Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: tms2eoy21i/JdMPYd/Ol1pDKO22N/AlEAvjGq1ZSsNg=
Subject key identifier: 16:DB:60:C3:0D:28:78:19:D4:83:45:14:61:8D:81:81:B2:CB:7F:0A
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019D39E5E4CD9EE66B98D6D92314E9D34568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 102D
Signing time: Sun 29 Mar 2026 14:01:00 +0000
Manifest this update: Sun 29 Mar 2026 14:01:00 +0000
Manifest next update: Mon 30 Mar 2026 14:01:00 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: WH+MTg4Lq45aCIEf/EZ+fy/d5ks2+c33lIiK4flBZvw=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e4:cd:9e:e6:6b:98:d6:d9:23:14:e9:d3:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Mar 29 14:01:00 2026 GMT
Not After : Mar 30 14:01:00 2026 GMT
Subject: CN=16db60c30d287819d4834514618d8181b2cb7f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:fe:8f:30:72:32:20:ab:fc:74:6f:2f:a1:
06:1a:99:69:25:b3:b1:00:35:df:30:ff:b3:3e:28:
95:22:18:f8:18:71:2d:35:01:27:1f:59:20:8f:d5:
16:0e:e7:a9:9a:a9:5e:71:10:25:13:2a:22:09:8f:
6b:ac:33:c0:c2:d8:b6:9b:91:13:41:62:57:76:5a:
d0:1a:79:e9:21:7b:33:2b:95:6c:fc:fe:2d:4e:ed:
f0:64:80:22:38:84:75:16:b2:88:bf:fd:11:1a:fb:
91:a0:77:f1:f9:fc:d7:24:74:f0:7f:f6:dc:8a:7f:
bb:46:3a:42:9a:60:50:4a:5c:d4:96:ce:bb:f8:fd:
cc:8d:37:18:1b:b0:3a:dd:2d:c9:15:36:3c:db:f6:
f4:12:82:d1:b6:e9:0e:26:17:29:23:e0:a2:45:2f:
a3:2b:e8:6f:b4:6e:ab:02:59:33:d5:3f:e9:bd:98:
0c:35:2e:79:9d:e5:7e:5f:eb:74:66:0b:11:4c:fe:
d8:c2:ca:4a:55:43:80:2e:32:49:05:66:ad:12:1b:
73:85:d1:f9:20:36:48:72:93:87:bc:58:17:47:d0:
bd:a9:8c:2b:9a:7b:9b:93:cc:08:78:f6:c0:98:50:
0d:7a:e6:93:c7:a9:7c:2f:50:2f:c2:d4:2a:7c:3d:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:60:C3:0D:28:78:19:D4:83:45:14:61:8D:81:81:B2:CB:7F:0A
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:00:73:ed:da:5f:7a:2f:14:ea:df:e7:47:30:e9:25:05:
09:f4:dd:5b:ad:6d:03:e0:aa:3b:35:2a:24:25:b7:78:fb:f5:
fc:2b:81:9e:c0:71:ff:eb:45:f6:03:f3:06:91:ce:af:bf:42:
08:f3:2b:b5:52:4b:12:05:f9:66:0f:22:0c:5f:da:38:0d:b1:
49:df:f0:d0:b8:18:ad:ea:47:da:3c:21:36:09:38:22:4c:d8:
a2:a5:39:8b:21:11:c2:e2:2a:ff:64:af:79:e9:6a:d0:01:a2:
a3:bc:8c:e6:28:8e:31:49:78:c1:81:18:c1:33:5c:53:4e:a2:
11:0a:5d:6b:80:7c:97:24:91:3a:af:39:28:6e:b8:07:e9:7f:
a1:4a:59:9a:ac:b5:5d:d5:37:a4:2b:71:d4:e4:d8:27:0b:0b:
ee:65:62:9a:bc:5c:26:22:6f:4a:7f:33:98:d6:eb:14:df:77:
6c:5b:96:45:a3:87:b0:81:da:f0:24:cd:7d:b3:57:d3:2d:c9:
06:77:58:34:72:1a:8e:23:ea:ea:f2:c5:f9:55:c6:f1:8e:4e:
e0:23:63:53:26:7a:f8:87:cd:ea:88:fe:4f:41:c6:0e:39:c3:
46:61:84:e6:3d:58:89:56:6f:bb:3c:20:72:04:2c:8e:38:5f:
e3:6d:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:30 2026 by rpki-client