Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: ouAEtnDfr7JiKwjKyEWmhQ0KPcWrByRmty0N2PWKjUM=
Subject key identifier: 6D:D6:E0:1C:2E:3D:16:7A:D2:58:E6:F3:6C:76:EC:26:37:F1:59:86
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019D258420ADF762F3892BB5969DDB95B45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:49 +0000
Manifest this update: Wed 25 Mar 2026 15:01:49 +0000
Manifest next update: Thu 26 Mar 2026 15:01:49 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: h1a7jxU2J3pM3hRHc7hPMFsJHEf5V5a7G9doAWPzyj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:20:ad:f7:62:f3:89:2b:b5:96:9d:db:95:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Mar 25 15:01:49 2026 GMT
Not After : Mar 26 15:01:49 2026 GMT
Subject: CN=6dd6e01c2e3d167ad258e6f36c76ec2637f15986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:6f:33:69:86:4c:d8:39:2b:3a:f9:0e:fc:
38:0c:d7:36:ed:ea:b4:ae:5a:58:2a:bc:c2:fb:8e:
6c:b3:7b:d1:b8:ed:bd:7b:1e:6b:66:fc:25:d2:f5:
8b:55:2d:0e:2e:5b:49:6b:f2:90:b9:b9:65:72:72:
4a:56:60:3c:2f:1d:f5:50:60:cd:3d:21:f4:b0:f6:
17:63:c1:8a:33:44:86:f7:ab:c8:50:34:29:81:f5:
85:5c:d9:eb:01:e7:4c:dd:24:12:bb:7c:fc:8c:e7:
75:03:56:b1:6f:b2:ba:cf:10:13:bb:d7:3f:42:20:
fd:a4:32:02:2d:4c:25:72:0a:e2:a3:b2:1b:29:fd:
2f:d5:ea:aa:85:6a:54:64:74:81:a2:49:ab:7e:c1:
de:84:8d:52:87:68:da:f4:c2:ca:d7:a7:6f:d8:a5:
e3:d2:af:e8:ca:27:49:70:c4:e2:6f:cc:74:e5:c1:
bd:ff:9a:6d:80:34:8a:7a:4e:08:7c:d1:32:b5:7b:
a3:d9:e8:2a:db:7f:b9:25:58:a2:29:bd:5c:e2:60:
ae:6a:fd:7c:96:72:2b:f5:f1:07:ac:8d:71:aa:f4:
d7:51:93:1a:c8:04:15:b3:58:4c:92:d4:4f:73:98:
e8:84:d6:b6:97:86:a3:af:a0:9e:11:4e:a6:db:b4:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D6:E0:1C:2E:3D:16:7A:D2:58:E6:F3:6C:76:EC:26:37:F1:59:86
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:2d:cf:dd:5a:c2:ab:84:35:bc:86:47:c2:4a:8b:ba:d1:
37:3e:40:de:ec:c3:17:36:eb:af:fe:31:90:45:e6:e0:02:a9:
cc:68:14:6a:c8:a5:10:ad:cb:7c:c3:d8:14:a1:cb:6a:fc:1c:
8d:e7:ba:67:7a:d2:d4:4c:2e:b3:06:b3:82:04:1d:c1:b9:48:
49:5a:4b:78:09:b2:db:3d:b6:6c:23:7e:49:52:d1:66:96:60:
d3:a0:62:e7:6c:a3:69:cb:c3:64:52:d0:d5:03:77:d0:03:59:
a4:af:92:b6:94:3f:2b:37:50:b4:60:f5:7e:9b:9e:90:d5:75:
0f:27:a0:90:21:4c:f3:68:6a:4a:53:7b:6e:85:c0:ba:49:01:
6c:1a:dd:48:8a:8c:f5:f6:40:3f:20:40:43:88:15:8e:70:60:
a6:a1:b5:49:e6:47:d1:a1:63:53:05:6b:6d:02:b6:94:a6:ff:
f6:66:72:16:ad:c5:68:90:f6:97:8e:30:68:b6:d5:48:60:dd:
6e:4c:83:fd:b0:55:03:87:36:0f:b5:7f:b2:f6:dd:c2:33:d4:
72:d8:ff:94:f8:ff:0c:2e:fa:3c:9e:f1:d7:08:55:68:05:03:
44:79:88:6f:c8:62:05:ac:32:39:da:3d:bb:c9:36:7f:ff:09:
45:e9:e6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:51 2026 by rpki-client