Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 64kJIGXhXqAXWpLTQS6gxeQznQZl8G/GF1SR3+pA5RQ=
Subject key identifier: 1B:B7:A3:58:90:C3:49:AB:C0:62:6D:EF:60:23:32:96:54:30:56:03
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019D2A72783410F5BBC4BE8E4D6753CBE1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0C66
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: oQedT5zw4i79POstgqTK+MipmB/t0vZwIwnx+xuZGh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:78:34:10:f5:bb:c4:be:8e:4d:67:53:cb:e1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=1bb7a35890c349abc0626def6023329654305603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:32:30:dd:d2:8e:33:41:09:95:53:7a:88:
0c:10:e3:63:d1:b9:da:5d:41:22:62:d2:75:1d:33:
d5:fa:6f:e7:3c:e7:8d:f1:0c:20:47:9a:96:9d:e7:
32:9b:09:d4:f8:99:b2:d1:bd:e6:9c:45:4d:b7:01:
5f:3a:cf:b9:6c:e9:d0:6b:c4:23:8a:b9:88:57:96:
4f:fe:c5:7e:2c:c9:c5:9f:3e:9d:43:8e:ba:a8:d2:
4f:6c:bb:3e:86:2c:0a:e2:b0:d6:ce:0d:b0:3c:45:
64:be:15:b1:ba:20:98:90:84:99:5c:7b:b8:ff:51:
55:43:f2:8a:a2:e3:fc:64:b2:ff:f0:f3:d2:1a:a8:
f4:29:60:53:fe:35:fc:07:ef:b0:e1:ae:a2:de:02:
ea:37:16:47:f5:a1:c7:4c:1c:18:83:ca:d8:4c:04:
34:5e:b0:e6:6d:75:ed:16:56:9f:ff:ec:f9:d4:d1:
84:35:e0:29:f0:d1:7b:41:e6:dd:e8:a1:90:bd:8d:
f9:86:3a:7b:fe:73:ba:f2:b8:f6:4e:96:e7:1f:6d:
76:ee:13:21:f1:3c:39:77:95:68:0e:d4:a8:3e:5e:
e3:69:61:7c:4c:3d:34:b2:bb:27:c8:c7:ed:e6:d8:
3e:2a:16:9d:2e:b4:e0:9b:3f:fe:ea:1b:8c:19:db:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:A3:58:90:C3:49:AB:C0:62:6D:EF:60:23:32:96:54:30:56:03
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1c:30:e6:3c:fa:e6:30:42:53:2d:a6:93:6a:24:31:12:a0:
d1:4c:f9:3c:5b:ea:36:ab:2b:58:bd:c1:ad:b1:2c:7c:6c:ea:
3c:1d:d2:9a:34:e1:87:c9:12:f0:a4:31:40:27:c5:45:e4:9c:
20:64:d4:cf:09:c4:fe:ad:0a:b4:2e:91:55:6f:37:b9:7d:42:
12:56:04:0e:d0:90:c6:51:fa:73:2e:bd:2d:ad:2b:d9:c7:1e:
72:9e:ba:63:4c:41:aa:3f:57:00:3a:d8:d1:4a:ee:55:ff:dc:
0c:62:89:54:af:9c:a4:dc:c7:6e:73:1e:36:7d:aa:e6:68:72:
66:6f:f3:c2:7e:c0:7a:d5:38:87:63:94:b9:75:39:2e:d6:3f:
7f:b0:b4:01:24:d4:4b:b7:41:78:0d:10:7c:a7:da:e4:b3:75:
ca:5d:91:34:f5:87:cb:61:e5:fc:5a:4f:da:ba:e2:f0:14:7c:
c4:0c:e7:63:d8:3d:6f:0e:09:ff:b4:62:e7:6f:4a:f9:47:3e:
7f:f0:de:46:d4:74:86:8c:e9:65:e7:2c:6f:db:26:80:c8:3e:
e0:15:7c:69:53:e2:c9:47:f7:29:29:d7:3e:eb:73:31:36:a9:
1e:7c:0e:fa:7a:4d:17:ad:b3:91:b0:41:26:b2:81:6b:69:22:
43:47:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:09 2026 by rpki-client