Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: PBvqbpnS8yg004g+H/yS3cX6xp93gTQ7Jf9xC2FGMRI=
Subject key identifier: DC:09:2B:64:58:DD:24:D6:AC:80:C1:08:1C:41:71:4B:94:28:68:CA
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019F129C00D72453CC4BDB37B5C47A6EE681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 130C
Signing time: Mon 29 Jun 2026 09:00:41 +0000
Manifest this update: Mon 29 Jun 2026 09:00:41 +0000
Manifest next update: Tue 30 Jun 2026 09:00:41 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 2mhWsQJGIMMusqKC5uV99OWNiD6Vl+M1IZ16uvpMg4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:00:d7:24:53:cc:4b:db:37:b5:c4:7a:6e:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jun 29 09:00:41 2026 GMT
Not After : Jun 30 09:00:41 2026 GMT
Subject: CN=dc092b6458dd24d6ac80c1081c41714b942868ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:c1:61:02:f2:5c:8c:b3:91:9b:e8:2e:26:
5a:74:7d:3c:db:4c:5a:36:60:13:b6:c0:97:04:eb:
ac:52:30:9b:0a:e8:85:60:a4:18:70:72:e7:43:40:
00:f6:ef:95:ba:23:1e:fc:05:66:1f:94:53:9d:5a:
6d:c9:95:2d:4f:4d:28:01:47:fe:2c:58:1a:10:2e:
72:af:d4:67:57:9e:23:f1:ab:44:66:85:66:87:83:
a9:f7:62:1d:bd:f3:31:32:bb:b2:03:9d:ee:00:b2:
f5:dd:9f:d1:06:4c:e4:d0:31:b2:27:30:b9:d3:5f:
d2:d9:d3:e2:2e:1f:24:5e:3f:80:95:f3:9f:ab:88:
31:95:30:77:eb:a9:d5:95:dc:1f:b9:a4:4f:79:66:
7e:52:40:36:43:67:95:e3:d3:fe:1a:ba:74:b0:e5:
ce:2a:bf:01:30:d4:8b:a1:cd:67:8f:24:5d:26:a1:
29:12:1a:a8:e9:6f:21:25:93:a4:8b:b9:ab:87:fc:
03:b0:70:31:15:f4:2c:d3:71:15:ea:22:56:42:56:
b5:c4:3d:bb:73:6c:21:27:33:46:b5:1b:9b:b4:4b:
02:20:37:c1:b9:2a:17:30:f4:65:9d:91:48:1c:bc:
35:21:2d:1c:5b:3a:7f:44:15:9b:32:e0:ea:80:e2:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:09:2B:64:58:DD:24:D6:AC:80:C1:08:1C:41:71:4B:94:28:68:CA
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:45:fe:6f:14:c1:6c:3a:26:3b:94:14:84:b1:c0:a9:61:f3:
1f:4d:b9:d4:b5:fa:e9:72:ca:0e:14:15:e2:8f:b6:e4:1d:41:
a0:61:7c:79:83:45:31:86:dd:a2:1f:c1:11:14:13:00:3e:c5:
b1:3d:c0:f9:85:f2:95:87:b3:16:02:7f:83:27:f7:61:88:4d:
59:0c:30:51:21:b1:a5:1b:92:43:47:20:b4:64:c4:f7:6e:86:
82:26:fb:e9:22:00:bd:d1:2d:00:ca:a6:96:d0:fa:4c:b9:f8:
90:a5:dd:34:99:ff:25:3b:c8:ae:43:a8:eb:4a:34:ea:02:64:
04:a7:92:e2:0f:4a:19:6e:b9:89:3e:95:04:a4:19:33:2d:53:
0d:90:bd:af:9f:63:1e:d3:3f:e6:30:3f:89:98:92:58:c6:1c:
d5:e4:f3:01:4a:63:7d:90:f0:08:38:70:50:98:66:bf:9d:f4:
7d:62:e9:b6:77:29:6a:a9:74:a9:ce:c5:55:60:73:81:bd:65:
80:56:b0:22:60:d5:80:76:a4:74:76:e2:ea:da:44:ce:a3:9a:
af:91:c6:17:7e:c6:b9:86:92:41:dd:31:4e:9d:08:f6:32:13:
d1:1d:ae:8c:f2:f0:49:83:08:ef:de:55:da:d4:f6:a6:14:8d:
77:b7:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:41:48 2026 by rpki-client