Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: i1LDHgBvKbgzVm4G5j92mOtc4PvIiAr8s+BVOIg5VOI=
Subject key identifier: 33:60:3F:BE:3D:F2:71:C5:B4:BE:59:C6:3C:9E:A3:60:EC:C6:8A:5B
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019FA1167B59EB11DF2216A2B73615DF276F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 046E
Signing time: Mon 27 Jul 2026 01:00:32 +0000
Manifest this update: Mon 27 Jul 2026 01:00:32 +0000
Manifest next update: Tue 28 Jul 2026 01:00:32 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: HkE9l8dbbbWWMdWa93/YRDi1mXwDQjHSsCCPdHveSHU=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:7b:59:eb:11:df:22:16:a2:b7:36:15:df:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Jul 27 01:00:32 2026 GMT
Not After : Jul 28 01:00:32 2026 GMT
Subject: CN=33603fbe3df271c5b4be59c63c9ea360ecc68a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:36:1f:db:4c:6e:52:86:d9:0a:28:d7:26:
f5:00:7b:1c:ca:37:9f:16:7b:66:c2:f5:e0:57:20:
3f:99:a2:1a:f8:4e:f8:e1:9e:68:07:ae:81:6d:e9:
cd:97:ef:e5:82:51:d4:71:36:b7:50:27:7c:e0:e7:
e8:81:10:3a:3c:ac:f5:5f:75:1f:a7:22:43:0a:69:
34:6a:ad:ad:2f:e3:cc:e3:c5:0a:b7:57:79:6e:66:
11:a0:fa:59:22:f5:10:e8:ec:2f:c7:3c:62:b6:96:
d7:bc:46:af:0b:fa:71:ac:f6:0d:79:7a:45:ce:b6:
de:a9:44:8b:df:b7:d1:94:6c:42:ff:b2:80:79:49:
a7:17:e0:d2:7b:82:86:ee:0f:ff:d3:d4:06:71:e4:
32:d1:f3:30:94:03:13:5e:e1:8a:d4:c2:00:7b:4d:
6d:05:5a:e8:20:66:ea:b8:d3:12:82:ae:f0:06:cf:
37:ca:eb:04:7e:fd:db:c1:7d:70:58:64:87:e2:d4:
bd:bb:da:b0:2d:e1:35:57:35:52:4c:26:b3:e3:66:
bc:60:80:e4:00:5d:88:f6:f4:5c:ca:42:f3:c2:54:
57:08:fb:4d:c5:03:64:7f:19:b1:e6:9d:3b:6f:98:
da:56:c0:b7:f4:af:2d:76:08:93:c0:0d:08:dc:38:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:60:3F:BE:3D:F2:71:C5:B4:BE:59:C6:3C:9E:A3:60:EC:C6:8A:5B
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:29:ae:81:b7:ea:74:17:8c:ab:f3:83:61:00:f9:b8:36:6d:
41:50:03:ac:6a:42:53:84:ca:88:ba:b7:7c:cd:77:d0:b4:fe:
d9:98:28:ee:4c:18:31:05:3c:f6:e3:32:9a:43:7d:b5:f7:bb:
a6:2c:fd:59:6c:77:01:aa:88:e4:0f:5c:6c:67:35:f2:98:c4:
8a:3b:ab:8d:82:db:f7:22:1f:c1:db:0a:bf:10:b3:1d:29:46:
c8:8c:7e:04:fe:fe:92:ca:af:c8:2e:f0:03:a6:26:93:4b:2b:
32:8b:4a:9d:2f:7c:91:3f:02:ad:00:32:e1:21:78:8d:b5:cf:
78:2e:e1:ac:55:c6:2d:b0:bc:0d:cd:72:b9:a5:66:17:dd:0a:
01:a4:16:04:09:d7:72:63:04:b1:56:6d:c5:b8:72:1d:cc:6c:
12:26:00:44:ba:50:dc:61:cf:50:d4:23:47:06:a4:7a:7d:3f:
6e:1f:64:bc:79:4c:73:de:dd:e7:2d:5a:38:f6:5b:de:51:84:
8b:49:24:34:11:7e:38:99:fa:30:45:68:8c:d6:7d:9e:6a:23:
94:d5:77:30:cc:5a:c7:31:99:79:99:25:53:94:13:64:ba:57:
3d:60:36:d5:94:29:0e:b1:cd:c8:22:1b:bc:af:c8:08:d5:cb:
24:ac:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:48 2026 by rpki-client