Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 9/gBZXuGNc0OdDSQD+KIbsJDOl2Rl2lDPUSVV2Ht1S4=
Subject key identifier: 34:57:C8:8B:67:B8:E1:55:D5:B6:99:F2:12:54:6C:61:4B:33:F5:C9
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01A06EA766CA55D7B61B47BD2AF7B7D6318A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 11D6
Signing time: Fri 04 Sep 2026 23:00:59 +0000
Manifest this update: Fri 04 Sep 2026 23:00:59 +0000
Manifest next update: Sat 05 Sep 2026 23:00:59 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: 5Cb+AgmDfG8GDUpRLp7Br0N9Gf7a6eONNoulg2CmuU0=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:66:ca:55:d7:b6:1b:47:bd:2a:f7:b7:d6:31:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Sep 4 23:00:59 2026 GMT
Not After : Sep 5 23:00:59 2026 GMT
Subject: CN=3457c88b67b8e155d5b699f212546c614b33f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:d4:93:52:14:0d:99:3b:12:0e:6e:c5:e7:
4d:8b:dd:17:28:e6:5f:07:2d:1d:74:dd:bd:f4:93:
8d:e3:d9:28:65:47:c6:3f:16:8d:ad:dd:e7:4c:f4:
51:ee:95:89:d8:e3:1c:38:67:f4:d3:a3:39:0a:77:
40:fa:13:58:06:6f:ea:ca:38:51:a8:c5:e2:20:e2:
50:45:e0:5c:bb:54:87:8d:80:9a:05:2c:7a:03:22:
97:23:cc:1f:9a:4b:b3:5c:9f:7e:9b:75:12:19:c7:
e6:c1:d7:1d:fa:66:db:9a:fd:35:3f:6d:2b:f5:64:
47:da:ab:ef:4d:fe:c0:49:4d:3f:19:bb:9e:39:5c:
54:1e:dd:72:74:8a:9a:78:ac:8e:b5:3c:a4:e7:f4:
37:02:79:0e:7c:d1:b7:94:2d:4c:b4:ad:f4:e6:f3:
3e:b2:56:29:23:98:4c:9b:12:8a:b8:05:ae:e6:c8:
d5:90:76:4f:82:7c:a7:82:35:b6:7b:22:88:9c:b6:
ee:3a:9e:6a:91:72:c2:61:a8:64:27:ab:2e:f1:7a:
72:c1:9d:1f:df:ef:77:0d:97:7a:74:9a:01:43:7e:
18:05:a3:50:76:f3:e4:a3:10:5a:1a:3e:34:7b:f1:
99:61:04:a1:ea:1f:0a:49:b1:6e:fb:9e:1a:83:41:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:C8:8B:67:B8:E1:55:D5:B6:99:F2:12:54:6C:61:4B:33:F5:C9
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:a6:5a:59:4b:1b:fa:12:45:c8:29:f6:fe:cd:fc:de:ad:
46:9e:92:b5:9b:f6:07:65:58:9e:20:aa:3f:e9:bf:ff:3d:b1:
1c:9c:64:33:00:f8:30:23:9a:dc:7b:a6:9e:f9:d2:3d:66:0d:
92:ac:77:b5:71:0b:2e:6c:2f:53:ee:8f:50:43:e2:17:83:7d:
de:be:fe:31:d1:dc:1d:8d:b8:b0:30:5a:e0:d8:48:8c:de:db:
ea:f0:54:b4:b6:f6:bc:4f:cb:2f:90:eb:21:65:dc:16:4c:66:
0a:3d:8c:f7:64:cc:8f:01:52:b9:3b:3e:b5:5d:fe:f7:0c:44:
79:b3:77:f0:07:ec:d3:fb:7c:4f:60:44:31:69:f4:33:f9:b9:
98:86:1d:f4:a2:76:5b:87:24:b4:f1:ec:d1:98:3f:ba:57:31:
c1:be:c0:05:6f:5f:6b:9a:2b:1a:86:3e:52:e0:6a:a2:f4:15:
89:b5:c4:3a:f8:64:d6:f1:55:a1:4d:08:09:c3:77:3f:a0:c6:
92:bb:46:c3:d5:e4:77:d2:d9:c3:61:0b:85:c4:e9:ec:7c:e6:
e9:56:7a:a2:fa:75:69:2c:f2:ac:e2:ea:a2:ca:95:99:ed:54:
99:04:a3:19:5a:bc:f4:fa:1c:8b:27:31:c4:82:83:4b:b0:92:
85:b0:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:37:16 2026 by rpki-client