Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: aWZlDkt5syc+6kg3ZE9gQd9htx2TbW+Kqz1Ylb1Tvx0=
Subject key identifier: 23:81:78:6A:D4:6F:1E:09:1D:69:3D:D2:7B:A4:5F:3C:FD:30:3F:99
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019EB769FE4D36DA5CD6C0DA06765DB1D0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 03F5
Signing time: Thu 11 Jun 2026 16:00:37 +0000
Manifest this update: Thu 11 Jun 2026 16:00:37 +0000
Manifest next update: Fri 12 Jun 2026 16:00:37 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: zklrwpDNLDk5KHdlNA8P+c/jRAa8VuazUz8OOsWRPsA=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:69:fe:4d:36:da:5c:d6:c0:da:06:76:5d:b1:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Jun 11 16:00:37 2026 GMT
Not After : Jun 12 16:00:37 2026 GMT
Subject: CN=2381786ad46f1e091d693dd27ba45f3cfd303f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:ed:89:4b:aa:00:3e:88:f0:58:43:c0:7a:
34:e4:73:45:0a:fc:4c:14:9c:c3:89:e9:9e:59:1e:
39:de:80:1f:db:81:68:09:56:34:5f:ad:90:7c:c6:
db:03:2c:2b:0e:f9:0f:61:12:a4:a4:4b:0a:5a:d2:
3c:c7:69:32:b9:cd:b0:fb:b9:45:e4:02:55:cd:8d:
52:6b:6d:9b:94:65:bb:45:15:f0:58:2b:d5:61:8f:
17:2f:23:1d:b8:00:de:cf:99:ed:96:b2:03:2c:db:
35:9f:9c:cd:6c:1c:9b:28:23:b2:ea:01:23:03:49:
d8:d1:f6:e7:5c:bc:99:0e:1a:4e:7f:10:71:7f:2f:
47:3b:20:af:2f:7f:57:97:e1:a8:30:f7:5e:ed:e9:
69:07:2e:aa:ce:b3:23:11:0c:76:f9:1e:91:c9:8f:
ef:d7:14:5a:ec:85:18:92:99:36:53:70:0d:75:b5:
23:be:f6:e6:9e:c8:a6:17:7c:c3:5b:a9:05:b9:94:
55:da:aa:7d:af:e8:e0:6d:ed:51:74:7f:dc:c1:d3:
24:3f:6c:7e:4e:2e:1a:9d:ed:b6:a1:c1:7a:27:e2:
75:b8:5f:ae:3d:76:91:3c:56:57:17:55:9d:07:27:
6e:dc:2e:c6:d7:78:23:4f:cf:ef:b0:e4:ba:29:ae:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:78:6A:D4:6F:1E:09:1D:69:3D:D2:7B:A4:5F:3C:FD:30:3F:99
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:45:3c:40:52:63:13:86:f4:94:fc:d0:9f:73:70:a4:f8:7f:
9a:91:f1:fb:56:a5:1e:3c:c2:bd:68:f0:22:d0:c4:78:57:ae:
5d:fd:ea:df:77:c1:fb:18:f5:eb:84:b5:53:5b:49:09:88:47:
4d:f5:e1:6e:15:30:ee:4c:de:a9:f8:a7:71:6f:93:f9:0a:0b:
b9:9c:87:79:01:7c:5d:ea:7d:a5:fc:6a:b1:61:da:9b:cb:8f:
98:8c:65:17:cd:82:0d:ed:26:60:bc:55:e1:a0:2f:7f:54:44:
36:ae:98:92:a0:f6:4b:31:4d:ae:23:44:0d:1c:a1:18:0f:6e:
7f:40:98:38:d8:15:c8:30:fd:f7:34:55:dc:aa:59:54:c9:14:
a7:9a:ea:dd:ba:b3:d9:3c:71:54:0b:e6:a9:0e:e6:56:b8:79:
ec:0b:01:85:95:70:72:cd:6b:d3:9a:24:8a:90:7b:26:1e:d5:
1e:cd:f8:cd:d6:c8:e5:1b:f7:39:92:d9:77:41:4d:56:ec:fc:
e4:12:e3:3d:26:60:d8:bd:c9:27:15:20:43:c1:64:85:52:33:
2d:19:6a:17:1d:6e:ff:d0:71:1e:ee:e6:da:df:64:ab:a6:49:
f5:68:6b:84:a1:b4:a0:ba:9c:55:52:9d:ab:f0:c0:e1:32:a9:
e0:8f:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:09 2026 by rpki-client