Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: mJAFxQK6iQi6i7IEAk6bT53lgvU7dtyy1uo+auukoSA=
Subject key identifier: 20:C5:40:50:DE:D5:8E:4F:BD:BD:5A:96:63:F7:46:90:E2:AF:86:DF
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019D37C061825593549A3BA0AFBAC969899F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1333
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: llH0w1IwRIGKIOR+/OEgzv/4yNodSVamjE7j+trNFOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:61:82:55:93:54:9a:3b:a0:af:ba:c9:69:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=20c54050ded58e4fbdbd5a9663f74690e2af86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:94:7e:82:90:d1:89:e4:b1:df:f6:6f:c8:
fc:56:47:fc:c6:c1:69:70:60:98:20:e7:bc:1d:f8:
fb:7d:31:9f:08:60:82:ab:d2:1d:1a:c4:87:3f:ac:
33:bf:93:36:f0:a9:6e:51:b8:e2:65:57:e9:ad:d0:
e9:c7:81:3b:6f:f0:80:dc:ee:08:5d:87:aa:8a:37:
6c:d0:e5:af:6b:b9:48:4c:c2:32:56:a2:7e:1e:50:
09:c6:11:cb:01:6a:07:f0:a8:9f:65:48:c2:8c:0c:
bf:5f:b9:62:e8:29:ec:55:3b:01:8c:5e:b5:67:55:
8f:5c:40:5f:ef:e6:97:c9:ff:43:7f:80:a3:5e:18:
7b:42:f8:55:3a:09:f6:66:0e:3e:75:a7:a4:53:83:
ba:cc:b1:b0:ef:d4:2e:ec:b6:26:94:eb:c2:f3:15:
9e:eb:20:ea:ee:49:a8:3f:82:e7:4f:a8:5d:4d:82:
74:4c:58:f2:73:a3:31:c3:f9:a0:cf:12:2e:66:72:
6f:4c:8a:cb:52:6f:b4:7c:a4:1b:3d:52:4f:67:ff:
49:82:df:6a:fc:7e:e9:c6:5c:26:f1:19:ca:8e:80:
d7:af:64:59:a8:31:44:0f:81:b1:79:f0:18:16:65:
77:72:e6:5a:da:6d:74:a7:25:25:d2:b8:3b:4a:1e:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:40:50:DE:D5:8E:4F:BD:BD:5A:96:63:F7:46:90:E2:AF:86:DF
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:cd:1d:78:6b:ad:16:65:ec:21:8e:94:a9:b9:3c:9f:79:
d9:34:5b:d8:ac:3f:92:15:c4:18:8c:b2:df:b2:29:de:6a:21:
c2:82:0d:b5:5f:3f:47:98:45:de:c1:7d:d0:9c:5a:c1:c8:cd:
76:aa:4e:c6:53:7c:50:2a:64:d9:f5:4d:31:59:bc:0e:a5:28:
07:9f:cf:8d:14:8d:42:86:28:fe:b6:71:ca:08:e8:87:ca:28:
6e:5c:45:f9:9f:f4:b5:8d:88:b4:52:54:2f:15:66:31:35:a1:
a2:b7:3b:12:f9:75:8e:3a:9b:36:8d:f8:4c:3c:e6:d0:27:d2:
34:a3:ce:50:11:c5:35:70:ec:09:81:71:07:99:aa:7c:26:d8:
b4:aa:11:da:07:34:27:47:72:be:62:96:14:ad:5a:b1:de:cd:
7d:16:f1:1a:ff:ac:97:83:7b:ac:ad:b7:e3:1a:72:68:d8:22:
da:ec:24:44:8f:2c:1d:4d:38:ce:6d:39:8b:b8:23:e5:1e:7f:
10:0d:db:7a:9a:ca:ac:fb:14:ef:3c:b8:2c:12:ab:a1:37:68:
ee:24:a0:5b:63:70:13:02:1a:10:02:4d:e7:4f:3b:36:55:12:
3a:78:9c:51:44:5e:5c:08:e9:c0:e6:f2:fb:2b:ef:65:32:9c:
61:e6:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:05 2026 by rpki-client