Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: sSZuqQ7f2WTJHNUZYGrSO5sDOofpkHOuoceBR576dwI=
Subject key identifier: 17:CC:34:05:A1:AF:E2:1F:A4:C4:36:36:41:25:CA:05:0A:37:F5:DA
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019E9C29AFA39AAE102AA7B80AA656807AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 09:00:37 +0000
Manifest this update: Sat 06 Jun 2026 09:00:37 +0000
Manifest next update: Sun 07 Jun 2026 09:00:37 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: 5Q/36f6OpjAnY565q7RgKF2RSxN8AEZNwI48HUF7940=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:af:a3:9a:ae:10:2a:a7:b8:0a:a6:56:80:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Jun 6 09:00:37 2026 GMT
Not After : Jun 7 09:00:37 2026 GMT
Subject: CN=17cc3405a1afe21fa4c436364125ca050a37f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:e0:48:20:bc:92:63:74:27:5b:b0:04:b8:
9c:48:21:0f:6c:8b:df:e5:c2:a6:e7:5f:f7:39:2d:
8d:e5:0a:bf:a2:2b:50:48:e8:c2:43:57:51:85:dd:
e9:bd:70:1a:41:70:ce:13:7d:18:fc:41:60:de:72:
4f:85:16:b3:8b:16:e6:99:4b:0c:bc:37:4e:d3:44:
53:93:2a:53:c6:d1:08:a4:8c:8d:78:74:9f:80:66:
7e:62:8e:80:16:66:24:b1:d0:7b:62:2f:1b:97:6e:
15:e6:98:eb:06:76:83:17:dd:a8:e9:f5:49:2f:bc:
01:3d:61:1b:c5:a5:ff:a0:7e:29:e9:a8:5d:32:20:
ed:45:58:7b:8d:8f:9e:e2:3d:ab:0e:88:8b:aa:74:
7b:70:ef:7e:b6:9e:5b:63:91:30:3b:80:58:0f:bc:
95:0c:18:40:77:45:0a:0d:88:cb:ac:66:e5:64:36:
67:83:2e:39:da:a2:db:ae:1b:3c:b7:2c:ac:ba:58:
e8:e0:8e:83:0b:aa:d1:82:5d:06:12:2f:81:11:55:
cb:ca:dd:cb:9f:bf:12:c4:91:4c:9a:12:0b:d8:56:
75:ca:c2:84:12:ba:1c:71:30:52:a0:7e:61:e9:2a:
36:28:41:a3:66:6f:0b:22:5a:51:2f:95:fc:55:3d:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CC:34:05:A1:AF:E2:1F:A4:C4:36:36:41:25:CA:05:0A:37:F5:DA
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c8:b3:da:38:56:d1:a0:38:79:ee:3b:2d:aa:cf:92:98:fa:
95:ab:4b:c9:9f:b2:d9:bd:75:ed:30:6e:9d:e2:c2:09:3a:f2:
bc:f2:bd:89:e0:fb:5f:33:8c:b9:e6:5f:4d:f1:67:8e:27:4c:
87:d0:75:92:99:2a:23:3b:42:12:17:50:18:7d:7e:23:1b:1b:
b7:84:ac:96:ca:c3:08:82:ae:04:67:c3:6a:d3:b1:2a:a7:d5:
63:0a:53:08:35:8a:2b:7c:2e:0e:f8:74:65:39:7c:e2:a5:a2:
62:e2:d9:da:12:d8:4c:aa:03:a7:23:ed:a9:02:89:c7:90:af:
7e:b9:b9:26:9f:11:da:45:a1:35:69:dc:05:c7:de:e7:81:a6:
c9:3f:85:bf:58:43:be:19:15:4e:25:bc:ac:08:2b:60:ab:88:
4e:f0:49:66:a0:f3:3e:a1:cf:24:fa:41:10:65:f1:f9:af:94:
ba:95:b2:95:af:1a:6e:af:1b:2d:e7:80:ea:fe:96:6a:42:d1:
05:45:0a:fb:d8:cf:cb:f5:73:0f:a0:a3:71:ed:8b:e5:e1:41:
17:91:36:15:f1:68:a0:5a:b0:57:6a:bd:1c:ba:52:99:1f:de:
9d:14:37:a2:c4:1c:d9:ee:5a:63:06:59:2b:db:c6:0f:14:3a:
69:4d:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:07:03 2026 by rpki-client