Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: ErJfIx/R6qjuN/uorkr6r6v9L7kS8F4yz8mvtYK5csI=
Subject key identifier: 98:2B:98:BA:67:31:BB:35:1B:F7:06:36:6D:EF:7B:C2:6A:D3:81:B7
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01A0D6F05D136BA3E30E0B738C8270888949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 120C
Signing time: Fri 25 Sep 2026 05:01:11 +0000
Manifest this update: Fri 25 Sep 2026 05:01:11 +0000
Manifest next update: Sat 26 Sep 2026 05:01:11 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: ERwaxaCwbsZGk+WEvedioaXWU3x77mrj8IOH+GgqtQ8=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:5d:13:6b:a3:e3:0e:0b:73:8c:82:70:88:89:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Sep 25 05:01:11 2026 GMT
Not After : Sep 26 05:01:11 2026 GMT
Subject: CN=982b98ba6731bb351bf706366def7bc26ad381b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:3f:f8:28:c8:0e:1c:f1:b6:c6:b6:02:84:
1d:f5:fc:22:b6:ed:23:c2:99:36:ff:36:9a:fd:7e:
21:9e:c7:06:b3:97:4c:4e:8f:c7:cc:62:ee:f0:40:
b9:85:51:31:23:71:80:c0:41:91:a7:e3:84:86:d9:
88:ff:56:63:91:cf:c3:9c:f2:2d:db:52:66:ef:8c:
b7:5b:06:2f:81:1b:f1:ea:b7:3c:e0:9c:b2:49:53:
75:a2:60:24:e9:68:d3:23:fb:99:d8:65:af:13:6b:
64:9a:03:06:4c:30:47:b7:59:fe:a0:5e:a8:aa:15:
56:43:43:9e:c4:14:20:38:8a:e4:61:03:0c:2c:17:
7a:84:8d:4b:a8:6d:fe:1d:bf:08:40:63:a4:2f:7f:
8d:02:ad:05:a6:97:c4:7b:5c:bf:6a:18:ac:ca:f6:
07:48:e0:09:ae:b1:aa:77:4c:c1:9b:bb:85:03:3e:
67:d9:ff:97:2a:ec:e7:e1:04:d6:54:a7:8d:a1:2b:
1b:c8:2b:69:d7:42:c5:ce:0c:c0:40:73:7b:e0:2c:
98:ea:8e:67:bf:e3:f2:ef:6f:8d:1f:53:83:11:f9:
8f:ae:36:12:fd:be:ff:2f:b5:08:24:52:f2:bf:f7:
e7:ce:17:ae:ea:69:3a:56:ad:6b:84:d1:3c:60:a2:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:98:BA:67:31:BB:35:1B:F7:06:36:6D:EF:7B:C2:6A:D3:81:B7
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2a:30:13:ca:0c:c7:c6:78:f5:9a:1c:f1:b4:c8:c1:dc:ff:
ff:8d:a5:0f:c0:8c:99:fa:45:b8:85:62:a5:20:60:61:77:a7:
64:e6:f7:0d:4e:51:41:07:05:0e:78:7e:80:2c:8d:ec:7d:c9:
e2:9a:4e:23:04:c5:f6:36:65:04:74:68:26:f5:ba:fe:76:1f:
20:12:5f:a2:70:ae:b8:15:3e:e4:1d:5f:51:a2:bd:71:2b:c4:
97:b2:6c:bf:7c:b5:3d:65:55:76:49:ba:d7:a7:7f:92:e1:cb:
b8:d9:77:e8:4a:d4:7c:eb:22:65:ea:55:0d:89:d1:15:ba:f2:
6c:85:b0:55:9f:85:56:01:f2:11:7a:a3:b1:0b:cb:e6:f4:3d:
1c:e0:1e:7b:a8:20:5a:42:ce:aa:e0:37:b2:5e:a7:f7:97:6b:
0c:fb:35:25:8d:e5:9b:af:44:8e:c2:81:97:52:26:7c:d1:2e:
1f:ac:66:6b:dd:c1:d2:fc:bc:e6:90:55:4d:e1:4d:15:bd:e8:
7f:08:06:2f:c1:c2:02:04:10:8c:8c:ad:c7:7e:d8:f6:65:21:
27:01:e9:ce:40:e2:91:d0:06:32:31:f6:39:d0:55:24:ae:16:
08:0d:b5:50:28:ad:d5:f6:1f:f1:59:77:34:ce:ca:25:d3:b7:
c6:1e:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:16:21 2026 by rpki-client