Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: yM0P6DlXQG4bgatmRvP/M3pKemLVuFU3HROsz6/Cy0I=
Subject key identifier: F9:0D:27:3B:4E:39:74:3F:82:7E:D1:77:F2:89:02:47:CE:51:BA:D0
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019D262825F19F5DE60CDE4ED0BD12F265A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 140C
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: ZrNIEXRyOHPhHpfHTKVTflUJVjsDXkqo3naMscaMvp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:25:f1:9f:5d:e6:0c:de:4e:d0:bd:12:f2:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=f90d273b4e39743f827ed177f2890247ce51bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:17:d6:7e:4f:2c:2b:12:49:3c:39:6f:a1:
da:df:77:4e:0f:27:08:ca:24:02:ef:82:65:21:1c:
72:13:b5:8d:99:e9:ea:a9:2a:26:15:46:ee:a8:99:
3e:f3:9a:bd:a0:b6:20:9b:7c:e4:89:d1:bd:af:b7:
da:53:3b:3e:4b:95:f3:59:09:0e:43:51:d9:f4:24:
c7:ee:f3:16:fd:94:d7:10:53:45:b4:d2:a6:af:57:
a2:75:68:c9:4d:b7:3d:a3:30:94:0e:1d:c0:36:d4:
a2:06:0d:fd:62:84:06:c2:13:b4:de:bb:16:5b:df:
48:ae:de:e4:23:2a:51:e4:25:26:e8:70:c7:10:42:
8e:05:cf:89:1d:28:19:98:6b:b3:78:50:f1:ec:c1:
fb:b8:be:4b:61:ec:8f:3a:ac:51:49:a2:06:11:ef:
cf:20:e0:7f:3c:84:c8:b4:34:d4:d8:ba:b0:e8:11:
28:3d:46:5e:84:30:10:54:ae:fc:b0:24:d9:25:aa:
59:bb:89:83:af:53:77:35:ad:c1:12:ed:74:41:ee:
df:6a:93:20:32:2e:7c:5c:39:d5:cb:2e:38:29:16:
73:35:34:b4:46:69:d7:78:5e:74:70:92:10:34:7b:
31:8b:40:90:f5:8a:57:a5:3d:41:37:d9:ba:50:c2:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:27:3B:4E:39:74:3F:82:7E:D1:77:F2:89:02:47:CE:51:BA:D0
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:c0:13:f5:b5:dd:87:f0:e8:49:83:f0:7c:90:44:ba:1a:
48:e7:74:50:4b:d8:d4:98:dd:0b:23:94:48:88:e8:4d:91:4e:
0d:65:99:24:d1:56:76:c0:e7:1a:fc:ad:49:8f:12:49:16:33:
38:a3:3f:1c:0a:30:f9:5a:8a:60:6b:55:7d:b3:f8:b5:1c:51:
f0:22:39:c9:9c:48:71:d8:ff:a7:56:30:b1:0a:3e:ff:5f:12:
e1:aa:b3:c8:e0:2b:ce:91:2d:83:73:01:84:b1:90:1c:55:7d:
3f:a8:ef:55:a3:e1:3d:c0:e8:a9:a7:c4:7b:1d:d4:1c:b5:79:
26:7d:21:2e:05:fa:57:fc:d3:91:4c:00:e8:5c:b0:e3:df:fe:
f8:6d:7c:62:de:4f:e2:2e:22:4b:7f:0f:50:dd:05:e8:38:9a:
32:81:7a:96:da:ee:e1:77:39:6a:5f:44:84:d2:b3:ec:2a:ad:
f6:48:b9:67:dd:22:c3:a9:8a:05:30:aa:21:ab:c5:19:4e:aa:
8d:c4:c7:1c:8e:8f:8c:ed:e8:33:e8:af:55:4c:93:b5:44:f1:
d1:16:37:ce:78:f4:d2:e8:52:97:06:67:68:24:4a:7d:94:b7:
c0:87:ca:3e:6f:a6:49:df:28:a8:0c:13:a9:d3:06:29:45:a5:
ef:9d:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:56 2026 by rpki-client