Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: BB25J0sD/NCOpwFD28y9JJ/CZnac+mCAygKLki4s/iI=
Subject key identifier: DC:C4:1C:A1:D3:79:0A:11:7C:D3:31:17:77:16:45:D9:15:41:B9:1A
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 019D2929115F4E9B8B1F7AF240052ABB88FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0DFC
Signing time: Thu 26 Mar 2026 08:00:50 +0000
Manifest this update: Thu 26 Mar 2026 08:00:50 +0000
Manifest next update: Fri 27 Mar 2026 08:00:50 +0000
Files and hashes: 1: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: /C247UQ9b45b5EcCKXm+I6mSdq88kSfTinF9xFVS+e4=)
2: QK0mOdG40zIzUlHnuUgQoD_cUNo.roa (hash: zxJjpxSeZ9UWE8WyEG7kXzpGqf6oWC16IltjE0DZr50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:11:5f:4e:9b:8b:1f:7a:f2:40:05:2a:bb:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Mar 26 08:00:50 2026 GMT
Not After : Mar 27 08:00:50 2026 GMT
Subject: CN=dcc41ca1d3790a117cd33117771645d91541b91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:35:1a:16:f6:24:2d:8f:fb:99:7b:c8:07:
fe:5f:94:f3:f3:bf:bc:ea:e9:f7:43:59:70:aa:0e:
51:4d:0d:0a:20:9c:be:89:77:a4:10:a9:cf:74:2e:
4c:ad:ea:50:05:98:65:de:46:38:31:af:52:8a:26:
a4:f4:4a:a5:58:51:9d:1c:46:18:7e:38:1d:da:00:
a7:ef:70:45:b5:90:19:97:46:09:b8:cd:75:50:b9:
5c:05:2b:ee:3e:37:d0:e6:cc:3b:26:2d:f5:f8:04:
9b:3e:94:eb:83:08:1d:02:4a:66:25:f6:4c:48:af:
4a:37:c2:28:20:ef:99:a3:1e:f0:11:5c:c1:5a:b5:
c2:30:da:c2:c8:a3:ed:f0:25:99:e6:48:5a:6e:14:
7b:e5:21:4d:ee:9b:70:f5:78:13:49:37:5f:80:28:
4d:6d:db:a9:d5:b7:8b:a9:13:9a:a2:4f:6a:0c:14:
f1:72:07:27:b4:08:04:f8:bb:43:a0:8e:6b:e0:36:
aa:6e:83:a8:73:f7:18:81:ee:ff:df:f1:0a:62:4f:
3b:b1:a2:ee:22:d9:10:a6:ca:60:9a:2b:26:b4:72:
6a:4a:55:43:d1:d8:49:24:96:65:e0:2f:2e:35:62:
87:ac:ad:ad:bc:45:37:bd:5e:bb:d5:34:bd:0c:e8:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:1C:A1:D3:79:0A:11:7C:D3:31:17:77:16:45:D9:15:41:B9:1A
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:78:19:f7:e0:52:43:9e:59:51:c9:36:8f:76:2f:ba:0d:5f:
7c:6a:74:62:27:7e:6d:7e:2e:74:2a:5c:38:a3:5f:86:5b:ed:
fe:c5:3d:44:05:ca:c9:94:0d:96:b5:12:49:18:66:26:3d:66:
58:f1:fc:ef:15:a2:ba:84:ce:ab:09:62:ed:9f:34:2b:86:f4:
65:87:35:d0:6a:95:f0:82:cb:9a:7a:c5:06:2c:58:b5:d4:a9:
1a:2d:c2:a5:d8:05:11:37:ab:cc:80:59:b9:d5:fe:24:d6:7d:
c1:5a:18:96:84:cc:a1:9f:02:fd:e5:76:bd:3f:b9:c5:3f:42:
5c:f3:ff:76:2a:30:94:c4:e5:52:86:5a:f1:4d:22:4c:3c:6e:
80:ad:cc:f8:6e:a5:e9:e3:4c:6b:da:71:f4:09:fa:5c:c3:3f:
21:d2:bc:7d:96:07:e2:2d:00:fa:97:4e:5b:ff:bf:c0:1e:56:
ff:40:8b:3c:3d:18:f6:30:44:16:cf:e2:40:fa:2b:16:12:7a:
03:c0:e7:e6:ef:85:de:a0:6d:13:7c:f0:86:07:a5:e8:7e:72:
09:09:0b:08:23:55:1a:6b:ef:a5:a1:49:6f:fe:48:9c:a4:5e:
3e:54:37:64:45:76:6b:9f:1a:89:6b:03:9c:94:f3:cc:dc:34:
a2:b1:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:45 2026 by rpki-client