Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: eLCUp5gBL2BpzH7OcsFRB+p2PW3pukFKq1HwCo2AJvM=
Subject key identifier: 79:37:A7:9C:A3:6C:24:03:C5:84:BD:3A:E4:4B:4C:E8:90:66:34:7F
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019D2AA942416D597AD6E56AC1D001202472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 120F
Signing time: Thu 26 Mar 2026 15:00:28 +0000
Manifest this update: Thu 26 Mar 2026 15:00:28 +0000
Manifest next update: Fri 27 Mar 2026 15:00:28 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: FAHbGGkA-ockCEhvvrJOayBGiSY.roa (hash: d3khCxUehB5Xaj9d2nF8tun9GlovuretpWutZjjFsR4=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: KIs+Doidxr+WMNt5aYgGEvQQyNkg4TibCCaO6WBBq+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:42:41:6d:59:7a:d6:e5:6a:c1:d0:01:20:24:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Mar 26 15:00:28 2026 GMT
Not After : Mar 27 15:00:28 2026 GMT
Subject: CN=7937a79ca36c2403c584bd3ae44b4ce89066347f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:85:48:c5:b2:ef:a7:a0:2f:ad:80:0e:05:
ed:23:96:1c:4e:54:08:42:eb:c7:d0:11:85:58:2b:
c4:40:c5:a9:95:8c:04:57:b9:73:c4:eb:c5:5b:2d:
5a:d9:21:73:7e:04:5c:eb:72:20:d1:fa:0d:c3:d5:
91:c7:fc:89:1b:46:54:03:d6:99:a1:3e:0f:8a:5f:
20:db:02:e8:16:a4:83:b2:47:d4:c1:fd:6e:70:9d:
3f:49:0f:49:39:24:33:61:0a:1d:a6:c9:8a:34:69:
9b:fb:76:24:69:35:37:26:9d:a6:94:bd:9c:24:a4:
b0:ce:58:6b:cc:f6:8f:da:75:db:4c:ea:47:57:0c:
b5:37:4b:73:95:72:ef:37:f9:10:e7:cb:ce:f2:ae:
a3:58:9a:75:82:1b:b7:f2:25:a3:b0:b7:a0:ef:1c:
01:71:ec:cd:74:ee:cd:69:cf:1e:9c:fe:5c:34:ab:
d7:b6:73:ff:16:c3:40:30:cb:95:86:ba:d3:a6:a5:
e5:b7:d0:c1:97:cc:7c:bc:33:aa:67:45:e9:06:aa:
db:0f:68:83:3e:ae:1b:05:d2:cb:b4:a1:35:03:3f:
f2:0a:6c:a0:f5:1b:fe:37:b9:94:37:b3:1a:80:b3:
7a:0b:98:c3:d4:9c:79:bb:4a:5e:c8:43:78:98:2e:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:A7:9C:A3:6C:24:03:C5:84:BD:3A:E4:4B:4C:E8:90:66:34:7F
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:b0:99:db:15:6a:81:83:aa:a5:41:0d:ff:70:df:08:46:
29:70:0b:47:b2:0e:cb:2b:6f:48:fa:de:1d:08:27:04:5f:c8:
a9:aa:fb:79:c0:76:af:0d:ce:28:65:43:67:22:5e:f4:58:48:
c3:2f:7f:df:f3:5b:cc:96:2a:cd:68:6a:98:73:96:51:50:a0:
48:4e:4f:a4:96:0b:91:88:f8:00:db:53:d7:4b:66:f3:68:ee:
6a:9f:1a:79:1e:8a:0f:c6:61:22:ce:71:cc:17:d1:d1:a4:52:
fc:99:f9:96:50:00:23:ea:83:84:ed:63:3f:4f:c9:e9:dd:69:
66:28:1b:00:c4:38:16:57:b5:c0:43:61:5d:83:2a:00:74:4b:
f0:cd:57:9c:dc:e9:73:6b:fa:ba:46:38:fe:ab:25:4b:97:08:
b5:46:c3:fb:ae:c9:1e:f4:33:07:6f:26:5f:23:3c:43:e9:8d:
a2:06:cf:f7:4b:f6:02:0e:6d:de:d3:5f:e3:f6:67:ca:58:d3:
57:ad:e8:8a:b9:d6:3f:ca:4b:12:04:c0:d6:c9:e7:97:db:92:
8a:f4:2e:e2:17:28:d9:2d:44:03:53:98:91:a1:cd:6c:99:1a:
33:0f:7d:7c:17:b6:48:d1:9a:31:0c:74:9d:71:a1:05:53:14:
a8:71:e5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:09 2026 by rpki-client