Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File: nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier: wbM0UpG0Fgaz9LT0ijBVUDL2DWYQ6nnpDcj8p60oeqs=
Subject key identifier: 60:3D:BF:B4:E2:B8:07:7A:29:BC:05:9C:6A:61:83:EB:69:C4:5C:59
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer: /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial: 019D37C02C472704CFCBC5C696C71C754028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: hthEtzRbnIhbO0cDLC5HDDOT3HM.roa (hash: +3qkVIoHin/qJmx9wzoCUkbRVYXeSZvmT+NqhHq3L+Y=)
2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: FkMbIn3Qz2O+DxBITdLmrZCAio1HFaRJOnnBLmpQjsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2c:47:27:04:cf:cb:c5:c6:96:c7:1c:75:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=603dbfb4e2b8077a29bc059c6a6183eb69c45c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:9a:b4:37:ad:01:92:a9:87:43:da:44:df:
00:b3:4e:ff:e9:e1:02:79:bd:7a:d2:e8:0a:8c:77:
07:97:a1:a9:bd:ed:e7:85:3a:70:02:f5:f5:f4:b4:
09:95:e3:05:7b:db:81:1b:21:47:ce:67:4e:9b:1d:
58:da:8f:39:3e:0e:38:e0:50:7d:46:1f:df:fc:0d:
75:84:22:e1:5e:1f:72:eb:6e:07:05:06:6b:1d:77:
11:9c:ae:7b:33:5c:e2:2c:90:3a:cd:8e:5c:33:04:
d7:ce:2c:66:f9:9a:d1:5d:ad:9f:d2:aa:14:6e:b8:
7f:03:2f:7e:52:b2:ca:ff:50:ee:b2:e7:e4:82:c4:
ba:5a:b3:d5:a8:0a:b6:e3:e8:a3:af:44:c7:4f:b2:
af:db:99:ae:c5:84:6b:27:5f:75:75:23:b9:0d:3d:
01:c5:33:bc:69:fc:40:60:8a:bd:b2:fb:fd:7b:38:
06:75:f6:f2:7d:09:0b:06:1c:b9:0d:b4:7a:b9:2e:
1b:12:2d:44:fe:af:25:ee:a2:1c:ee:70:02:fe:80:
f2:58:a3:d1:f2:41:1c:f4:1a:79:d8:43:a2:58:81:
c6:90:91:95:ee:32:2d:fa:5f:80:23:39:01:63:c2:
a9:cc:7d:14:dd:fd:23:b6:0e:a4:74:eb:93:a5:a4:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:BF:B4:E2:B8:07:7A:29:BC:05:9C:6A:61:83:EB:69:C4:5C:59
X509v3 Authority Key Identifier:
keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:c2:6e:60:4e:e7:e8:d1:9d:46:16:21:d3:08:02:f6:15:
b5:30:53:51:2d:c8:ef:93:65:45:46:56:88:7b:d6:26:61:8b:
5d:b1:de:7a:0b:10:dc:a7:e9:2f:be:47:96:95:9f:08:eb:26:
7c:d0:71:65:9b:0d:4e:a3:13:d0:cf:76:12:f7:4d:f1:f9:6a:
7a:ec:51:d5:31:fa:e8:1a:84:3f:83:f7:6a:73:4c:9b:e9:11:
10:c9:bc:6a:76:5a:78:57:0d:d0:f7:bc:7f:71:83:05:cb:a9:
35:c6:57:07:0f:07:52:6a:90:44:2f:0e:a5:e1:47:2c:f7:a5:
99:10:80:57:55:67:76:f6:30:a1:da:35:21:2e:3d:a2:a4:81:
ad:fd:60:11:df:a0:f6:2f:c2:29:b7:e6:e4:33:d2:87:f2:e3:
e6:a7:3c:cc:4f:6d:0a:e0:23:11:20:bb:d8:46:17:ad:83:94:
73:ed:35:ee:86:77:59:80:03:c3:9a:d4:7e:f0:c5:d1:e6:67:
04:00:1a:e7:11:38:66:32:ec:43:be:a6:d7:58:41:9b:b7:aa:
f6:31:b1:56:92:0b:14:31:3e:81:c0:26:bc:f4:34:7d:50:ab:
f7:c6:e8:5a:13:b1:a1:9d:22:cb:45:bb:2d:2a:d7:63:35:3b:
8a:48:92:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCxHJwTPy8XGlsccdUAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllN2ZhNGQ3MWZmNjFkZGQ3NTJhNTZlNWU5Y2EzMTY5N2E5
NTJiMzQwHhcNMjYwMzI5MDQwMDM0WhcNMjYwMzMwMDQwMDM0WjAzMTEwLwYDVQQD
Eyg2MDNkYmZiNGUyYjgwNzdhMjliYzA1OWM2YTYxODNlYjY5YzQ1YzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRuatDetAZKph0PaRN8As07/6eEC
eb160ugKjHcHl6Gpve3nhTpwAvX19LQJleMFe9uBGyFHzmdOmx1Y2o85Pg444FB9
Rh/f/A11hCLhXh9y624HBQZrHXcRnK57M1ziLJA6zY5cMwTXzixm+ZrRXa2f0qoU
brh/Ay9+UrLK/1DusufkgsS6WrPVqAq24+ijr0THT7Kv25muxYRrJ191dSO5DT0B
xTO8afxAYIq9svv9ezgGdfbyfQkLBhy5DbR6uS4bEi1E/q8l7qIc7nAC/oDyWKPR
8kEc9Bp52EOiWIHGkJGV7jIt+l+AIzkBY8KpzH0U3f0jtg6kdOuTpaTC8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGA9v7TiuAd6KbwFnGphg+tpxFxZMB8GA1UdIwQY
MBaAFJ5/pNcf9h3ddSpW5enKMWl6lSs0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQt
MThlMzZiZGRjMjFjLzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMzc5ZGItZDkwZS00M2I5LWEyMTQtMThlMzZiZGRjMjFj
LzEvbm4tazF4XzJIZDExS2xibDZjb3hhWHFWS3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXDCbmBO
5+jRnUYWIdMIAvYVtTBTUS3I75NlRUZWiHvWJmGLXbHeegsQ3KfpL75HlpWfCOsm
fNBxZZsNTqMT0M92EvdN8flqeuxR1TH66BqEP4P3anNMm+kREMm8anZaeFcN0Pe8
f3GDBcupNcZXBw8HUmqQRC8OpeFHLPelmRCAV1VndvYwodo1IS49oqSBrf1gEd+g
9i/CKbfm5DPSh/Lj5qc8zE9tCuAjESC72EYXrYOUc+017oZ3WYADw5rUfvDF0eZn
BAAa5xE4ZjLsQ76m11hBm7eq9jGxVpILFDE+gcAmvPQ0fVCr98boWhOxoZ0iy0W7
LSrXYzU7ikiSOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client