Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: BZBfwqW2W3hiDtD/pZrBEIAA/SSWx2LVzdgAHmP/qt8=
Subject key identifier: F1:D9:C3:FA:3D:1F:54:F3:15:CA:70:6F:6C:E2:A1:69:1A:50:E4:9E
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019DB27DB781921A5DEB4DE02217A27F8FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 18D0
Signing time: Wed 22 Apr 2026 00:01:16 +0000
Manifest this update: Wed 22 Apr 2026 00:01:16 +0000
Manifest next update: Thu 23 Apr 2026 00:01:16 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: 8NThq64H+MlQ3F0iVl47ioylZWV/IWfDxva1W5MW3ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:b7:81:92:1a:5d:eb:4d:e0:22:17:a2:7f:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Apr 22 00:01:16 2026 GMT
Not After : Apr 23 00:01:16 2026 GMT
Subject: CN=f1d9c3fa3d1f54f315ca706f6ce2a1691a50e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:f7:c6:0e:ca:cf:73:17:cd:ec:b9:41:58:
a0:cd:6b:f9:c8:74:7f:be:af:fb:9a:3e:1e:59:27:
df:4c:0b:6f:4a:00:1e:75:f2:ec:ef:2f:75:e6:33:
2b:87:c2:83:5a:85:e9:e2:bf:39:32:d2:00:6c:af:
eb:66:f3:2f:31:b0:56:74:97:bc:75:7f:2a:7c:04:
1d:d5:e1:81:ce:db:ba:12:e9:8f:04:e6:0a:d3:ec:
2b:21:9f:14:39:2a:a2:c7:00:e0:d9:f1:8e:20:03:
31:a2:a9:7f:7f:6e:ba:ec:3f:f7:29:b5:2c:39:0c:
51:2b:c4:93:82:f0:6b:d9:0b:08:2d:16:29:12:9d:
4d:e1:c7:26:bf:ae:98:76:d1:4b:93:3f:58:3c:be:
1a:d7:03:6b:d5:32:eb:7f:ca:9a:45:0e:60:38:5c:
6e:f9:25:82:85:3f:d3:20:d9:21:11:18:a3:79:d0:
8d:dd:4a:2b:4b:4c:f7:e4:7e:1c:f2:72:94:87:07:
5f:37:d9:c6:85:53:2a:0e:2f:07:5c:bf:3b:a9:34:
92:b2:16:bf:4b:26:76:45:62:ff:1b:71:f8:22:d8:
87:4a:dd:5e:73:92:99:35:0d:6a:1f:20:da:15:c3:
2a:6d:64:ae:dd:1d:de:57:d8:47:6f:bb:30:56:e5:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:C3:FA:3D:1F:54:F3:15:CA:70:6F:6C:E2:A1:69:1A:50:E4:9E
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:a4:d6:f6:b6:06:6a:8b:2a:59:d7:67:c1:d2:bd:18:f4:
b0:aa:c7:0b:32:3c:70:6e:fa:6f:f9:f9:a5:cd:af:5a:4b:c0:
8b:3a:37:aa:93:86:b3:7e:80:4b:c3:6e:e6:78:60:5f:79:f1:
32:cc:fd:93:de:e9:2b:f6:ba:fc:75:ad:cb:55:08:64:86:74:
16:51:a6:d2:25:d6:c6:52:c5:c2:b0:9b:11:27:14:66:a6:b3:
b9:45:c3:5d:7a:20:00:48:b9:86:bd:e6:29:17:98:e6:63:99:
01:41:1c:8b:ba:77:f2:61:84:89:41:83:9c:f9:b0:48:eb:72:
77:f0:15:ad:67:7c:a7:44:6a:17:f5:01:12:6b:54:d8:95:62:
6d:29:13:13:3c:71:a9:bd:1a:69:99:99:e0:c0:75:60:82:9a:
2a:d6:37:0e:5d:d2:a4:f9:9b:fa:97:76:a8:08:e4:2d:ba:2c:
65:c5:60:b1:ca:a0:a8:14:99:65:ca:4a:a8:93:a8:92:6d:c4:
fc:9c:3d:85:27:57:45:c8:81:f7:ff:6d:da:4c:e2:49:b3:b1:
52:ab:71:6c:ae:cc:ac:78:cc:ac:c2:b5:72:15:22:04:ee:c8:
99:95:5e:2e:09:40:b0:5b:6e:d2:ee:76:72:3c:95:80:5c:e4:
44:8d:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:15:09 2026 by rpki-client