Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 3Pj0VgDSgHgkk0PHnl9LxlsIvL1Fkm2XPy8hFqKj/94=
Subject key identifier: 25:0C:98:85:57:6D:D5:9B:BE:68:88:C1:97:94:FE:0B:37:86:E7:56
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019E1DC769C9534A6345CCA8EE346D87B7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 10A3
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: HRH5zPz8z6q+FYWgOyR0VWxDiFJxpBCeMD/h2+B0CME=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:69:c9:53:4a:63:45:cc:a8:ee:34:6d:87:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=250c9885576dd59bbe6888c19794fe0b3786e756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:71:35:c8:90:96:01:23:86:9e:17:9c:3d:c6:
b1:b7:08:53:18:ec:ea:b8:80:be:dc:2a:03:b0:9a:
e6:09:1f:6b:c0:95:0c:fc:76:c9:c0:24:97:41:a1:
56:ff:70:a0:d2:ec:ad:87:b7:55:49:b4:2b:31:b9:
a5:8c:42:3d:91:ea:c2:30:06:a0:5f:2f:31:0a:c3:
bc:6c:21:9a:df:aa:cf:1a:b8:90:ae:b3:78:31:8a:
00:b6:6a:e8:0e:15:2e:82:2c:04:6c:1f:ae:c8:8e:
0f:a7:09:3f:0e:5e:7f:c0:df:db:d1:da:9f:50:3e:
81:0b:f2:e2:b8:12:21:76:71:93:05:d0:de:97:ca:
dc:25:da:8a:1d:45:ff:fa:32:45:9d:58:c3:c8:25:
89:00:ab:10:72:b3:8b:b7:0b:6b:27:48:d7:94:d8:
8c:29:96:95:4a:89:b0:0e:11:cb:02:17:d8:88:05:
c8:82:28:ee:4d:00:d6:81:78:3d:be:0e:5d:e6:01:
4e:c5:f2:95:74:a3:5d:12:c8:db:6e:74:64:fd:f8:
8d:ed:25:9c:14:cb:a5:97:c0:48:38:7c:a2:c8:90:
1d:58:d6:af:2e:91:9d:1d:82:6f:b1:74:41:a7:5c:
83:47:60:49:62:7f:00:2b:88:af:af:63:15:73:88:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:98:85:57:6D:D5:9B:BE:68:88:C1:97:94:FE:0B:37:86:E7:56
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3f:51:63:f4:aa:ff:2f:c5:b1:57:45:72:42:8a:33:ad:d1:
15:da:b2:86:ed:c0:54:22:99:f3:07:56:d0:70:aa:df:27:68:
ba:95:cc:8b:a5:aa:3b:6b:aa:d5:ad:c8:b3:66:a3:07:fc:47:
b8:0a:30:f2:0a:76:a0:6e:c2:30:d0:e9:a4:87:2b:7d:1e:74:
2b:df:2b:10:88:23:ad:24:00:2d:f7:ed:da:92:f8:a3:67:f0:
6c:7c:5a:8f:46:2b:70:33:f8:0c:32:ce:0c:dc:4a:6a:16:65:
42:d4:ee:0c:41:c9:7d:1e:a5:3b:32:af:39:1a:14:7f:69:6d:
92:c2:c6:23:fd:42:ed:74:cb:cf:12:04:21:26:0f:4c:a6:24:
4a:44:4b:d3:d7:4a:2c:51:9a:b4:08:c7:5c:bf:a1:32:80:2d:
06:d3:ae:36:80:38:60:b3:b8:be:fe:96:fb:77:1d:ee:0f:25:
b6:8b:bc:73:ca:2f:54:1c:4a:21:06:c7:52:7a:b7:a8:6b:c8:
c9:88:2d:0c:dd:61:b1:f1:73:4b:7c:8f:e8:7f:d0:43:94:f9:
98:01:b0:09:7a:77:e8:f6:12:33:57:36:07:81:81:d8:05:f9:
28:19:6c:ec:df:d1:3d:6e:83:1e:d6:a0:76:a8:3e:06:53:f0:
12:ee:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:45 2026 by rpki-client