB:C7:BD:C1:78:2F:D8:AC:B8:DD:4F:8B:0A:92:AC:2C
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019F10AE62040B7176498191F21C84C59049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 019C
Signing time: Mon 29 Jun 2026 00:01:31 +0000
Manifest this update: Mon 29 Jun 2026 00:01:31 +0000
Manifest next update: Tue 30 Jun 2026 00:01:31 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: zncKyoSgoum+CBi7VUeqBjqvD1wSGj8/TDcXKgs/w0c=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ae:62:04:0b:71:76:49:81:91:f2:1c:84:c5:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: Jun 29 00:01:31 2026 GMT
Not After : Jun 30 00:01:31 2026 GMT
Subject: CN=a6feb341bbc7bdc1782fd8acb8dd4f8b0a92ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:41:8e:a5:3a:62:f3:22:41:29:2e:27:f9:
f6:0b:c2:3f:b9:29:90:4a:d7:2f:1c:6d:3e:ae:77:
e2:d6:b5:16:fe:78:54:5c:26:37:6f:22:36:0c:b5:
87:b7:24:e2:b8:c0:88:c8:95:d9:27:26:26:75:99:
28:d3:3c:d7:2e:6b:73:dd:1e:1c:ed:55:8e:d7:80:
9d:fd:e0:c3:74:70:9a:c4:d6:8d:ce:8a:e4:50:38:
72:36:df:ae:98:6e:8c:9d:af:cd:44:41:97:5b:c2:
8f:c8:b6:90:8d:8a:2d:59:bc:b8:d8:62:b5:3c:47:
7a:45:d5:3a:bf:43:55:71:7c:f2:af:38:2d:e3:3b:
b6:0a:01:2b:5d:a5:6e:01:f6:de:7e:f8:04:c6:b9:
86:c5:77:73:46:b2:22:c7:c4:c3:c0:3f:43:57:f9:
10:21:20:20:b3:be:70:37:3c:e6:64:40:6e:19:d9:
0b:f6:b5:b4:96:f2:a2:22:5f:7b:3e:c5:2f:8e:ad:
e3:57:28:68:7f:d6:f1:5e:4d:b4:3a:0b:64:72:41:
b8:06:22:26:3b:f8:d9:7d:79:3c:b9:3f:d5:1d:0c:
12:6a:a3:ad:c8:d0:e3:ee:8e:f8:77:96:b4:64:80:
71:b2:93:5e:b1:70:b3:72:17:bc:76:a4:5c:f5:56:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:B3:41:BB:C7:BD:C1:78:2F:D8:AC:B8:DD:4F:8B:0A:92:AC:2C
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:6d:54:4e:4c:62:cb:e3:2f:7d:f5:9a:78:4e:ed:2f:32:
62:b8:ae:9a:f6:bb:cb:3b:ca:35:01:28:8c:82:ef:7c:b5:64:
95:bd:46:ce:b4:2d:fe:e6:ba:7b:81:65:ff:2b:cf:c9:0a:06:
bd:c0:56:02:ea:c8:ef:89:2b:82:a6:19:a0:39:fe:2a:5a:3a:
5e:a3:96:86:b0:80:65:47:1d:17:ba:e3:05:f7:8a:39:a7:38:
35:b1:ea:85:80:4d:db:f4:75:d0:27:bc:4a:c6:87:f4:45:5c:
75:1c:fa:98:ee:f6:7d:e4:94:90:06:62:70:ed:2a:89:46:44:
c2:e1:ed:96:c8:06:9d:fc:b6:cc:82:2b:e0:bf:2f:71:61:40:
ff:77:d9:6b:1f:76:f3:8b:44:e3:0c:18:8d:cf:08:62:a4:57:
6c:ac:84:73:d1:7e:1d:dc:9f:84:47:79:11:19:41:ad:f6:54:
7e:0a:68:bd:94:ad:13:b1:a1:ed:e4:4e:b1:f9:38:f3:a7:b5:
01:10:5f:6f:23:5f:bd:fa:32:6c:00:a3:d0:62:36:63:34:fe:
83:0a:45:5c:c1:53:38:62:db:60:9f:49:c7:bb:6f:c1:b4:8d:
5f:64:37:88:f6:07:4e:3c:58:4d:25:34:43:96:53:b4:2e:27:
e1:cc:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:39 2026 by rpki-client