Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: MFmqjd5PovFcTAM+g5fiD+yErkjuUrpXm9oICS4LOQw=
Subject key identifier: AE:5B:EA:23:9C:E7:BB:25:C8:00:72:15:48:B8:C3:50:87:83:E3:B8
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019EBFFF1C99E0ACB4ACD9C74D0E71E5B30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 10F7
Signing time: Sat 13 Jun 2026 08:00:27 +0000
Manifest this update: Sat 13 Jun 2026 08:00:27 +0000
Manifest next update: Sun 14 Jun 2026 08:00:27 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: 4hzC8QIjNfL6eRLw/6fFLZJtuIInEErr6/Jnm241cSk=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:1c:99:e0:ac:b4:ac:d9:c7:4d:0e:71:e5:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jun 13 08:00:27 2026 GMT
Not After : Jun 14 08:00:27 2026 GMT
Subject: CN=ae5bea239ce7bb25c800721548b8c3508783e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:ab:95:d6:51:13:68:d3:b2:58:8b:cc:e3:
64:38:6d:2f:fa:10:99:87:1a:5e:14:c9:bb:08:6f:
f2:19:66:2b:aa:fa:6c:bb:97:36:ba:42:90:b6:b8:
ee:ef:35:42:52:3e:20:e1:82:d3:dc:8e:c6:95:4d:
99:d5:51:01:e0:34:15:e2:a3:f6:dc:2d:26:9b:be:
33:f3:1e:26:3a:fe:d0:d3:b0:7e:ab:2a:39:5f:1d:
1e:8b:bf:4e:94:84:10:2f:94:f4:e0:b1:ac:98:4c:
2b:8c:93:a1:63:f8:40:ee:94:f0:ad:f0:80:b2:f4:
c5:de:70:42:45:d7:df:7f:46:a0:d6:68:36:a7:4f:
4b:a3:27:8e:ae:e7:f2:f7:51:4d:49:53:5c:fb:57:
f4:24:ac:bc:20:a6:09:15:46:d9:2b:b8:4a:f5:bd:
bd:c3:7b:13:3c:28:b9:70:02:5c:1c:7e:96:44:d3:
1c:bf:1a:8a:8f:e7:0a:35:9e:4c:b3:d9:fa:4f:f2:
f9:02:2b:27:c4:f1:5d:23:f8:4e:f3:9c:62:77:ec:
3f:14:bc:65:e3:eb:aa:c0:bc:6c:db:8b:80:1c:93:
01:1a:cc:a0:fd:99:47:7b:5a:8b:b3:77:97:0d:6e:
fc:26:cc:2b:ba:c1:b7:2d:08:94:77:7e:c6:61:05:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5B:EA:23:9C:E7:BB:25:C8:00:72:15:48:B8:C3:50:87:83:E3:B8
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:17:dd:1e:e5:08:e0:ed:e1:1a:0f:ed:35:4b:6b:50:ec:
23:de:4f:f9:f9:29:40:25:4a:aa:bd:e5:66:e3:98:c5:32:b5:
70:87:fa:99:d0:d5:70:8a:a3:13:29:c6:81:20:5f:a4:c9:05:
c2:30:3a:eb:f8:70:20:01:a7:51:c9:8c:36:0a:85:60:b3:73:
7c:65:8d:71:6e:a9:e6:82:d2:69:2b:86:73:13:3f:91:dc:7c:
a5:b3:db:ee:e8:14:b8:09:7d:40:c9:3d:cb:eb:41:7f:8e:f9:
f4:cb:ff:dd:51:11:e4:96:d3:d9:db:d5:d3:a0:b2:0c:f6:42:
5c:e1:81:fb:e9:e6:46:7e:16:d7:99:2c:8e:e4:79:88:28:08:
66:76:46:41:82:26:54:50:31:d2:15:0b:f7:ea:0e:ed:c7:9d:
76:04:4a:5d:40:58:8a:01:e4:b9:2b:c1:26:1f:e3:1f:71:bf:
42:79:a3:c8:f8:c8:bf:86:8e:d7:c1:28:c9:c7:cd:16:a0:e6:
6c:5f:ca:49:ce:47:b4:ef:2d:58:a3:f6:0e:34:b9:54:d5:ac:
a4:73:c0:8a:3e:9f:90:15:13:62:62:85:6a:7b:f6:05:3e:0a:
95:99:02:05:b5:dc:ac:21:fd:e0:74:4e:5d:14:ae:05:47:87:
d3:95:f6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//xyZ4Ky0rNnHTQ5x5bMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw
YzI0MTcwHhcNMjYwNjEzMDgwMDI3WhcNMjYwNjE0MDgwMDI3WjAzMTEwLwYDVQQD
EyhhZTViZWEyMzljZTdiYjI1YzgwMDcyMTU0OGI4YzM1MDg3ODNlM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7arldZRE2jTsliLzONkOG0v+hCZ
hxpeFMm7CG/yGWYrqvpsu5c2ukKQtrju7zVCUj4g4YLT3I7GlU2Z1VEB4DQV4qP2
3C0mm74z8x4mOv7Q07B+qyo5Xx0ei79OlIQQL5T04LGsmEwrjJOhY/hA7pTwrfCA
svTF3nBCRdfff0ag1mg2p09LoyeOrufy91FNSVNc+1f0JKy8IKYJFUbZK7hK9b29
w3sTPCi5cAJcHH6WRNMcvxqKj+cKNZ5Ms9n6T/L5AisnxPFdI/hO85xid+w/FLxl
4+uqwLxs24uAHJMBGsyg/ZlHe1qLs3eXDW78JswrusG3LQiUd37GYQUsYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5b6iOc57slyAByFUi4w1CHg+O4MB8GA1UdIwQY
MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt
NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4
LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQAX3R7l
CODt4RoP7TVLa1DsI95P+fkpQCVKqr3lZuOYxTK1cIf6mdDVcIqjEynGgSBfpMkF
wjA66/hwIAGnUcmMNgqFYLNzfGWNcW6p5oLSaSuGcxM/kdx8pbPb7ugUuAl9QMk9
y+tBf4759Mv/3VER5JbT2dvV06CyDPZCXOGB++nmRn4W15ksjuR5iCgIZnZGQYIm
VFAx0hUL9+oO7ceddgRKXUBYigHkuSvBJh/jH3G/QnmjyPjIv4aO18EoycfNFqDm
bF/KSc5HtO8tWKP2DjS5VNWspHPAij6fkBUTYmKFanv2BT4KlZkCBbXcrCH94HRO
XRSuBUeH05X2Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:49 2026 by rpki-client