Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
File: NyNz56hEBs6rX3qpFSNMk9i4jpE.mft (raw, json)
Hash identifier: uKtj9OAFz9VRVwFv5bLu1dzwJUXCpekdhbw0QWbhtzo=
Subject key identifier: C0:64:35:62:2A:40:C5:36:90:E2:F5:E8:60:3B:BA:F2:41:AA:72:04
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Certificate issuer: /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial: 019E28EF6BAD8C818C8028322CEEBA4C07D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
Manifest number: 0124
Signing time: Fri 15 May 2026 00:00:39 +0000
Manifest this update: Fri 15 May 2026 00:00:39 +0000
Manifest next update: Sat 16 May 2026 00:00:39 +0000
Files and hashes: 1: NyNz56hEBs6rX3qpFSNMk9i4jpE.crl (hash: ou68eEwdUu/gji/2cA6C99GEYA0m8BF15bY+679bAEE=)
2: QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (hash: LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=)
3: YOZiLqxYmdNuVnzpSqxFuidFjBQ.roa (hash: 3V7dqW0Rqoc67/QmVqMT/9D1/MytMCI05ujC2BWVeKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:6b:ad:8c:81:8c:80:28:32:2c:ee:ba:4c:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Validity
Not Before: May 15 00:00:39 2026 GMT
Not After : May 16 00:00:39 2026 GMT
Subject: CN=c06435622a40c53690e2f5e8603bbaf241aa7204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:70:cd:22:79:e6:05:46:51:ed:fd:21:cd:
dc:86:27:3c:f9:13:2d:e9:8e:a3:26:9d:da:1c:72:
81:a6:5d:fc:09:d1:da:60:e4:42:86:a1:88:27:74:
03:81:37:97:5c:b1:e3:7d:84:32:04:61:b3:c4:35:
3f:a3:12:e2:6a:f4:96:b0:30:f3:f5:53:49:87:89:
13:1e:53:42:7f:9c:7c:d7:ff:45:3d:52:de:07:ec:
e1:58:01:2c:0d:78:33:6e:20:29:e9:aa:97:e6:81:
bb:36:93:7c:ce:b1:00:4e:07:75:6b:55:9a:ae:5e:
d6:d0:96:ff:41:f7:0e:bf:08:a6:b0:11:9c:eb:93:
0c:f1:08:29:73:76:29:2c:cd:8a:4f:e5:0d:d6:9d:
f8:e1:e4:7a:ff:1d:74:37:c7:77:8e:32:07:de:fe:
46:71:18:f0:ab:67:56:e5:0a:cf:c9:2a:00:f8:f0:
99:b3:e3:0a:be:28:d4:ef:77:bc:8a:fe:de:27:c2:
0f:a1:68:f9:aa:40:c1:3f:bd:5c:9e:7f:e3:06:7b:
7b:c9:85:f3:c5:a9:8f:e6:f0:6a:30:dd:66:2f:1f:
b1:3b:91:ff:e9:f6:67:11:9b:13:b5:ef:a1:40:26:
21:95:2f:3e:05:45:48:b0:1c:00:66:b0:52:d9:c1:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:35:62:2A:40:C5:36:90:E2:F5:E8:60:3B:BA:F2:41:AA:72:04
X509v3 Authority Key Identifier:
keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3e:80:20:2d:40:e6:84:08:71:f2:91:a5:0a:29:b5:94:a5:
ad:ec:99:db:c7:9f:73:e5:65:c7:55:da:c7:e4:2c:af:f9:6b:
49:53:f9:0e:70:46:69:00:ef:9e:8d:e6:b7:90:a7:f4:0b:05:
4b:13:92:66:63:35:1c:96:3a:95:99:22:ed:48:6e:82:1c:1e:
74:3f:88:29:e8:05:2f:ee:db:05:d2:b2:fc:09:f3:f6:14:12:
e6:ca:cd:ed:38:13:24:17:1f:25:b4:2e:10:cb:b3:ac:76:90:
5d:30:b6:6c:2f:3d:06:a6:a7:86:78:a4:d1:fe:61:58:d6:63:
72:04:bc:c9:6d:d3:24:a1:0b:f0:06:73:c6:58:e5:f1:c9:f0:
8b:68:e8:5a:c3:d5:f3:e7:2a:d2:69:56:eb:92:78:80:14:7e:
90:6d:67:d6:0e:f2:94:6f:ff:92:4c:8e:e8:b4:99:61:04:66:
68:9e:e1:cf:a5:1a:d9:0b:90:dd:81:a1:2f:98:2e:a0:24:7f:
de:f9:69:14:b3:01:1d:51:aa:ce:8d:08:3b:9c:1b:9c:43:94:
76:aa:31:39:fb:41:08:f1:a8:96:c9:e1:0c:81:9e:7d:0d:1f:
66:c4:4b:75:2f:18:39:a6:3f:24:a7:1e:39:f9:30:8d:d9:92:
9e:c2:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:14 2026 by rpki-client