Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: FI/1EwRi3TMnTRc1zQ8J1lcbaVyHFSAnj7i6q5VxG5s=
Subject key identifier: 72:60:1F:FB:68:46:E0:77:7C:F0:07:43:C7:37:8B:1D:80:92:53:7B
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019F90909225FEDB66E48107CC140C8876A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 1163
Signing time: Thu 23 Jul 2026 20:00:21 +0000
Manifest this update: Thu 23 Jul 2026 20:00:21 +0000
Manifest next update: Fri 24 Jul 2026 20:00:21 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: dL1zfwK4vLC5zxWCSqC4S04eLmMAbIgaxSWDKb2bxCs=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:92:25:fe:db:66:e4:81:07:cc:14:0c:88:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jul 23 20:00:21 2026 GMT
Not After : Jul 24 20:00:21 2026 GMT
Subject: CN=72601ffb6846e0777cf00743c7378b1d8092537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ca:43:ba:a8:17:29:c4:92:09:d9:89:98:28:
50:f9:01:68:02:19:6c:2c:4c:27:81:56:40:47:11:
e8:ed:23:32:69:c5:40:7b:aa:67:b2:c2:34:e9:9d:
42:aa:90:e0:1c:de:99:ae:9a:a3:f5:1c:fc:04:75:
60:55:ca:03:16:47:b0:7c:60:fa:68:8a:b3:f9:62:
2d:37:2d:4f:e6:a4:ff:4a:64:36:53:20:c9:fb:22:
35:0a:ba:12:94:9e:04:93:85:43:ec:4a:7d:e1:7c:
7d:a4:d7:6d:47:51:cb:41:d4:1e:7b:f3:30:a2:3f:
f9:cd:70:7a:6b:83:e3:84:bb:56:7e:04:30:78:94:
08:4b:b1:e6:8b:8b:06:67:fc:29:9e:6f:54:6f:47:
1d:cd:57:7d:c5:06:3c:21:2f:7f:44:22:52:f7:3b:
e5:b4:1a:ca:cf:fb:cb:06:36:29:85:db:68:43:f7:
28:46:85:ba:5d:ea:89:ff:97:59:d8:06:c4:21:f4:
8a:e7:99:47:be:cf:c8:5a:d1:a4:71:9d:d5:6e:48:
b2:70:00:37:83:46:f0:2b:c8:61:c7:8c:8d:ca:b0:
23:af:f7:1d:df:37:82:7c:f2:65:d5:e9:77:43:33:
52:0e:df:77:86:c4:64:af:d9:f8:f6:31:69:33:00:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:1F:FB:68:46:E0:77:7C:F0:07:43:C7:37:8B:1D:80:92:53:7B
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:01:af:bd:c0:e9:12:9e:0e:ca:3d:fc:83:cd:fe:08:2d:3a:
57:0b:0b:1b:54:3d:0b:20:bc:e9:f3:e0:8b:87:f9:36:67:f5:
78:2e:5a:ca:30:cd:d5:34:14:48:9c:83:85:75:f7:a2:13:6d:
01:cc:22:d7:cf:68:c6:8f:60:f6:21:f2:0a:bb:37:e1:cb:2e:
37:4b:0c:5e:2b:a4:ef:69:c4:f0:7c:3b:56:70:62:9c:d0:a2:
f0:5f:68:ca:eb:e3:6c:74:c6:3a:4f:71:f6:0f:f9:ff:c2:df:
1a:60:b2:25:4e:11:29:a1:81:08:ba:9e:77:6f:2f:1e:2d:f5:
95:78:b1:2c:32:78:8b:3e:c7:70:c3:21:0b:50:9e:4f:69:50:
a8:c4:b5:68:04:f2:10:ab:17:98:41:c2:bc:78:29:04:bb:09:
9f:1c:26:23:68:8a:df:0d:e4:ca:b8:f1:8b:32:cb:01:49:e4:
f5:ec:d5:67:15:ff:a5:bd:a0:5b:5e:98:41:0f:75:b6:99:f1:
b2:ec:78:1e:8f:f5:d6:66:25:c2:08:84:f9:8b:e6:6f:f0:ca:
55:df:55:d8:f2:24:3e:b7:cc:5c:f9:1a:e3:58:a5:7b:0a:07:
ae:0d:72:af:5a:37:63:40:86:dc:7c:db:e8:5e:0b:60:10:0b:
8e:ee:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:30 2026 by rpki-client