Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: Qgj475rKFQrmzUb5Ccw7WvENoMu3y27KPaZzsRJeInU=
Subject key identifier: 5D:D4:56:AC:71:EB:31:88:8B:36:38:67:3B:29:E1:B3:C7:CF:9E:53
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019FAB99FD956F879571182F9AAC347E2485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 1171
Signing time: Wed 29 Jul 2026 02:00:23 +0000
Manifest this update: Wed 29 Jul 2026 02:00:23 +0000
Manifest next update: Thu 30 Jul 2026 02:00:23 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: MeNE/S8fy/5Cmctek40PYgBYIfdBrM2enZorTcUSvDU=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:fd:95:6f:87:95:71:18:2f:9a:ac:34:7e:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jul 29 02:00:23 2026 GMT
Not After : Jul 30 02:00:23 2026 GMT
Subject: CN=5dd456ac71eb31888b3638673b29e1b3c7cf9e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:10:34:c6:1b:b7:9a:74:13:b7:69:90:05:
2a:ca:10:ab:d3:d5:09:af:07:cf:b2:12:a9:f5:19:
90:7a:ab:f4:86:eb:1a:20:c5:53:79:20:e1:bc:64:
a2:ca:1b:b2:e6:a9:a7:a5:de:8e:16:a6:df:32:45:
06:81:75:c8:f8:52:de:fd:1e:23:81:38:70:6a:77:
23:c7:88:86:82:72:26:92:7f:5d:00:1f:9d:a4:29:
23:0a:1c:16:19:d9:78:a4:e7:91:6d:60:21:94:34:
bf:8e:b7:08:dd:a2:b6:bd:7b:b9:62:1c:2c:32:09:
9f:de:60:1f:5b:25:d1:8e:d5:56:f1:dd:b1:53:f0:
77:d4:f7:4d:4c:d6:2a:57:a2:1a:78:cd:d1:52:76:
59:24:06:81:08:4d:f1:d1:0e:fb:3d:2c:63:15:ae:
2b:f5:40:29:8d:1d:9a:9e:2d:14:f3:88:b6:09:55:
cb:41:25:f0:a6:55:84:02:bc:16:c7:9c:34:a0:db:
fe:52:d4:2b:ec:a0:a2:03:51:0f:10:f5:25:a1:03:
b0:1d:31:c4:02:54:06:f6:f2:4c:a3:bc:39:9b:eb:
61:65:b1:26:b1:a6:67:a6:4d:50:2d:34:d5:ed:a7:
f8:06:d9:38:9c:ee:7f:d4:5f:9b:32:99:cc:a9:8d:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D4:56:AC:71:EB:31:88:8B:36:38:67:3B:29:E1:B3:C7:CF:9E:53
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9a:7c:09:2a:f7:5c:18:1c:db:0d:68:f4:b8:29:b7:81:e2:
5a:8f:c6:96:13:57:3a:2b:c8:c5:9d:e4:3b:1a:f6:91:ef:30:
d3:89:14:7d:19:78:63:a3:99:16:8a:ea:ba:6f:df:56:4c:14:
a1:9f:b6:fe:02:63:90:28:e8:c8:cf:96:40:69:0d:fc:03:89:
54:80:bf:ba:cb:4e:d3:e1:02:5e:58:c4:97:78:a6:3b:e5:88:
49:76:41:f3:3f:38:7a:20:eb:94:24:4c:0b:3b:18:f4:7a:b3:
34:b2:c1:61:df:f5:11:07:c8:67:ad:c2:f3:78:6c:42:a4:90:
b8:dd:5b:2d:0b:25:d0:da:81:c4:72:72:e7:5a:6c:66:fc:35:
01:7a:88:5f:c1:3d:2e:91:4e:57:f7:50:cd:47:44:c8:df:72:
6c:33:95:9a:88:82:b1:65:f4:21:8c:6c:57:c5:08:c5:2f:51:
c1:2f:06:4d:04:ed:60:65:95:ba:af:07:c2:35:cc:58:74:55:
c8:05:8c:ea:5a:09:8d:9a:b8:f7:f2:cb:00:3f:23:e5:b4:da:
cd:34:9b:c6:c3:b1:82:ca:4d:8f:26:6d:39:01:03:65:3e:3b:
cb:47:9f:55:da:e8:13:42:9f:c0:88:aa:4e:04:54:a0:c4:7c:
62:b1:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:32 2026 by rpki-client