Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: faEaFky6/zDM26s3FMb9YuQCNB1svjM3HUdX7uA6eqE=
Subject key identifier: 24:D4:1A:8D:83:4F:E9:66:88:AF:91:52:28:E7:E1:26:3B:09:29:22
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01A1DD94F0695D45023C713F08EF17AD10C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 1294
Signing time: Sun 15 Nov 2026 05:01:27 +0000
Manifest this update: Sun 15 Nov 2026 05:01:27 +0000
Manifest next update: Mon 16 Nov 2026 05:01:27 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: 7LlAymIjXSVc+CfdbbAj/HNgNgnU9Zz2WBHu7xcwJwE=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:f0:69:5d:45:02:3c:71:3f:08:ef:17:ad:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Nov 15 05:01:27 2026 GMT
Not After : Nov 16 05:01:27 2026 GMT
Subject: CN=24d41a8d834fe96688af915228e7e1263b092922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:58:29:98:3a:7a:3b:24:fc:c4:0d:1c:d7:
78:61:9e:5f:64:2c:c1:6a:d5:47:67:fc:c5:1c:6d:
18:5d:a5:a1:92:53:77:89:c4:af:65:08:82:b7:ff:
81:67:50:02:eb:7a:60:1a:61:0b:44:2d:ec:18:d3:
d8:87:1e:37:02:06:1a:cc:e1:0e:ba:bd:db:73:89:
43:85:60:0c:e1:29:45:00:99:63:ee:dd:1f:07:08:
62:0e:cf:05:1d:4b:69:0f:34:42:2c:98:65:21:27:
c5:ff:7c:e9:ec:54:65:32:db:02:ef:d3:6f:e9:8c:
db:ac:17:a6:36:9c:59:12:68:fa:86:8a:0a:49:98:
75:7d:91:21:fd:07:40:1c:1b:0c:4c:e7:24:33:c6:
9c:f1:30:d7:04:5d:ab:73:a6:1e:61:67:81:4b:c2:
c7:ba:28:fe:cd:2b:6e:56:f1:44:3c:16:e8:25:4a:
9d:25:76:54:94:96:b7:d5:d8:e4:c3:0f:a3:c2:c0:
ee:24:a7:15:61:ad:81:c8:6b:78:4e:3f:99:50:0e:
ab:22:61:95:e8:90:e9:c1:03:5e:c7:e9:39:99:0a:
c3:b0:b4:0f:d2:66:ed:49:8f:cb:e2:75:5a:ea:4b:
a5:92:e6:74:5d:57:8c:95:3f:b1:37:0d:9c:d4:ac:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:1A:8D:83:4F:E9:66:88:AF:91:52:28:E7:E1:26:3B:09:29:22
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:c4:ae:0b:bc:b8:12:93:62:17:cf:31:52:fe:91:ab:14:
5a:07:c4:fc:5c:1f:94:4d:5d:3d:a2:84:c5:2e:67:d0:56:9e:
ba:13:fb:37:5b:2c:95:68:07:48:8b:ca:66:f4:9f:da:11:de:
9d:e6:f5:10:81:2b:2d:08:9d:8f:59:5b:7f:02:4c:6d:7d:b6:
78:04:7a:08:71:80:7b:46:4d:5e:28:52:d1:65:41:e6:b4:aa:
aa:9f:a7:32:78:ae:57:05:dd:e2:54:fc:1b:ed:6c:d6:89:7d:
50:f8:c9:bb:42:7c:ac:8f:2d:05:12:05:2b:38:d8:90:5f:7e:
ff:4b:bc:5d:9b:1b:d7:31:a9:d4:cb:4c:be:6c:7e:95:fc:ca:
c9:78:13:9e:e5:4e:2c:da:28:da:46:b3:c1:09:a2:6c:bc:b4:
08:b9:c6:10:a0:7f:36:4e:39:cc:ed:7f:7e:38:6d:fa:58:b6:
fa:61:a0:e2:7b:ab:5a:e7:bf:2e:ce:6a:c9:cc:6f:45:5a:68:
c8:98:1a:f1:8c:77:62:d4:21:dd:a2:b6:36:37:a2:a9:14:82:
ea:e5:ac:fd:55:b3:dc:6a:ec:0e:fa:47:7a:6f:70:72:04:7a:
cd:4b:2c:3e:9b:59:a2:d9:99:43:50:d4:a0:78:34:cf:eb:40:
dd:dd:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:59:00 2026 by rpki-client