Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: 76d6P7KmziEvrD9Ehyevw8BiEfnEYUu8HwjyVLM6wUc=
Subject key identifier: 80:78:AA:E5:20:4B:DE:0C:39:59:0A:F6:AA:9A:44:A9:C8:9D:4A:95
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 019D265F8712B0675F077205E75D061604D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: hthEtzRbnIhbO0cDLC5HDDOT3HM.roa (hash: +3qkVIoHin/qJmx9wzoCUkbRVYXeSZvmT+NqhHq3L+Y=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: lUEMLUNHcCCyg2qZ5lts0hes0BGiP0z6K4S9CemNgxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:87:12:b0:67:5f:07:72:05:e7:5d:06:16:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=8078aae5204bde0c39590af6aa9a44a9c89d4a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:bf:35:1a:14:0e:01:76:49:e3:cf:ae:55:
76:0a:8a:eb:5c:44:ba:f5:3e:e2:ec:11:c6:96:cd:
68:e1:fc:e3:ab:6f:29:3e:95:95:53:a1:d8:e5:7d:
8a:66:fb:d0:16:e5:e1:2f:bb:cc:14:28:15:27:68:
68:29:c8:e9:ae:3a:0f:1d:81:f8:13:38:5d:77:89:
5d:e0:56:24:76:24:23:84:ff:fd:db:6d:20:9a:1a:
72:79:dc:48:6c:38:36:0f:d4:f2:76:4e:c2:b6:3f:
96:bd:b5:87:b8:80:b9:67:f1:4e:2e:b6:aa:0d:c5:
b5:85:5d:30:1c:82:d8:d2:14:da:91:81:5f:43:55:
65:b9:8b:14:ad:b5:f9:0a:f3:c4:c0:17:bf:da:a6:
e2:c9:77:ce:d7:f5:82:7c:f4:1e:9d:c4:c1:82:cb:
a4:47:5d:66:62:c2:3e:66:dd:db:db:2e:ea:0d:3f:
cf:cf:39:35:00:85:1f:43:0f:bf:f1:d7:c6:ed:27:
1d:3e:4c:85:fd:c0:05:9d:5e:3d:2f:83:17:1c:83:
c8:3a:8a:eb:16:1c:0f:f7:99:3e:82:b9:6b:97:30:
16:49:63:89:cf:89:20:e8:26:39:dd:6d:bb:b2:6b:
ef:f4:55:a4:b9:55:fa:92:1f:24:1f:78:7c:ac:a9:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:AA:E5:20:4B:DE:0C:39:59:0A:F6:AA:9A:44:A9:C8:9D:4A:95
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0a:47:a1:1e:8e:9b:b3:d6:29:66:29:5a:8e:f0:3e:67:08:
82:e3:a1:ef:89:ae:76:f5:4e:89:52:29:c4:23:86:06:14:91:
51:f6:47:71:7f:57:2f:08:42:48:5a:e3:ef:6b:c9:5f:20:a6:
2e:2f:8a:bc:bc:13:76:1c:48:37:cb:bb:21:bd:3a:ee:2c:cc:
a4:80:7c:71:1a:3c:72:2f:5a:5c:51:a6:32:d0:b6:a1:dc:83:
46:4f:89:10:f4:52:91:c5:04:9f:eb:da:c9:85:f0:92:7e:2f:
ed:c0:e1:8e:ef:89:02:67:0f:8b:68:e0:dc:3f:ba:ac:6f:6f:
69:ba:0d:6c:5c:1c:92:af:31:7b:2f:31:6b:aa:27:9c:93:43:
2d:2b:c7:3a:46:77:21:12:1c:96:f2:f5:ae:53:2a:67:3e:bc:
b2:79:be:57:4c:04:35:63:19:f7:99:52:6a:10:9b:72:4c:ac:
97:a8:e4:f3:2d:7b:d9:68:63:2f:47:c7:6a:9d:d6:52:f0:1a:
0c:24:98:e3:ef:73:02:4c:d9:47:8f:c4:6d:f0:4a:90:bb:62:
b4:8c:70:8e:3d:01:07:ed:64:b4:e0:f5:b5:15:7a:15:a0:db:
b6:95:95:eb:14:99:6e:0e:68:89:6d:b2:ce:6c:86:c4:4a:09:
3f:b7:9b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4cSsGdfB3IF510GFgTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5
NTJiMzQwHhcNMjYwMzI1MTkwMTI3WhcNMjYwMzI2MTkwMTI3WjAzMTEwLwYDVQQD
Eyg4MDc4YWFlNTIwNGJkZTBjMzk1OTBhZjZhYTlhNDRhOWM4OWQ0YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMK/NRoUDgF2SePPrlV2CorrXES6
9T7i7BHGls1o4fzjq28pPpWVU6HY5X2KZvvQFuXhL7vMFCgVJ2hoKcjprjoPHYH4
Ezhdd4ld4FYkdiQjhP/9220gmhpyedxIbDg2D9Tydk7Ctj+WvbWHuIC5Z/FOLraq
DcW1hV0wHILY0hTakYFfQ1VluYsUrbX5CvPEwBe/2qbiyXfO1/WCfPQencTBgsuk
R11mYsI+Zt3b2y7qDT/Pzzk1AIUfQw+/8dfG7ScdPkyF/cAFnV49L4MXHIPIOorr
FhwP95k+grlrlzAWSWOJz4kg6CY53W27smvv9FWkuVX6kh8kH3h8rKk1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB4quUgS94MOVkK9qqaRKnInUqVMB8GA1UdIwQY
MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt
MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj
LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwpHoR6O
m7PWKWYpWo7wPmcIguOh74mudvVOiVIpxCOGBhSRUfZHcX9XLwhCSFrj72vJXyCm
Li+KvLwTdhxIN8u7Ib067izMpIB8cRo8ci9aXFGmMtC2odyDRk+JEPRSkcUEn+va
yYXwkn4v7cDhju+JAmcPi2jg3D+6rG9vaboNbFwckq8xey8xa6onnJNDLSvHOkZ3
IRIclvL1rlMqZz68snm+V0wENWMZ95lSahCbckysl6jk8y172WhjL0fHap3WUvAa
DCSY4+9zAkzZR4/EbfBKkLtitIxwjj0BB+1ktOD1tRV6FaDbtpWV6xSZbg5oiW2y
zmyGxEoJP7eb/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:31 2026 by rpki-client