Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
File: NyQY8ATVhPL-JshCNeZrtrKUJxg.mft (raw, json)
Hash identifier: 6lZPM/Wt19TPcTl61VneHe/Q6qYK34yzlC5aeZN7zwQ=
Subject key identifier: 28:18:A1:85:55:BE:22:5B:09:1D:5E:3C:AE:4B:9D:A9:25:A9:D7:B0
Authority key identifier: 37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
Certificate issuer: /CN=372418f004d584f2fe26c84235e66bb6b2942718
Certificate serial: 019D390A4421697DBEA99FD5CEE82838DF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
Manifest number: 032F
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: NyQY8ATVhPL-JshCNeZrtrKUJxg.crl (hash: JVleMeiok49DJFxMIqW/Buy+QdRzRl4mRjb4i/qGxvk=)
2: gpmwXd1BMpqeIv12eURMuR5vqrE.roa (hash: MaL/Mi+QAF5aIJfDW1OwguAqm+8Ed9pFbma9rR1Um2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:44:21:69:7d:be:a9:9f:d5:ce:e8:28:38:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372418f004d584f2fe26c84235e66bb6b2942718
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=2818a18555be225b091d5e3cae4b9da925a9d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:3b:62:0c:bb:e7:cb:90:31:01:2f:29:83:
a2:35:4c:3a:9c:47:41:d9:e2:3e:d7:24:7f:37:79:
ae:0d:51:5e:5a:4f:1a:68:8f:93:b0:e8:dc:d3:9e:
55:d6:cf:63:ba:8f:65:d1:86:12:17:d5:2e:b8:b3:
dd:d7:65:73:9a:67:8c:34:8b:4a:b4:8e:aa:d9:e7:
58:94:3d:6e:b7:e3:05:4c:fc:9b:26:d3:22:77:67:
17:3b:21:f5:bd:9e:75:8b:9d:07:c3:74:d6:07:dc:
61:fd:68:20:d6:e2:80:05:62:33:65:42:1e:54:12:
26:df:e7:de:22:3d:71:06:e3:3c:bb:ef:34:95:ef:
29:51:ee:37:05:7c:f3:d7:8d:66:2c:88:e6:72:de:
10:3c:f9:da:d0:dc:6e:06:ac:c1:62:b8:bf:4e:5f:
fb:78:ed:a6:9e:14:9f:85:bb:bd:9c:68:69:1c:c7:
6e:ea:11:bc:02:8e:eb:34:ce:cc:22:64:79:d5:c6:
3d:ed:95:e1:bc:cf:1a:0a:3f:31:08:2b:30:8e:c9:
4d:5e:d1:d9:94:20:c4:ae:d1:98:a5:b7:13:16:c4:
30:b9:d8:6d:f5:cc:33:b4:6b:ed:09:19:18:39:04:
a3:41:17:62:4d:f6:94:ee:83:32:6c:e8:d7:3c:c2:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:18:A1:85:55:BE:22:5B:09:1D:5E:3C:AE:4B:9D:A9:25:A9:D7:B0
X509v3 Authority Key Identifier:
keyid:37:24:18:F0:04:D5:84:F2:FE:26:C8:42:35:E6:6B:B6:B2:94:27:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyQY8ATVhPL-JshCNeZrtrKUJxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/93c851-baa6-4121-bcdd-a136a32895c0/1/NyQY8ATVhPL-JshCNeZrtrKUJxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c6:50:97:ed:b8:c7:09:cb:bf:fd:b9:74:35:63:c2:1f:19:
15:aa:db:b4:a0:af:59:fa:f6:d9:6c:e1:5c:7a:6b:aa:8d:78:
af:9a:06:8c:a4:2f:91:f1:a9:02:a8:65:a2:7c:f3:cd:e7:17:
ba:73:f4:9a:c4:29:07:b6:fc:5b:d3:92:f1:43:8a:4f:b2:32:
62:37:5c:e1:d2:8d:b9:82:34:32:88:23:03:19:a2:43:05:18:
f7:f8:78:5c:80:f1:22:3d:88:2b:84:ae:6b:a1:bc:df:d0:95:
8c:9f:74:b1:c3:e2:3a:f4:36:2d:fb:65:05:21:bf:0e:9c:8c:
7f:bc:37:7b:cc:71:8f:4d:66:ed:56:93:69:ff:3a:a1:c2:ae:
f7:bc:29:de:4f:f3:6b:fb:ef:81:19:c7:25:65:0c:2f:86:a3:
2b:51:fa:3d:ba:de:82:ae:6d:10:15:d6:53:a3:37:ae:40:5b:
c1:87:21:7b:27:bb:11:8b:46:36:14:7f:91:2f:ae:17:d4:6e:
24:8a:d3:ff:8f:90:e8:f4:e4:9e:99:73:9b:ea:1c:df:ba:58:
e5:79:99:ad:b1:09:7a:d7:9e:f3:43:f7:e8:b9:a0:b1:c1:d3:
b8:b4:3d:f1:17:f1:1a:91:76:de:1a:04:bc:ee:96:fb:ef:51:
87:8c:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:19 2026 by rpki-client