Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: AzymhqKCrQFZSn/gMnZR2XUb6kx+FNRRQhA/lWdkOUg=
Subject key identifier: BC:3B:4F:A0:DB:44:48:52:D7:A1:1D:6F:2A:C6:AD:42:F3:DE:BC:81
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019E1CB551A64811A8DA361FA117D4100474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:01:45 +0000
Manifest this update: Tue 12 May 2026 15:01:45 +0000
Manifest next update: Wed 13 May 2026 15:01:45 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: jnXZSNQ5a4fmTbtI+ohrLBRQjrFwol6X7KfhVlTn7kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:51:a6:48:11:a8:da:36:1f:a1:17:d4:10:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: May 12 15:01:45 2026 GMT
Not After : May 13 15:01:45 2026 GMT
Subject: CN=bc3b4fa0db444852d7a11d6f2ac6ad42f3debc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:9d:9a:8e:4f:40:0e:1f:ed:e5:54:10:96:
b1:7f:bd:52:9e:93:c7:b1:30:41:9c:2a:a7:74:06:
50:26:15:ba:fc:19:a3:2a:42:68:4a:46:d9:dd:de:
6f:18:a4:60:8c:fa:06:b8:23:0f:76:72:b2:66:9f:
a4:c4:8a:dd:9f:a5:9c:f9:f9:f6:9b:b0:b8:7a:f4:
54:0e:2e:f6:00:f3:ef:18:fe:97:23:a3:07:8e:a9:
f9:44:75:73:36:71:75:a9:ff:20:69:0d:94:b7:62:
15:0a:04:2f:7a:64:21:79:2a:7d:87:ef:d0:db:00:
c7:72:69:47:88:a5:d6:12:e3:07:a8:f3:7a:07:b5:
95:c4:5c:94:30:d3:38:6f:62:da:8c:2e:05:41:be:
17:e9:34:f5:1b:83:68:e2:a1:3b:af:77:03:de:6a:
eb:eb:f2:02:07:af:10:88:b0:2d:da:44:57:2f:fe:
95:05:e6:4a:bb:9f:1c:f5:45:49:f9:b5:56:4a:f8:
c3:54:21:51:ef:dd:02:c9:9a:fa:6d:31:cc:07:06:
e0:4a:4f:45:dc:39:1a:fa:cb:88:44:5c:0d:fd:84:
03:aa:26:ec:11:03:98:4d:df:fb:2c:81:51:22:2d:
36:7f:f8:e2:88:33:a2:a2:a1:ff:b5:ee:ae:12:f8:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:4F:A0:DB:44:48:52:D7:A1:1D:6F:2A:C6:AD:42:F3:DE:BC:81
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:3b:3b:b2:73:3c:d1:da:3f:d9:37:0e:53:47:6f:75:83:
5c:b8:a4:68:d2:08:28:b9:12:42:33:9c:fd:d9:18:26:a3:ac:
ba:20:f0:77:56:f0:14:79:83:59:1b:c5:22:91:c5:26:29:a1:
6c:32:ce:8f:1f:4c:77:b8:c9:ff:3a:95:c8:05:52:47:81:c1:
c6:4b:71:43:85:e7:06:15:61:ba:0b:76:82:f4:ab:cd:a6:68:
e2:ce:09:89:18:5b:79:f6:24:92:16:34:73:d1:7f:c7:4e:7a:
8c:b4:2e:66:c1:7a:d8:d4:95:50:e4:91:de:aa:06:17:86:5f:
78:1c:72:ab:12:1e:a2:00:3d:fc:87:b5:df:8e:30:9e:01:d5:
bf:a3:17:70:32:e3:a6:c1:1f:4b:68:9b:ce:a8:11:f9:e3:f4:
54:a0:35:7d:44:53:83:3c:7b:96:5f:5b:20:18:89:32:b1:53:
fe:f9:29:77:3d:24:76:e9:29:5a:e0:08:b1:5e:20:41:e5:76:
9b:3f:7a:67:25:49:47:b5:3f:20:92:6d:38:6e:d4:c1:86:48:
b9:0c:7f:31:86:3d:7b:4b:e2:b3:29:bb:18:47:74:fd:5e:04:
a8:88:28:5e:fb:c0:49:b4:b7:57:9a:71:91:6d:f9:0d:18:52:
53:05:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:47 2026 by rpki-client