Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 1s+Y9mfONEB/yVConap9G/vKYOwO14krwd4shThUqFo=
Subject key identifier: 00:63:B3:72:D8:14:78:41:4C:D9:10:0E:24:42:1E:5D:5A:42:42:32
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019E9B4D8E88B84FC82F72622CFB91866AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 10E4
Signing time: Sat 06 Jun 2026 05:00:11 +0000
Manifest this update: Sat 06 Jun 2026 05:00:11 +0000
Manifest next update: Sun 07 Jun 2026 05:00:11 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: cEVI2+HQ7697THattQMxl4ij/X1wC9crFE0sN3fKGms=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:4d:8e:88:b8:4f:c8:2f:72:62:2c:fb:91:86:6a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jun 6 05:00:11 2026 GMT
Not After : Jun 7 05:00:11 2026 GMT
Subject: CN=0063b372d81478414cd9100e24421e5d5a424232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:b3:03:4c:63:a4:39:82:8d:8c:9d:60:ec:
35:99:5e:5c:8f:c5:dd:b7:f6:8e:96:e4:45:61:b7:
c3:01:03:af:9f:7b:1f:f1:65:22:28:32:e5:b9:cf:
55:39:2a:de:08:65:0b:46:69:87:b1:b8:04:fb:32:
58:67:de:04:76:e6:ac:87:57:05:b8:ab:23:16:ea:
1f:40:b3:28:a3:95:7d:6d:04:12:b1:08:da:42:9e:
54:5a:39:38:c0:52:bf:bc:21:6e:81:3a:84:f9:e7:
09:f7:62:f4:d9:d5:95:a6:38:d8:47:8a:31:87:01:
cf:26:fa:76:f8:de:5c:37:ee:37:86:91:98:8f:ab:
b1:a2:cf:a8:cb:94:3f:c8:a6:2c:80:ec:a3:93:ef:
25:62:28:ee:b7:d7:e7:5e:0d:ec:f8:8f:67:19:32:
8a:a0:21:b4:19:d7:0e:37:d7:59:9c:9b:eb:86:3e:
07:50:45:3a:cf:99:91:bd:96:03:37:b8:d6:bf:3b:
37:b6:4f:08:79:b5:6b:28:24:d1:11:0d:01:22:bd:
b0:1e:6a:fc:00:79:3c:8b:ed:0b:2f:0c:64:53:2b:
c6:21:3b:42:2e:a6:70:bc:ad:03:57:0e:58:76:c9:
67:05:6f:f0:7d:4b:cd:7f:12:36:0c:db:d6:84:cd:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:B3:72:D8:14:78:41:4C:D9:10:0E:24:42:1E:5D:5A:42:42:32
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:91:46:da:74:68:ca:2c:36:3a:9f:e2:d6:49:e8:00:ad:
96:25:9a:23:d4:89:a5:ff:1e:b5:3a:f9:9f:0b:6b:75:6c:49:
79:d5:c6:94:b4:28:3b:0c:c3:82:40:b5:82:0b:0c:a3:67:2c:
6e:2e:df:ab:08:d6:f9:be:b4:6f:ef:0d:b7:ad:66:55:53:fd:
4d:f1:3a:9d:ce:3d:83:1e:83:c1:b2:78:1c:0a:ea:46:91:46:
92:90:95:8a:0c:51:1e:b2:00:04:0c:46:22:84:42:b1:c6:93:
82:e2:89:ba:91:aa:eb:01:f2:bb:25:6c:a0:6a:16:58:cd:ac:
e7:ec:61:03:c9:10:09:ee:49:f4:35:9f:3d:8b:2f:5d:37:d2:
11:69:57:c0:69:5f:3d:77:77:fd:79:a2:4a:84:95:b8:f7:86:
91:5e:e8:62:7a:01:01:d7:4c:e9:33:41:ef:b0:dd:ea:01:f1:
a2:08:2f:5a:a1:1d:84:95:d9:74:0f:81:8e:2f:c2:0d:de:0b:
25:19:25:b7:e1:9c:c5:77:53:51:9a:3e:4e:25:33:d4:c4:a0:
1f:44:ec:cd:7c:0f:d5:c7:f8:a7:c3:aa:64:fd:25:64:ed:b0:
ae:fe:ed:fb:3c:61:6d:38:55:d8:72:78:ad:c2:37:fa:7b:9c:
73:85:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:41:51 2026 by rpki-client