Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: sCih5tU3W/xvr8400OEZ2K95vnsGFYh2EIi5WPW6/9I=
Subject key identifier: D6:FE:DF:63:30:C5:5A:95:1A:DF:CA:59:FC:9E:AB:F4:CE:6B:E7:62
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01A1600D9D674FE47E3546FB7545070B99B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 1253
Signing time: Wed 21 Oct 2026 20:01:07 +0000
Manifest this update: Wed 21 Oct 2026 20:01:07 +0000
Manifest next update: Thu 22 Oct 2026 20:01:07 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: pWT6XsWPu/iu8yoYr/NaoZSsWyliol/tO/p5sKrMfFc=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:0d:9d:67:4f:e4:7e:35:46:fb:75:45:07:0b:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Oct 21 20:01:07 2026 GMT
Not After : Oct 22 20:01:07 2026 GMT
Subject: CN=d6fedf6330c55a951adfca59fc9eabf4ce6be762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:ef:38:f8:46:92:90:e6:35:9d:4b:a8:a3:
7f:64:57:c1:1b:1d:b4:f1:e4:dc:6c:e2:8c:6c:74:
a5:1f:65:17:fa:60:0b:cd:83:45:2b:32:d4:8b:8e:
58:5c:91:79:1a:a0:4a:a2:72:1a:b2:31:55:e3:3c:
ea:65:3a:ae:87:6a:9a:b3:c8:e2:a7:d5:d2:da:9f:
1e:17:2f:cb:10:00:34:8c:79:18:e0:af:f8:b6:67:
f7:1d:78:e4:4f:9a:8f:97:ca:db:16:36:38:bc:77:
a3:1d:c3:5e:ea:cb:92:6e:3f:fb:62:33:7c:07:20:
36:62:6c:58:dd:46:11:2d:d9:55:df:1c:38:ac:c9:
a8:a5:6d:c7:e1:85:c5:34:15:ef:ac:37:f1:1d:18:
d2:ca:5d:a2:40:88:72:51:d2:b1:f9:4e:a1:a8:bd:
69:a0:85:3b:f1:3c:dd:a2:10:9e:73:13:68:71:ed:
54:c0:9d:60:5d:49:8e:6e:e9:a9:a5:f9:52:87:77:
ca:26:9d:3b:e9:1a:6a:f6:86:5c:32:65:f1:b6:f0:
61:ae:a2:f8:09:a0:db:7b:fd:b6:f0:a8:89:00:1e:
43:65:4d:af:61:30:f9:5a:95:57:e4:11:ad:b3:91:
92:d3:e4:9a:23:6d:1c:b9:0b:11:ba:32:2b:34:9d:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:DF:63:30:C5:5A:95:1A:DF:CA:59:FC:9E:AB:F4:CE:6B:E7:62
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:28:b2:e3:51:7d:5c:ea:3c:ab:be:73:96:fc:10:fd:14:
1b:11:52:2c:37:24:77:94:cc:4d:a9:ab:d8:bd:3a:3f:45:6a:
62:7a:4a:3e:b3:c3:d9:fc:13:b4:ab:54:04:df:f7:01:07:53:
81:96:b6:c7:a9:cf:42:07:44:f3:69:00:cd:47:ca:1a:e2:30:
9c:12:cf:5f:a4:e1:79:0f:2a:c0:05:42:c7:98:1d:b4:f5:a7:
6d:2a:e8:2a:45:dd:6b:25:f3:19:1c:b2:ac:7a:ea:f7:62:b2:
51:04:24:16:32:19:89:61:3f:09:1c:97:25:e6:56:8c:aa:d9:
41:64:6f:69:76:c6:ca:99:23:f2:ec:13:b1:c5:3e:9c:60:d9:
32:fe:5c:83:4d:80:fa:89:34:f7:6a:67:07:e6:6d:be:5e:c6:
26:fc:da:ff:a8:ce:8f:a3:e7:ab:ad:e6:c3:00:90:c0:05:78:
be:fa:d4:72:b2:75:1b:91:fa:d7:c7:21:24:a6:60:82:18:7f:
18:61:be:e6:01:65:f8:cf:b8:2f:dd:f3:42:cb:31:15:5e:27:
fe:3e:6d:fc:80:de:28:18:7c:f7:72:13:21:44:6b:f4:00:04:
9a:45:04:5a:8d:7b:ae:da:6a:b2:c4:79:dd:75:fb:3b:dd:8b:
ba:24:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:48:18 2026 by rpki-client