Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 4hGbkdE8QClojpBVfkDAp2dfwOj54mK1ZuA+NI2WIpM=
Subject key identifier: 99:BC:37:31:D9:36:8E:E4:32:AB:A4:DA:6E:F4:E0:35:80:9C:E9:E3
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 019CAAFD92F4C33F1D8018E5ACB106FD5EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 0FE3
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: pDjaQKmVJZ1/ifFnMBnK8XwSd0LeIIlmhafoduc44LE=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:92:f4:c3:3f:1d:80:18:e5:ac:b1:06:fd:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=99bc3731d9368ee432aba4da6ef4e035809ce9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:1c:7b:a0:bb:7f:bc:29:d4:7a:fb:69:f6:
05:e3:7b:b6:f2:90:c4:da:4c:e4:95:34:2b:6a:f7:
37:93:63:e8:50:5b:03:06:ac:1c:82:ca:24:16:ee:
00:38:23:6f:71:da:75:b4:70:51:f7:89:92:74:78:
2c:9b:49:f4:b3:ed:34:39:47:e9:ce:e4:53:59:81:
7e:3c:68:53:8a:ce:3e:f2:a3:aa:e5:34:91:c5:f9:
58:20:87:49:0a:31:c3:7d:1d:9c:d0:fc:f2:be:7a:
56:61:d5:16:a2:fd:a9:50:00:7e:43:7c:01:b0:97:
d2:c6:11:8a:09:da:62:78:f1:18:d8:0f:de:b3:ab:
66:d5:4c:ab:9f:be:39:ee:28:e4:db:03:c8:6a:51:
ab:66:98:e7:40:93:20:01:7e:30:21:71:bf:3e:10:
e4:8e:a9:2f:32:6b:17:17:f5:92:c7:a9:6f:44:35:
09:00:f1:eb:b6:f5:eb:fb:d0:1e:fc:20:24:6e:02:
c8:40:5a:7b:8a:2c:5a:51:fa:be:7b:a3:2a:27:e2:
3e:9e:9d:17:91:58:5b:5e:bd:4a:b4:7b:92:9e:e4:
bd:80:e9:9b:09:7b:a5:94:02:9b:80:03:6c:fc:f4:
79:c5:a0:69:1d:0e:19:8b:51:30:dd:7e:49:f1:1a:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:37:31:D9:36:8E:E4:32:AB:A4:DA:6E:F4:E0:35:80:9C:E9:E3
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:a1:0f:af:e0:3e:4c:5f:86:09:5a:e5:af:26:d4:32:4e:
e1:bb:95:5a:41:57:99:cc:f4:0e:7a:ca:e1:cb:99:cc:9c:49:
a5:83:5a:06:ec:9c:04:98:f6:5f:87:b1:3d:31:90:44:cc:1c:
59:88:ad:5f:18:23:94:97:89:8a:ce:cf:7a:90:04:56:2f:29:
78:09:37:0e:18:85:97:c5:28:57:66:88:ce:78:db:e1:42:41:
33:43:1f:a4:32:9c:60:10:79:3c:a8:86:82:ba:89:cf:ed:6d:
59:1f:ab:dd:73:4b:2c:b2:23:cb:70:15:16:55:68:7a:37:74:
4b:be:9b:b5:de:3b:e9:4c:03:c2:2a:19:f6:10:d6:c8:c5:7a:
bf:66:fb:9b:27:2c:6d:82:25:8d:e0:5b:b4:06:86:99:bd:22:
21:58:02:98:ca:f4:5f:8a:cc:e3:b2:00:45:25:db:5d:06:05:
22:32:ba:11:44:69:97:03:11:74:9d:96:7d:16:b6:0d:31:37:
4c:88:6e:60:b1:21:68:9c:f2:25:11:a4:b1:08:04:cf:62:b9:
92:83:22:67:5d:93:79:40:a9:03:d6:b6:e0:87:ab:73:8b:81:
1d:9b:83:55:f9:7e:7e:22:52:02:75:79:5a:59:55:d0:7a:10:
0d:3e:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:21 2026 by rpki-client