Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: o/4qv4/E+qf9tJd3/gtoXfjiB5yg+AR1zU5WWoToeoo=
Subject key identifier: 99:2E:71:CD:A1:E1:B3:B6:36:AA:CD:21:F9:5F:72:A2:9C:83:20:9E
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 019D397800F03A5C380C16515D51A98A7B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 1007
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: 0iXNb0qgTsbED9wLh6tNLm4QiSc.roa (hash: jPsn3OTLHwRfrJ0BbFjL8MkH0Kkclj3eem8yJT/9xno=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: wJ9GsMUn8neg742m+iGmR6CB327VBigeorMZ77HRkrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:00:f0:3a:5c:38:0c:16:51:5d:51:a9:8a:7b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=992e71cda1e1b3b636aacd21f95f72a29c83209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:99:f4:fd:49:6e:7d:5c:01:d2:b7:7a:be:
b3:39:05:da:e3:e0:17:ab:3e:0d:34:22:b5:b9:06:
8f:ef:a9:6d:c3:bd:46:da:65:c0:bd:4a:99:78:3e:
93:ae:57:4c:67:3e:d8:78:1d:07:d2:15:8b:9f:3f:
b0:7e:1a:49:e8:24:b5:7f:59:3a:2e:13:83:0f:f8:
ce:bd:ab:34:a5:73:0e:e9:f2:0c:67:be:f2:40:9f:
84:87:e1:a4:05:0f:ce:91:7b:94:ec:4b:63:c9:bb:
0a:f4:53:8b:55:9d:0c:bb:35:09:de:be:47:75:55:
aa:19:d9:6c:c8:15:d8:eb:92:38:7e:5f:95:68:2b:
cd:e3:73:9e:53:4d:39:61:77:85:a2:ab:64:e7:2e:
6c:f9:70:2f:13:ff:05:1f:61:96:d9:4a:8e:8e:ae:
a3:49:ff:04:d0:a7:88:d5:6e:69:ab:1f:b9:61:8c:
12:49:c4:37:91:04:89:85:72:5c:f4:ee:6c:2f:b7:
18:59:24:02:7d:8b:80:c8:f3:ff:87:79:f2:77:a5:
44:1d:2c:a9:52:41:03:a1:64:33:24:af:ad:46:9b:
1a:4d:3d:b3:ef:9c:0b:37:c5:15:27:b5:27:27:c2:
3d:df:e5:45:1b:20:1a:f8:91:11:fa:11:26:a2:bc:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:71:CD:A1:E1:B3:B6:36:AA:CD:21:F9:5F:72:A2:9C:83:20:9E
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:a0:b9:b0:4f:39:f4:cf:b6:2b:ab:a4:80:18:5a:d6:17:
04:59:67:4e:23:9c:3c:85:bb:4f:b8:ca:36:34:4e:e5:18:7a:
b1:b4:1b:a8:bb:0d:f8:30:58:8c:a4:f0:c6:c0:c3:7b:6e:17:
1e:8d:3d:d8:fb:ca:45:c1:69:33:7c:2b:63:ab:22:2d:9c:27:
72:5e:b8:49:2a:8d:b5:20:aa:71:20:e1:0b:01:f2:92:ea:dc:
bd:cc:7f:c9:94:73:b7:e3:b8:5d:ce:9a:c8:4a:dc:d3:7d:a0:
16:e6:b9:c2:54:ee:d7:f2:4f:05:20:38:14:dc:8b:2a:5c:3c:
64:96:11:bf:ba:ba:5a:2d:35:57:00:87:24:c8:1e:43:35:a0:
08:94:c1:df:b0:28:1a:74:ca:68:26:52:41:d1:d2:10:80:6a:
18:50:6b:d3:5c:8c:9f:70:33:36:7f:4a:a8:d1:65:6d:da:24:
9c:c0:51:f2:f7:6f:3c:3c:ce:f2:06:61:5c:ba:6b:15:d7:04:
77:c9:d3:6b:18:03:4e:4b:52:1c:6c:1b:01:9d:7a:7e:2a:49:
fc:6f:10:66:52:da:01:ef:1f:ad:0e:19:a3:ca:e0:01:75:de:
45:35:13:29:7e:38:a5:e6:f9:5c:85:1c:e1:d1:ef:a0:ae:1a:
1e:dc:2f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eADwOlw4DBZRXVGpinuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3
ODJjY2UwHhcNMjYwMzI5MTIwMDU5WhcNMjYwMzMwMTIwMDU5WjAzMTEwLwYDVQQD
Eyg5OTJlNzFjZGExZTFiM2I2MzZhYWNkMjFmOTVmNzJhMjljODMyMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCyZ9P1Jbn1cAdK3er6zOQXa4+AX
qz4NNCK1uQaP76ltw71G2mXAvUqZeD6TrldMZz7YeB0H0hWLnz+wfhpJ6CS1f1k6
LhODD/jOvas0pXMO6fIMZ77yQJ+Eh+GkBQ/OkXuU7EtjybsK9FOLVZ0MuzUJ3r5H
dVWqGdlsyBXY65I4fl+VaCvN43OeU005YXeFoqtk5y5s+XAvE/8FH2GW2UqOjq6j
Sf8E0KeI1W5pqx+5YYwSScQ3kQSJhXJc9O5sL7cYWSQCfYuAyPP/h3nyd6VEHSyp
UkEDoWQzJK+tRpsaTT2z75wLN8UVJ7UnJ8I93+VFGyAa+JER+hEmorxOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkucc2h4bO2NqrNIflfcqKcgyCeMB8GA1UdIwQY
MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt
MzcxZmM1YzgwOTUwLzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw
LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmigubBP
OfTPtiurpIAYWtYXBFlnTiOcPIW7T7jKNjRO5Rh6sbQbqLsN+DBYjKTwxsDDe24X
Ho092PvKRcFpM3wrY6siLZwncl64SSqNtSCqcSDhCwHykurcvcx/yZRzt+O4Xc6a
yErc032gFua5wlTu1/JPBSA4FNyLKlw8ZJYRv7q6Wi01VwCHJMgeQzWgCJTB37Ao
GnTKaCZSQdHSEIBqGFBr01yMn3AzNn9KqNFlbdoknMBR8vdvPDzO8gZhXLprFdcE
d8nTaxgDTktSHGwbAZ16fipJ/G8QZlLaAe8frQ4Zo8rgAXXeRTUTKX44peb5XIUc
4dHvoK4aHtwvdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:52 2026 by rpki-client