Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: +xa3WssrXwdO7y2F4aR8DA8RoxfTQh8xa9TuzirYzVQ=
Subject key identifier: 7B:40:FF:63:C6:5E:DE:EA:B4:0D:68:D2:FE:2C:33:60:E8:77:52:2C
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 019D3865C2B9D83CCD2149D7C6BD2C9FB969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
2: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
3: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
4: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 9q04HuzSYCTHs9s5jylDIrXcYMOiCiIs5/W0I6qdJ8o=)
5: q22VxMdSRIy60hnXGH9ZkvEl-VU.roa (hash: zg/MJ8qfVOHy4J7FHOIGJgHJYpom3/1tICP7KNToxU8=)
6: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c2:b9:d8:3c:cd:21:49:d7:c6:bd:2c:9f:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=7b40ff63c65edeeab40d68d2fe2c3360e877522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:3d:4f:dd:dd:89:3a:54:9f:67:6d:d8:75:
46:94:23:f0:d2:b8:5a:a0:f5:d3:50:f9:74:96:52:
94:4a:fb:12:6e:85:74:51:c5:30:ec:0d:2a:08:45:
8d:e8:b7:bb:28:e8:d0:ea:28:18:58:2c:01:d0:ce:
d7:72:e9:e7:e6:2b:0e:71:04:9a:ed:11:40:d6:db:
91:92:fa:60:63:13:4a:8a:b6:27:d4:f7:2d:72:fc:
e3:b5:66:40:d4:df:ee:88:41:a5:bd:3e:90:98:ec:
e5:a3:63:c5:3f:39:05:be:a7:88:ea:a3:8c:4e:73:
9d:3f:75:56:f5:17:22:c9:d9:33:ce:4e:5d:4f:ec:
10:03:8b:37:43:19:c4:a4:ee:b0:09:f9:0c:f6:be:
6e:96:c4:52:ce:9d:8c:51:8c:07:03:82:dd:b7:16:
4a:3c:3d:6e:19:e9:ff:0b:ec:9d:aa:c9:72:b4:8e:
0e:b2:2b:55:57:d6:68:69:84:a9:96:e7:9d:4f:64:
be:fe:84:2d:fd:19:cb:c4:2b:6a:c2:f9:dd:0b:2b:
f0:bf:46:ff:80:bc:32:7b:e2:23:55:60:fd:59:dd:
de:48:5e:9c:51:68:a1:cf:4e:e3:89:1b:53:0f:55:
e3:58:96:33:78:75:c2:53:fa:dd:30:f8:3c:ed:28:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:FF:63:C6:5E:DE:EA:B4:0D:68:D2:FE:2C:33:60:E8:77:52:2C
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:45:57:e0:38:ba:ad:46:85:d9:46:ba:e9:54:dc:41:d2:68:
62:d5:74:77:78:f6:7b:78:e2:73:57:d1:0c:c3:bc:aa:21:78:
4c:2a:8c:24:68:95:3b:4e:ef:8a:4a:89:ed:3c:5b:a8:8c:49:
44:9b:fe:86:06:1a:a3:59:73:71:71:cf:fd:53:84:98:85:b1:
7c:c9:c0:8d:c5:bd:63:63:b0:9d:b3:d9:2d:67:68:f8:41:fe:
e2:13:62:e9:95:03:21:8e:fd:6b:06:b5:86:b9:57:e9:ea:40:
10:50:cc:e2:d4:2d:13:76:50:d0:ed:96:9f:d8:a6:9c:a5:27:
cb:e8:8b:eb:7d:81:01:f4:ae:b0:f9:f7:98:2e:c5:96:16:55:
3d:7c:24:76:50:91:de:08:20:f3:6a:d7:fa:d6:af:9d:f1:e3:
fe:15:6d:7e:ef:47:e6:bd:48:53:c8:13:ee:41:68:84:7c:12:
34:90:57:80:7c:2f:b1:a8:e2:6c:eb:02:2f:06:a4:2e:46:ec:
a4:d9:e1:d3:10:7d:1f:ad:64:8f:f5:dc:17:93:a9:8f:0d:2d:
c5:d7:36:66:ae:4d:a3:be:e6:dd:9c:23:56:40:b7:bc:f1:51:
ed:35:11:ad:c8:6e:fe:d5:bd:91:83:2c:31:95:61:64:9a:4a:
ec:38:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client