Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: nRCflNBmQsQTu4RWyHxRwHVmrhQsLdSi1tEgqzEmywc=
Subject key identifier: 2A:71:D2:E3:4A:B6:7C:2D:E2:86:6C:1E:CE:4A:B9:FE:ED:94:2B:3E
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019D29607CF63317479DF691FAE5382F4C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 1283
Signing time: Thu 26 Mar 2026 09:01:22 +0000
Manifest this update: Thu 26 Mar 2026 09:01:22 +0000
Manifest next update: Fri 27 Mar 2026 09:01:22 +0000
Files and hashes: 1: YlfoTdAGtKVJRl62UD-WprjA018.roa (hash: tlZ2JEwQVRGsx8Mat6/7pCvodOthprr+noO3HnDM5w0=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: uvyIcHtqNC0hV6Oak2MNENKnBc8oEeQwKCOaw7xpdd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7c:f6:33:17:47:9d:f6:91:fa:e5:38:2f:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Mar 26 09:01:22 2026 GMT
Not After : Mar 27 09:01:22 2026 GMT
Subject: CN=2a71d2e34ab67c2de2866c1ece4ab9feed942b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:b3:32:36:be:6d:f1:d1:58:c9:7b:f3:ed:
d6:c5:99:e6:53:38:28:39:9e:e7:0a:61:85:af:b8:
ca:5f:da:06:52:84:4e:7e:5c:12:72:2b:8e:18:5c:
80:2e:91:ee:cb:b4:f0:cf:69:db:c0:c7:b9:96:e1:
3b:9d:2f:e1:bf:17:21:45:e2:c2:51:5b:70:d4:04:
ed:66:31:8d:95:15:6a:db:72:60:b0:4e:9e:f8:30:
e0:76:94:d2:1b:63:1b:76:a0:c0:27:0a:74:84:67:
e1:ad:de:61:ee:8b:13:13:15:ff:31:27:06:53:aa:
9f:29:24:7b:79:6e:48:c8:35:96:b4:ca:bb:cf:8b:
09:61:d9:d0:a7:2e:6e:ef:a1:09:31:d6:4f:62:cb:
07:6f:0a:7a:7e:9f:c6:72:6a:d8:62:29:87:e9:92:
df:9c:17:c6:60:58:76:e0:fd:3a:e9:c2:6d:a5:6a:
18:64:26:f0:41:40:55:35:ed:4e:ca:d1:f5:17:f7:
da:7b:0e:41:39:82:a0:0b:ff:2d:30:39:9c:39:ff:
f5:17:fb:0a:b9:31:7a:be:45:2e:b4:6b:24:c3:03:
03:c7:5e:0c:a0:f9:8f:c1:2b:2e:d8:2f:d7:4f:b6:
77:01:b9:be:52:08:74:ca:95:ec:29:6c:e4:25:71:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:D2:E3:4A:B6:7C:2D:E2:86:6C:1E:CE:4A:B9:FE:ED:94:2B:3E
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:0e:c3:79:87:83:db:fb:78:7c:52:d7:05:6b:39:7d:c1:
e7:67:4e:0c:2d:04:35:e7:02:0a:56:cd:61:ca:89:03:be:b4:
20:f4:61:d9:00:20:52:cf:29:2e:2b:98:84:87:a4:17:ed:f9:
ab:14:e3:51:52:91:05:53:a0:11:55:c5:f1:48:7b:57:d3:43:
3a:5b:5d:57:fa:10:7d:8e:c9:9e:a7:ef:1b:8b:77:c2:a7:18:
e9:1e:3b:32:c7:47:14:94:36:d2:22:f5:42:1f:6c:7a:de:35:
96:a4:40:80:8c:24:c2:ce:31:1a:ee:99:04:55:cc:ec:ca:aa:
c4:08:98:2b:17:45:d2:5b:83:5c:5b:89:fb:81:0d:94:60:a0:
3f:e5:40:e0:83:fe:06:37:b2:9d:23:0f:77:92:95:38:ba:f3:
f2:dc:76:10:09:2b:03:19:fc:0f:9f:ed:a6:63:3d:e1:58:4b:
12:c7:39:1f:5b:13:88:26:6e:17:5d:fd:1b:4f:6e:3d:a8:19:
33:23:5e:d6:57:85:3b:f7:6d:de:f8:67:1f:44:35:46:c7:32:
5f:06:01:b4:31:ce:90:b0:41:19:ff:48:88:82:ea:91:44:3d:
cf:2e:ca:f3:7c:15:55:2d:43:57:68:b7:55:a2:12:35:ff:36:
d0:a3:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:05 2026 by rpki-client