Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: ++RCSP/1vM/FTvSZVTqQJObmxWbqxGLM2vgUZKlxYU0=
Subject key identifier: 8A:88:8C:FA:AA:46:7B:29:90:D2:A2:08:81:6F:39:D1:9B:46:A4:50
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019D28164E984C9D6C8B96F2A61107BD38DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0B37
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (hash: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: SgNKT+fbivOTZlZ58IM7JfFWa8uwldu37jaKoyhwMrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4e:98:4c:9d:6c:8b:96:f2:a6:11:07:bd:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=8a888cfaaa467b2990d2a208816f39d19b46a450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:9a:82:a6:96:44:77:d0:22:02:fd:19:35:
d1:4e:17:1c:43:2b:ae:a8:50:9a:c3:51:4d:5f:fa:
d3:0c:f2:e0:eb:79:f9:a7:38:da:f6:29:80:95:22:
11:43:50:3e:da:6c:63:ad:0d:87:d6:0e:43:ac:76:
ea:e5:87:6e:1d:39:c9:cc:c4:62:ba:2f:0a:04:0d:
88:c7:50:c1:5a:72:44:bc:fd:92:a6:55:a6:08:b0:
45:e0:4e:4f:77:a9:ca:c9:ba:79:7e:e0:c3:ed:3c:
c5:db:76:5b:42:91:d0:d8:dc:55:e6:07:16:dd:f5:
9e:68:b1:fd:ee:d8:1b:f0:b4:2f:ca:38:a1:55:a5:
0d:28:d5:ca:23:38:e4:08:fa:48:4a:ab:99:44:65:
51:a8:92:b1:22:62:3d:96:bf:4a:fc:55:df:d9:d3:
31:18:e1:55:9a:9c:3b:e3:b2:db:67:6e:f1:02:d6:
80:75:e8:d4:20:a6:2a:fe:ec:cc:ca:e5:00:6e:79:
84:2f:14:8e:c7:3c:6b:b7:53:19:87:0d:0b:f7:50:
a7:d6:b2:b4:21:2c:7f:30:4d:5b:31:fc:24:1a:5f:
ea:a9:65:e9:60:f8:32:9c:9e:21:7c:2c:e3:89:a9:
a3:63:0b:02:2a:83:29:ec:27:79:4f:90:56:95:48:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:8C:FA:AA:46:7B:29:90:D2:A2:08:81:6F:39:D1:9B:46:A4:50
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:31:20:22:f0:b6:26:57:30:47:bd:f6:9f:7a:85:b1:d1:45:
48:7a:40:e7:01:de:3e:d7:fc:a6:65:2a:c1:35:fb:dd:6c:55:
37:f0:02:63:c8:00:9c:0b:1a:a7:cd:a5:79:16:e2:c3:29:2f:
77:a1:c0:82:ce:e7:7a:c4:b2:60:6d:ad:64:47:0b:2d:10:f3:
57:3e:ff:79:c5:08:18:68:74:0a:f8:0e:8d:d8:c0:ef:70:33:
0a:3b:b3:cf:3a:9e:5c:11:8c:13:28:b1:c4:13:29:07:a5:51:
76:c0:ab:c2:6a:1f:f6:3c:d3:23:6d:fc:20:d2:03:f4:26:b2:
d4:70:6d:7f:4a:5c:74:53:24:61:b0:30:99:7c:c9:f8:91:d6:
68:ec:99:cc:d4:d9:02:9f:30:97:f4:77:dc:72:c6:fd:3b:e4:
9a:ca:fe:ed:a1:6e:cc:e9:b6:73:c7:75:91:de:ef:9c:8c:44:
e7:da:1f:02:e0:4d:e6:6b:eb:0f:d0:b7:82:1b:01:d7:9b:4d:
67:5b:b0:c2:5f:c0:ba:13:7d:39:60:8d:e3:4b:b0:8d:d5:49:
e6:51:99:c4:f4:9f:1b:7d:32:21:50:4f:00:bb:4f:22:cc:7e:
d9:04:72:6e:61:94:4f:c1:a9:9f:12:75:98:1a:3b:9c:79:f8:
54:0c:4d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFk6YTJ1si5byphEHvTjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjYwMzI2MDMwMDQzWhcNMjYwMzI3MDMwMDQzWjAzMTEwLwYDVQQD
Eyg4YTg4OGNmYWFhNDY3YjI5OTBkMmEyMDg4MTZmMzlkMTliNDZhNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiagqaWRHfQIgL9GTXRThccQyuu
qFCaw1FNX/rTDPLg63n5pzja9imAlSIRQ1A+2mxjrQ2H1g5DrHbq5YduHTnJzMRi
ui8KBA2Ix1DBWnJEvP2SplWmCLBF4E5Pd6nKybp5fuDD7TzF23ZbQpHQ2NxV5gcW
3fWeaLH97tgb8LQvyjihVaUNKNXKIzjkCPpISquZRGVRqJKxImI9lr9K/FXf2dMx
GOFVmpw747LbZ27xAtaAdejUIKYq/uzMyuUAbnmELxSOxzxrt1MZhw0L91Cn1rK0
ISx/ME1bMfwkGl/qqWXpYPgynJ4hfCzjiamjYwsCKoMp7Cd5T5BWlUhIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqIjPqqRnspkNKiCIFvOdGbRqRQMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTEgIvC2
JlcwR732n3qFsdFFSHpA5wHePtf8pmUqwTX73WxVN/ACY8gAnAsap82leRbiwykv
d6HAgs7nesSyYG2tZEcLLRDzVz7/ecUIGGh0CvgOjdjA73AzCjuzzzqeXBGMEyix
xBMpB6VRdsCrwmof9jzTI238INID9Cay1HBtf0pcdFMkYbAwmXzJ+JHWaOyZzNTZ
Ap8wl/R33HLG/Tvkmsr+7aFuzOm2c8d1kd7vnIxE59ofAuBN5mvrD9C3ghsB15tN
Z1uwwl/AuhN9OWCN40uwjdVJ5lGZxPSfG30yIVBPALtPIsx+2QRybmGUT8GpnxJ1
mBo7nHn4VAxNdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:35 2026 by rpki-client