Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: RjV9b7GUjLxAxsGjU7clbDJv9o3VsEwpKl6OeBxu02s=
Subject key identifier: 63:4F:C9:4E:CE:07:99:14:C6:64:E4:DF:9B:AF:09:68:C0:8F:59:A6
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 01A08EA01F38EE4E7C9108017EADD57C31C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 04E9
Signing time: Fri 11 Sep 2026 04:00:53 +0000
Manifest this update: Fri 11 Sep 2026 04:00:53 +0000
Manifest next update: Sat 12 Sep 2026 04:00:53 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: pMKvbD6jZnekhd4C2n9U25DwLezOq3epAvVwTmlUcr8=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:1f:38:ee:4e:7c:91:08:01:7e:ad:d5:7c:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Sep 11 04:00:53 2026 GMT
Not After : Sep 12 04:00:53 2026 GMT
Subject: CN=634fc94ece079914c664e4df9baf0968c08f59a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:c7:54:2b:4c:5b:f3:c3:bf:5a:77:64:d0:
38:11:98:c2:c4:9e:fa:a2:a7:a4:d6:ff:7b:35:63:
30:49:88:c2:77:3d:0b:47:02:47:ac:67:16:fb:94:
59:95:af:97:1c:fe:1f:62:97:62:f0:fb:58:b6:88:
fc:0f:87:3c:af:ad:00:c3:06:d6:2f:01:14:28:95:
60:8c:71:91:53:ef:8c:54:01:11:cc:f1:28:ba:17:
fe:9f:b3:20:c3:56:f4:14:d9:f2:3e:2f:fc:34:2c:
c8:c6:c8:ad:a2:06:af:6b:00:dc:ed:26:f7:c0:11:
68:90:fe:94:02:f7:f4:ea:04:27:35:e0:bf:de:41:
8c:bf:43:0a:92:c4:89:c0:d8:32:e9:89:22:43:5d:
bb:5c:ea:a2:22:f7:99:fa:d2:16:bb:9d:7d:fe:e7:
c1:9b:c3:aa:7e:4c:25:45:e3:5c:60:d5:51:8f:9f:
15:5a:21:4b:72:b8:c3:82:54:91:4d:05:c2:32:28:
e6:52:7f:aa:be:09:a9:49:3a:05:70:4d:37:3c:87:
58:e7:5d:0a:d8:0c:d3:22:de:df:c1:13:bd:a2:3d:
4d:7e:75:e2:6b:a9:72:7e:d2:eb:eb:6c:e1:75:07:
83:0e:34:56:8b:ed:db:73:8e:ef:71:67:a0:17:9b:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:C9:4E:CE:07:99:14:C6:64:E4:DF:9B:AF:09:68:C0:8F:59:A6
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:88:23:67:ee:0d:d4:9a:24:84:e7:dd:58:3a:0e:e1:55:92:
86:cf:a8:6b:11:0b:77:7d:05:dc:83:2c:51:5b:27:ed:41:25:
2f:27:2f:09:b8:ea:31:66:b6:44:c1:87:d3:de:50:86:01:81:
3f:cf:50:d5:29:65:31:b1:49:6a:0b:90:31:d5:fd:f1:9a:11:
d6:fb:10:4e:d5:93:88:a5:97:b5:64:08:16:a2:10:e0:13:03:
74:09:d7:26:98:ae:95:06:0c:b3:66:73:a0:42:dd:b2:fc:c3:
41:85:4b:44:a0:30:c8:eb:4f:ba:64:e1:32:27:54:c1:29:b9:
0a:ee:dc:f2:2b:df:0e:29:a2:5a:35:80:f0:09:5d:2c:23:6f:
b9:4b:fb:c3:ce:93:1b:d0:17:fa:d2:ab:88:06:c7:a7:b1:d4:
e8:b4:b0:40:b9:9e:5e:a0:dd:14:50:0f:3c:f0:49:de:8e:db:
ac:db:b3:e4:ec:2e:26:6e:9b:d5:e7:c1:8d:d8:11:ee:e1:09:
ac:72:60:ac:26:3b:43:fb:d7:e2:35:aa:6e:37:b9:6e:ec:9d:
8c:94:88:c4:4a:33:21:f6:a3:c0:88:49:83:7d:74:37:51:89:
d9:9a:9a:b7:31:e1:bc:b3:22:f6:b6:ce:75:66:fe:9c:2b:3c:
a0:72:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:34 2026 by rpki-client