Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: Y1tjurtrv9pgzk3ZLhQnYWCkKCvG0Y5+hyQ4jvDHv88=
Subject key identifier: 34:19:F5:E5:DC:21:D3:AB:DE:CB:61:4F:D0:95:2A:3D:BC:63:CE:20
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019F84FA43D90E78D307FF7E4AE446D64134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 115D
Signing time: Tue 21 Jul 2026 14:00:21 +0000
Manifest this update: Tue 21 Jul 2026 14:00:21 +0000
Manifest next update: Wed 22 Jul 2026 14:00:21 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: Vvb3BxPGxhZ3WdUppujO8K4LjRMDQArx1fvlkD3ud+0=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:43:d9:0e:78:d3:07:ff:7e:4a:e4:46:d6:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jul 21 14:00:21 2026 GMT
Not After : Jul 22 14:00:21 2026 GMT
Subject: CN=3419f5e5dc21d3abdecb614fd0952a3dbc63ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:72:a1:a7:3d:b2:55:df:75:87:a3:b3:a2:
ab:b6:4e:bd:df:5b:58:e3:8d:da:4d:cc:1a:f8:05:
bd:2b:d9:a1:9d:2f:71:97:92:b9:2f:29:7c:71:94:
5c:a1:02:98:3c:a0:0e:0e:08:69:df:c7:9d:5a:66:
2f:51:96:49:7a:e6:54:d2:3d:d5:45:da:90:06:76:
57:16:20:dd:55:fa:f5:10:ee:69:38:c1:f7:70:ce:
6c:0e:e8:0a:66:64:c2:a9:06:94:99:4f:6e:83:43:
e0:45:66:68:10:00:30:34:cd:bb:d9:c9:85:69:11:
d0:a8:d8:82:58:38:e7:c8:e0:a4:dc:5e:a0:41:eb:
f2:a4:41:39:7d:47:71:38:6a:22:91:5d:b5:15:7e:
2a:d8:94:fd:b6:73:fa:5c:b2:8e:7d:fd:cb:93:b7:
d0:85:e2:e6:2a:fb:ed:7f:31:9d:25:eb:ea:01:b8:
fe:d2:37:90:64:82:3b:46:0a:7d:d1:9e:99:6c:f3:
c3:1b:fd:78:67:05:be:c1:f0:17:34:cf:71:9a:ed:
01:31:71:1a:c6:a4:9e:fc:9b:e5:82:59:14:e3:21:
f5:23:ac:c1:87:0e:30:04:67:97:06:37:c7:d5:76:
0e:45:51:9e:89:ff:7a:15:7b:9a:8f:28:1e:56:a1:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:19:F5:E5:DC:21:D3:AB:DE:CB:61:4F:D0:95:2A:3D:BC:63:CE:20
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f3:d4:01:18:bc:4d:f7:c3:ac:88:cf:df:f2:07:3b:df:c8:
b7:5a:c3:b0:07:b1:33:b9:52:ac:9e:b1:45:db:2a:a9:1c:09:
b0:1c:7f:51:58:27:e5:b6:35:29:35:88:f8:0f:0b:e8:21:44:
68:eb:4a:29:5e:bd:ca:c8:3b:99:2c:75:6b:bb:ed:58:b1:eb:
42:8a:9a:b6:e5:26:9d:38:6b:5c:25:d4:cf:0e:f3:ca:af:56:
af:da:b1:27:15:04:b6:b8:94:49:47:88:e3:57:de:fd:40:44:
d3:ff:ab:c3:65:cd:ff:f5:9f:88:91:f8:80:66:09:d6:12:70:
75:03:eb:9b:20:da:d7:b7:01:76:f2:2a:09:06:2b:62:b0:0e:
14:bd:fe:9b:bb:2a:91:7f:1d:72:e8:7b:59:ee:42:64:cc:f8:
0f:f8:df:6c:2b:eb:95:b6:33:75:8b:20:84:3f:fe:9f:4f:a7:
9e:cf:69:31:67:53:a8:bc:d0:71:34:63:6e:08:4f:22:6c:40:
72:6e:df:ad:d4:95:f8:fe:2f:93:fb:d2:7c:14:ac:f0:96:14:
3d:ad:60:d1:c7:8f:7e:1b:33:75:16:41:46:b0:2c:64:20:e1:
9a:55:2b:0d:d0:89:47:fd:a0:6c:e0:44:a0:4e:9a:a8:cf:d7:
d9:7b:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:20:32 2026 by rpki-client