Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File: NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier: 9ZB9o/Wr49I1mBfQvZbAmKuHJV2kon5a1Xg0U5W86VE=
Subject key identifier: E0:E1:72:21:5C:3B:43:0F:F4:41:C2:E9:C3:48:EB:2C:6D:49:E1:C8
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 01A0C1B1FAB4625C60F0E8649349517390D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number: 1201
Signing time: Mon 21 Sep 2026 02:01:01 +0000
Manifest this update: Mon 21 Sep 2026 02:01:01 +0000
Manifest next update: Tue 22 Sep 2026 02:01:01 +0000
Files and hashes: 1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: wyRng0Bz/yFz4M1iwm1+9LSkeccQsJLW0Cy1Zdyu//g=)
2: PeLr2BziwgZdAzAKlVzH-U_78ms.roa (hash: bgwXNSpJ3Q8MN43UYPBzwd7i65W69TJleOzdWr1Mf0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:fa:b4:62:5c:60:f0:e8:64:93:49:51:73:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Sep 21 02:01:01 2026 GMT
Not After : Sep 22 02:01:01 2026 GMT
Subject: CN=e0e172215c3b430ff441c2e9c348eb2c6d49e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:ad:9b:f3:da:fd:e5:6a:86:d5:04:80:39:
34:fc:58:5c:73:e8:75:bf:85:fa:c4:2c:ca:3a:19:
d9:c0:76:c6:e2:2d:27:e0:59:e2:d8:b5:09:49:57:
f0:b1:2f:4b:1c:25:25:e1:43:e3:1e:3a:a3:f9:8b:
7f:b7:17:5d:71:4b:f7:a1:a0:28:32:1c:96:34:c6:
36:2e:fb:f7:71:a7:15:9b:60:81:47:42:21:e1:a4:
31:a8:8c:08:27:88:17:6d:9b:5a:f2:8b:5b:9a:c3:
2e:2a:fc:37:44:dc:30:c2:e5:77:54:f6:82:66:96:
c0:4e:c8:cf:c3:05:b8:83:ed:1f:73:f0:c4:e8:6c:
c5:c8:c2:f5:dd:ee:59:e3:a3:fc:be:c8:be:e7:64:
74:8a:b6:ef:40:2d:f8:43:46:b4:fd:06:4f:4d:b7:
6a:91:c6:e9:3f:e7:b9:a2:f2:e1:51:89:07:74:f7:
e6:41:a8:0d:f9:a1:b0:6c:69:8a:7d:b7:1f:0f:b7:
5b:28:14:1c:de:94:a0:56:36:a6:ca:99:82:45:89:
0e:82:cb:3e:48:d0:c4:0d:32:85:39:31:67:fd:da:
18:64:18:bb:56:fe:49:ad:60:8e:cb:38:97:97:bd:
76:47:67:1d:6a:8c:a8:43:f3:1b:0e:a6:ff:dd:eb:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E1:72:21:5C:3B:43:0F:F4:41:C2:E9:C3:48:EB:2C:6D:49:E1:C8
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d8:09:52:46:e8:bc:a3:85:8e:1c:49:5f:8d:f6:0a:6c:b2:
3f:ef:b4:46:9a:97:a8:00:1d:28:ba:90:a7:92:70:a3:4e:5b:
7f:ed:a0:c3:d1:6b:71:98:43:16:bf:f1:0f:f6:ce:f3:93:65:
10:a8:4d:aa:eb:a5:f4:de:bc:8a:fb:8d:7c:87:e6:ff:c5:29:
1b:c5:43:73:29:0b:a2:de:ae:78:97:c4:59:48:c0:2a:bd:35:
f2:7b:5d:0f:3b:ec:0e:d0:77:4d:c0:56:74:37:0c:3e:b7:87:
56:fb:91:3a:03:9d:ee:4d:86:f9:68:19:8f:7e:1e:06:89:e8:
bf:44:c7:85:7a:9d:3f:b0:aa:8b:44:bf:96:e2:1d:e1:c0:de:
4e:c5:e0:f1:a1:8b:83:36:f6:73:5f:6f:8a:c0:25:6a:31:b7:
3f:df:b7:80:32:4e:e0:2a:8d:8b:f4:ff:ab:08:8a:8f:1a:47:
07:0c:b3:3f:48:dd:cb:8e:69:c7:bc:14:5a:07:a9:83:af:ae:
51:40:a9:3d:57:b7:f4:c1:5c:bf:ca:7b:86:e0:4f:1c:e8:e2:
95:b4:ee:a1:e7:4a:ec:6c:a3:a4:65:57:74:de:0f:55:36:4c:
4e:ed:77:11:24:8a:79:22:b4:e8:56:af:9e:00:4f:62:fe:18:
04:2e:fe:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsfq0Ylxg8Ohkk0lRc5DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjVmNzU0MDA0ZWRiZTMwYWI4Y2FmZWVmOWY3MTMyY2Iw
YzI0MTcwHhcNMjYwOTIxMDIwMTAxWhcNMjYwOTIyMDIwMTAxWjAzMTEwLwYDVQQD
EyhlMGUxNzIyMTVjM2I0MzBmZjQ0MWMyZTljMzQ4ZWIyYzZkNDllMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Ctm/Pa/eVqhtUEgDk0/Fhcc+h1
v4X6xCzKOhnZwHbG4i0n4Fni2LUJSVfwsS9LHCUl4UPjHjqj+Yt/txddcUv3oaAo
MhyWNMY2Lvv3cacVm2CBR0Ih4aQxqIwIJ4gXbZta8otbmsMuKvw3RNwwwuV3VPaC
ZpbATsjPwwW4g+0fc/DE6GzFyML13e5Z46P8vsi+52R0irbvQC34Q0a0/QZPTbdq
kcbpP+e5ovLhUYkHdPfmQagN+aGwbGmKfbcfD7dbKBQc3pSgVjamypmCRYkOgss+
SNDEDTKFOTFn/doYZBi7Vv5JrWCOyziXl712R2cdaoyoQ/MbDqb/3evkQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODhciFcO0MP9EHC6cNI6yxtSeHIMB8GA1UdIwQY
MBaAFDcl91QATtvjCrjK/u+fcTLLDCQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMt
NzRhZmMzMDQzYjc4LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zYzkxYTgtMDgwYi00ZTVhLWI4YzMtNzRhZmMzMDQzYjc4
LzEvTnlYM1ZBQk8yLU1LdU1yLTc1OXhNc3NNSkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtgJUkbo
vKOFjhxJX432CmyyP++0RpqXqAAdKLqQp5Jwo05bf+2gw9FrcZhDFr/xD/bO85Nl
EKhNquul9N68ivuNfIfm/8UpG8VDcykLot6ueJfEWUjAKr018ntdDzvsDtB3TcBW
dDcMPreHVvuROgOd7k2G+WgZj34eBonov0THhXqdP7Cqi0S/luId4cDeTsXg8aGL
gzb2c19visAlajG3P9+3gDJO4CqNi/T/qwiKjxpHBwyzP0jdy45px7wUWgepg6+u
UUCpPVe39MFcv8p7huBPHOjilbTuoedK7GyjpGVXdN4PVTZMTu13ESSKeSK06Fav
ngBPYv4YBC7+aw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:44:37 2026 by rpki-client