Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: TYlh4Qb860FGpWfY0Fz6r0nAT50gRUco3fmoXJ6wpfI=
Subject key identifier: 5B:71:73:C4:0E:2A:CB:C8:59:DB:14:70:63:EF:D4:B4:85:4A:D2:B0
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01A0E218A363F32DB9FF12558379B526B70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 13FC
Signing time: Sun 27 Sep 2026 09:01:00 +0000
Manifest this update: Sun 27 Sep 2026 09:01:00 +0000
Manifest next update: Mon 28 Sep 2026 09:01:00 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: seBYGHzgs8FSb00B+24r4quoWNGqRxe7hef8gdJGfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:a3:63:f3:2d:b9:ff:12:55:83:79:b5:26:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Sep 27 09:01:00 2026 GMT
Not After : Sep 28 09:01:00 2026 GMT
Subject: CN=5b7173c40e2acbc859db147063efd4b4854ad2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:99:90:97:d8:d2:db:3d:8f:3b:a4:b4:80:
d2:04:f4:00:df:a7:83:67:96:bb:3f:0c:31:a5:e5:
df:16:bb:b3:8c:67:1b:6f:a8:91:91:50:d4:b9:b3:
d7:ff:0d:c2:25:49:6b:0a:f1:ae:f6:82:3c:e7:1b:
c5:35:89:f8:5f:15:99:03:28:f7:e9:df:17:d9:7e:
9f:f9:f5:fa:fb:9d:9a:d3:ad:08:09:fa:c2:65:62:
ed:fb:90:3e:f5:1b:65:50:66:78:a6:84:58:1b:60:
fd:23:04:f7:73:b9:ba:60:95:34:46:70:f7:4e:05:
2d:96:ab:ac:49:e0:8b:cd:ef:76:8a:bc:ab:cf:bb:
39:f7:e3:78:1a:28:f4:68:88:12:ee:be:35:d8:61:
4c:10:92:cb:37:a9:38:c0:f0:41:39:4a:6f:85:92:
6c:b7:c6:65:70:c3:18:df:80:a6:66:28:04:a2:b4:
2c:1d:8a:7e:26:26:ac:43:06:b7:a5:fb:84:e9:34:
dc:64:ce:6e:d1:0f:7b:8a:e5:e2:33:8c:fe:b6:9b:
e1:37:b3:75:d6:17:79:a4:39:90:53:8f:4c:50:33:
4d:5d:e1:da:6d:63:7d:23:34:88:64:a6:49:9e:30:
13:07:d3:f3:b4:16:47:09:7c:99:d4:17:90:66:38:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:73:C4:0E:2A:CB:C8:59:DB:14:70:63:EF:D4:B4:85:4A:D2:B0
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:08:7d:ae:84:06:2c:7f:e8:ab:3e:0e:29:e7:36:44:be:
07:a9:0f:b6:89:28:e9:1e:7e:cc:21:69:11:79:a2:c9:ad:9a:
db:cf:2a:f3:0d:6a:93:81:fd:b8:47:b2:7e:88:2f:ef:bb:36:
d7:47:63:64:f3:0c:d1:b7:9b:99:88:8c:47:b8:7d:82:17:95:
14:00:f1:0d:04:50:fa:df:b2:89:26:56:ee:88:e7:76:4d:aa:
2d:7c:f4:92:81:30:07:36:85:ae:00:1a:39:06:6d:01:28:16:
e9:fe:c4:ea:bb:f7:32:5d:04:5e:53:f2:22:b3:2f:cc:8f:93:
8f:98:c0:3e:24:d4:61:c4:8e:e0:c6:1c:2f:f2:a1:49:b8:37:
f9:38:ce:c9:7d:75:84:d0:e5:86:76:40:e5:44:b5:8b:58:9e:
e3:98:6e:22:0f:a9:8b:c2:ed:c0:dd:28:86:92:28:bd:6c:4d:
fb:9d:01:55:53:13:21:7d:6c:89:a9:14:f0:9d:d4:e6:33:4a:
f1:cc:a0:59:a2:8c:56:86:e9:79:57:c2:6b:83:1b:77:00:43:
74:a1:3b:7b:47:35:5e:5a:b7:f1:ba:6f:b6:ba:93:42:66:5d:
e8:59:21:f3:4d:89:7b:34:e6:62:d0:46:aa:2f:f9:be:7f:45:
25:2b:42:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiGKNj8y25/xJVg3m1JrcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0
ODc2MDgwHhcNMjYwOTI3MDkwMTAwWhcNMjYwOTI4MDkwMTAwWjAzMTEwLwYDVQQD
Eyg1YjcxNzNjNDBlMmFjYmM4NTlkYjE0NzA2M2VmZDRiNDg1NGFkMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU2ZkJfY0ts9jzuktIDSBPQA36eD
Z5a7PwwxpeXfFruzjGcbb6iRkVDUubPX/w3CJUlrCvGu9oI85xvFNYn4XxWZAyj3
6d8X2X6f+fX6+52a060ICfrCZWLt+5A+9RtlUGZ4poRYG2D9IwT3c7m6YJU0RnD3
TgUtlqusSeCLze92iryrz7s59+N4Gij0aIgS7r412GFMEJLLN6k4wPBBOUpvhZJs
t8ZlcMMY34CmZigEorQsHYp+JiasQwa3pfuE6TTcZM5u0Q97iuXiM4z+tpvhN7N1
1hd5pDmQU49MUDNNXeHabWN9IzSIZKZJnjATB9PztBZHCXyZ1BeQZjghdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtxc8QOKsvIWdsUcGPv1LSFStKwMB8GA1UdIwQY
MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt
OTMyZDE2YjA4ZGYwLzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw
LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM4Ifa6E
Bix/6Ks+DinnNkS+B6kPtoko6R5+zCFpEXmiya2a288q8w1qk4H9uEeyfogv77s2
10djZPMM0bebmYiMR7h9gheVFADxDQRQ+t+yiSZW7ojndk2qLXz0koEwBzaFrgAa
OQZtASgW6f7E6rv3Ml0EXlPyIrMvzI+Tj5jAPiTUYcSO4MYcL/KhSbg3+TjOyX11
hNDlhnZA5US1i1ie45huIg+pi8LtwN0ohpIovWxN+50BVVMTIX1siakU8J3U5jNK
8cygWaKMVobpeVfCa4MbdwBDdKE7e0c1Xlq38bpvtrqTQmZd6Fkh802JezTmYtBG
qi/5vn9FJStCXA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:08:24 2026 by rpki-client