Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: 7A/RxtoVCX7j1XLfhy0utGjvlikfS6jDus/1Glybp8g=
Subject key identifier: A8:47:44:A8:7A:A2:1E:A3:38:75:4E:39:78:16:6B:1F:A4:BD:DF:E7
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019D382E3C7EB137B150757AAADF24D6BB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 1216
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: FAHbGGkA-ockCEhvvrJOayBGiSY.roa (hash: d3khCxUehB5Xaj9d2nF8tun9GlovuretpWutZjjFsR4=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: Z6kQjJigvnJdtFKkq0W7yiGXM2TPDx2SwPU7w3m3h+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3c:7e:b1:37:b1:50:75:7a:aa:df:24:d6:bb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=a84744a87aa21ea338754e3978166b1fa4bddfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:e8:22:eb:9f:af:44:71:16:96:49:44:1a:
4a:05:3f:9d:32:61:ce:ab:bf:b1:51:66:6d:21:dc:
be:4a:62:c2:0d:2d:8c:97:2e:e7:7c:27:38:2b:30:
ec:aa:2f:27:35:05:11:c4:01:f2:38:be:c0:5c:c0:
69:31:c8:cf:7b:74:65:be:fb:28:93:04:5b:f7:67:
aa:ed:fb:3f:6a:33:28:4d:cf:b9:ad:dd:69:33:7b:
e2:2b:bf:2c:5f:57:18:e6:78:c6:2c:f8:73:0a:ce:
13:6b:40:dd:0c:37:46:f7:b8:f5:af:b2:26:85:e5:
25:b6:05:c3:d0:df:96:1e:27:09:68:68:f8:fa:5c:
bf:60:fe:c9:bc:22:64:d9:a6:2a:8c:6b:71:bf:7b:
ad:13:a2:79:3c:e4:f9:8a:a3:a1:83:0b:b7:5a:16:
dc:aa:a9:52:3a:d6:6c:5d:c1:b4:a7:92:46:64:c7:
2f:e5:4c:25:00:92:15:ee:f5:6e:23:8b:c8:17:f5:
a9:2c:ba:fe:74:fc:58:9f:b2:34:51:9f:13:ee:87:
a5:f9:ca:b8:c6:82:1e:d8:f5:20:a5:61:5e:ae:b5:
38:ec:fe:7f:c5:b1:17:84:2f:eb:bf:c1:29:63:ff:
d6:a5:57:45:29:6e:4b:eb:9f:2e:5c:e1:74:2e:1a:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:44:A8:7A:A2:1E:A3:38:75:4E:39:78:16:6B:1F:A4:BD:DF:E7
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:04:d3:50:72:dd:1e:ce:7c:7b:3d:d9:be:b0:e1:15:24:cf:
e2:be:31:6b:12:6f:b4:00:a7:0d:40:19:a9:f2:ad:66:b9:05:
32:f6:32:74:70:8f:ba:a8:3e:b3:ec:27:5f:2c:44:52:54:93:
d6:28:c1:78:7c:69:04:03:4b:61:69:8f:bd:a6:d7:3f:87:9e:
78:0d:85:f5:2d:4d:93:de:1b:00:8a:21:59:23:02:c1:5c:af:
ec:ed:de:0d:23:ae:3e:ae:33:47:21:6a:dc:6c:61:ce:7d:7e:
3e:65:4c:b1:22:53:ca:d2:b3:fb:08:96:51:73:9d:f1:54:48:
45:f4:8c:71:7c:c0:e9:9a:30:fa:da:e3:3c:fd:78:2f:e2:d7:
54:df:01:19:b3:28:ab:1c:08:02:95:ba:d6:7e:d0:f2:e7:77:
71:e8:88:0e:2a:fc:32:e2:34:ec:f1:a6:0a:17:f7:2d:fb:64:
99:c6:07:39:df:2d:e1:77:68:b9:93:9f:eb:ea:f5:f3:f8:fd:
30:5d:f0:84:30:b5:9f:7d:b4:c9:90:d6:3e:35:a1:c5:24:58:
da:ec:5b:59:d9:f7:5e:63:04:f6:d3:d1:6d:17:f9:98:3b:80:
4b:19:5a:9e:96:71:3e:37:31:b4:8b:dd:af:30:0c:bf:ba:dc:
fa:82:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:54 2026 by rpki-client