Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: IlZYXqSTHRGMNlbdEuEpNbf142OTp0H7nLXJ/taZy4o=
Subject key identifier: B4:55:BA:F6:88:16:AB:22:F3:5B:A9:6D:63:C7:72:AC:49:D5:78:44
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019D2695DAF31C5736D4F3013013918FAE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1382
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: xXg61nHEf5wSRygR6pk6VQwLhAbbjMzBMMJS+d9Hp/o=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:da:f3:1c:57:36:d4:f3:01:30:13:91:8f:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=b455baf68816ab22f35ba96d63c772ac49d57844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:96:0f:fd:d1:2b:64:a1:2f:89:b5:e2:0e:
fd:5c:0c:b6:da:18:4d:80:e2:9b:74:53:46:2f:26:
55:a5:d2:0f:e5:6d:81:f7:db:1a:0a:3c:24:7a:1b:
ef:f3:16:c7:2e:11:46:32:8b:7c:db:ca:09:09:f6:
8d:53:ff:4c:f4:96:51:03:b0:0b:56:a0:0c:5b:ce:
2f:2e:4c:ab:75:0e:0d:04:71:03:7b:4d:8c:3e:d2:
c0:8a:46:de:0f:a4:8f:dd:09:86:a0:14:fd:0b:c9:
79:4e:62:20:2b:b1:dd:e5:1f:59:22:fe:e8:2b:32:
f7:d7:24:b5:2d:59:5a:6a:c6:05:3a:b5:04:47:e0:
a0:49:47:cc:d0:c5:58:69:52:a9:89:35:c2:b2:d0:
d5:b0:0e:77:d9:69:73:f6:09:f3:5b:91:cf:2f:ef:
29:d9:99:a4:0e:36:7c:40:f0:ff:78:c5:61:d2:f1:
2e:48:de:bf:1b:ae:0a:0d:cc:ac:bf:68:bc:35:58:
5e:ea:1a:21:36:5f:81:bf:02:fb:e1:1d:f9:ef:d0:
ef:35:81:c3:7a:91:30:ce:bf:d0:5c:52:3d:fd:a9:
3a:3e:cb:92:0b:4c:ec:6b:bb:35:5e:9a:d3:04:d6:
fd:cd:19:d6:aa:42:97:7a:cf:ef:78:83:15:70:a1:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:BA:F6:88:16:AB:22:F3:5B:A9:6D:63:C7:72:AC:49:D5:78:44
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:bf:2d:05:13:ba:73:9d:97:0c:7e:b5:3e:f6:18:99:ff:
db:76:50:c8:47:d2:aa:a8:60:b9:b6:d8:4d:df:fa:76:8c:9c:
c1:cd:38:e9:78:7b:6d:14:da:f5:64:78:57:a3:12:6e:aa:12:
f6:65:ad:37:31:69:87:2c:62:3e:4d:9d:57:48:ba:79:88:53:
b9:b8:1f:a7:0f:4b:ff:3c:a6:bb:c1:c2:81:49:dd:5a:76:af:
d4:1e:96:cf:da:e4:e4:7c:da:43:a8:a6:a2:39:aa:ab:c5:38:
3c:68:50:0c:70:24:1a:cd:df:85:19:81:0e:fd:9e:cc:eb:81:
08:d7:7b:6a:11:66:35:08:e9:82:35:47:a8:cc:e3:02:3c:b2:
38:b3:7f:90:9b:e5:9d:a9:63:2c:17:b7:00:ed:8b:56:0a:df:
5d:c5:ca:fd:50:13:3d:a2:41:61:39:e4:a5:7d:d7:a3:58:3b:
5f:f5:76:2d:0a:0b:59:2a:1f:47:b2:a9:ad:15:6c:f1:bb:b5:
84:00:3f:42:fc:ad:73:b1:85:3f:4e:2f:ec:66:4c:0f:ca:aa:
99:91:85:d6:6d:45:e0:14:ae:79:b8:b1:5a:e6:95:8d:66:1c:
01:db:24:5c:83:c9:2f:0b:7a:5e:2f:be:38:ae:98:76:44:4b:
b4:89:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:27 2026 by rpki-client