Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: F/KwEksFsmGhnpEHeq6lozrP2ZKYe/OxFUDH1Qa2AEo=
Subject key identifier: A9:1E:68:B3:C4:47:01:CA:02:8C:ED:10:15:64:4D:F5:54:53:71:73
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019D98866F36F49D0009F6465EE9462C8CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 105E
Signing time: Thu 16 Apr 2026 23:00:39 +0000
Manifest this update: Thu 16 Apr 2026 23:00:39 +0000
Manifest next update: Fri 17 Apr 2026 23:00:39 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: o81qFx9YDOX7Tu9vq8LNzX7RVcgNi9S+xjZtuB0V1RE=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6f:36:f4:9d:00:09:f6:46:5e:e9:46:2c:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Apr 16 23:00:39 2026 GMT
Not After : Apr 17 23:00:39 2026 GMT
Subject: CN=a91e68b3c44701ca028ced1015644df554537173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:02:1c:a7:9d:8d:c3:96:9d:c0:7c:eb:6b:
16:dd:54:19:4f:6f:90:10:5f:13:d6:2a:03:db:3e:
96:ce:2d:4f:30:e2:22:53:f4:18:69:d6:5e:88:09:
9d:d9:06:a2:2b:35:d3:c1:30:a6:38:66:48:a5:44:
5d:da:98:d7:46:a5:c3:a9:8b:d8:70:73:53:e0:25:
e7:c5:2e:46:5c:b2:e6:91:7c:65:83:a8:a4:8a:5e:
d1:c5:d9:b1:90:11:da:e0:06:2e:6a:91:16:89:ac:
f3:6a:fb:ec:a7:e2:70:4f:76:11:f1:52:3a:dc:cb:
00:f3:29:38:80:43:88:6c:51:ba:65:21:99:83:7d:
c9:ff:8a:00:77:a5:20:ca:f6:eb:75:e6:2f:44:84:
58:4c:1a:c0:ad:6d:78:cb:bf:c5:83:71:63:44:25:
88:ca:14:30:83:a6:db:09:6a:b3:e7:c5:eb:72:72:
9b:9f:ba:fc:f2:55:c3:83:76:20:ec:4f:55:01:ff:
93:d0:d4:0a:03:7e:95:00:6d:57:58:c7:27:07:f3:
de:aa:12:93:f5:58:53:a1:14:8c:5d:6f:c8:4e:56:
73:de:19:c8:c4:c7:ec:36:e4:b2:66:a7:24:73:94:
af:22:dd:74:2f:a0:d8:34:b7:8e:46:85:7a:e1:ad:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:68:B3:C4:47:01:CA:02:8C:ED:10:15:64:4D:F5:54:53:71:73
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:30:3b:43:38:c2:a5:00:d6:b3:b6:f9:38:a4:3a:6b:d4:c6:
73:1c:46:f2:8a:7e:04:ee:6e:75:00:48:99:b0:81:da:d7:3e:
3c:e1:29:7a:e6:ba:3c:10:27:54:5a:67:cd:8e:44:93:03:78:
88:da:e0:d1:2b:f0:04:cd:dc:8b:09:0b:49:33:9e:ba:9c:47:
c7:eb:fb:06:05:40:98:e8:e1:af:50:50:98:75:f8:91:5c:ac:
30:ae:0c:8f:b2:71:bc:17:4f:c2:7c:8d:58:32:41:59:aa:fa:
48:20:2c:2b:3f:e0:06:e5:93:c9:6d:e0:1c:04:46:1d:d3:47:
bc:dc:c4:70:9c:7d:da:0a:4e:7e:b3:e1:e7:7b:38:33:51:c8:
cc:aa:25:a5:44:49:14:55:06:30:7c:cc:06:d0:18:60:96:f1:
fa:e9:62:11:9d:2d:4b:f8:cf:43:ba:ec:6f:78:f1:80:b3:f6:
6c:7f:a6:40:b4:df:ad:22:14:b3:f7:7b:e9:4a:40:c3:9e:47:
d5:43:6b:c8:8e:ed:37:b6:26:52:4a:ba:95:9d:eb:14:61:26:
07:c0:83:4f:c3:ec:08:de:b2:d8:c7:7e:2f:dc:9c:7d:94:3e:
d2:dd:e3:5d:83:5f:fd:3e:8f:dc:21:0a:29:b7:0e:4e:9d:14:
94:27:a3:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhm829J0ACfZGXulGLIyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw
YzI0MTcwHhcNMjYwNDE2MjMwMDM5WhcNMjYwNDE3MjMwMDM5WjAzMTEwLwYDVQQD
EyhhOTFlNjhiM2M0NDcwMWNhMDI4Y2VkMTAxNTY0NGRmNTU0NTM3MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQoCHKedjcOWncB862sW3VQZT2+Q
EF8T1ioD2z6Wzi1PMOIiU/QYadZeiAmd2QaiKzXTwTCmOGZIpURd2pjXRqXDqYvY
cHNT4CXnxS5GXLLmkXxlg6ikil7RxdmxkBHa4AYuapEWiazzavvsp+JwT3YR8VI6
3MsA8yk4gEOIbFG6ZSGZg33J/4oAd6UgyvbrdeYvRIRYTBrArW14y7/Fg3FjRCWI
yhQwg6bbCWqz58XrcnKbn7r88lXDg3Yg7E9VAf+T0NQKA36VAG1XWMcnB/PeqhKT
9VhToRSMXW/ITlZz3hnIxMfsNuSyZqckc5SvIt10L6DYNLeORoV64a19owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkeaLPERwHKAoztEBVkTfVUU3FzMB8GA1UdIwQY
MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt
NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4
LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTA7QzjC
pQDWs7b5OKQ6a9TGcxxG8op+BO5udQBImbCB2tc+POEpeua6PBAnVFpnzY5EkwN4
iNrg0SvwBM3ciwkLSTOeupxHx+v7BgVAmOjhr1BQmHX4kVysMK4Mj7JxvBdPwnyN
WDJBWar6SCAsKz/gBuWTyW3gHARGHdNHvNzEcJx92gpOfrPh53s4M1HIzKolpURJ
FFUGMHzMBtAYYJbx+uliEZ0tS/jPQ7rsb3jxgLP2bH+mQLTfrSIUs/d76UpAw55H
1UNryI7tN7YmUkq6lZ3rFGEmB8CDT8PsCN6y2Md+L9ycfZQ+0t3jXYNf/T6P3CEK
KbcOTp0UlCejgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:00 2026 by rpki-client