Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: 6lVd+sVsYG840o2WsNsTi9kINitPvZyCHV4LOsy/SVw=
Subject key identifier: CC:FA:64:98:5D:27:2B:C2:0D:64:BA:25:F2:AD:DD:77:33:58:50:4A
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 01A08A556879FE434FA7FBFC4B49E02674BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0FBC
Signing time: Thu 10 Sep 2026 08:00:47 +0000
Manifest this update: Thu 10 Sep 2026 08:00:47 +0000
Manifest next update: Fri 11 Sep 2026 08:00:47 +0000
Files and hashes: 1: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: PwzuSs3ScoQMmdKwuU896Omi91pssv2uFOY+IYqVo2Y=)
2: QK0mOdG40zIzUlHnuUgQoD_cUNo.roa (hash: zxJjpxSeZ9UWE8WyEG7kXzpGqf6oWC16IltjE0DZr50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:68:79:fe:43:4f:a7:fb:fc:4b:49:e0:26:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Sep 10 08:00:47 2026 GMT
Not After : Sep 11 08:00:47 2026 GMT
Subject: CN=ccfa64985d272bc20d64ba25f2addd773358504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:d5:76:cc:04:39:c0:48:a1:98:af:51:82:
9f:22:58:c1:f9:4a:56:80:e2:b4:41:94:11:96:7e:
3c:2c:df:46:58:92:9a:84:27:eb:44:1c:f8:8a:ee:
fc:b0:61:39:3f:c1:e7:0f:79:55:e3:e8:49:29:64:
a0:56:35:27:85:f2:93:4e:1c:18:04:76:e9:fc:66:
35:51:9f:07:c7:03:e3:30:c8:8a:50:57:60:ca:07:
e0:32:bf:46:99:1b:8e:8e:e4:64:ce:f5:e4:24:5b:
05:8c:60:cd:e8:7e:05:99:3d:a8:2f:16:c5:d1:a7:
31:63:6d:b8:f1:3b:dd:8a:6d:70:6d:c3:d8:59:35:
72:a2:2d:20:73:c3:4e:94:40:9c:99:31:25:1b:97:
41:4d:61:cf:64:ed:ad:f6:f4:53:db:ab:f9:3a:4a:
6d:73:ba:43:79:7f:3c:9c:c2:cb:0b:c2:3d:1c:8a:
61:b7:0b:17:dd:a4:11:66:3f:97:6f:bb:cd:71:2e:
af:c0:96:01:9d:ab:f3:6c:8d:f1:13:1e:6a:c6:00:
52:d4:e2:53:cc:4a:eb:6d:0e:79:41:7f:d3:5f:16:
83:44:79:3f:b9:35:2e:44:9a:51:ed:49:39:71:72:
0e:db:6b:63:85:34:1f:1e:07:bc:1d:27:d9:3b:ce:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:64:98:5D:27:2B:C2:0D:64:BA:25:F2:AD:DD:77:33:58:50:4A
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a6:8a:11:cb:e0:ab:66:81:7e:97:62:1b:33:a0:7b:0b:54:
43:ba:96:72:a4:46:91:14:b8:c3:84:6c:ed:4e:bd:14:43:9b:
b0:29:a1:f1:b2:4e:74:21:82:43:5e:cb:49:9e:a9:0f:0a:2f:
c4:c8:8c:00:dc:c1:fb:26:86:db:e8:3d:bd:84:a7:23:d1:08:
34:3a:4d:30:1d:2c:da:0b:3e:77:c0:46:fc:71:aa:ad:06:5e:
fd:34:f0:07:1a:ea:c9:94:a9:62:66:1d:22:9d:f8:c7:78:4c:
0b:f5:df:14:fd:28:ce:d0:54:3d:1a:4f:93:3e:8c:a4:66:c9:
1d:76:4c:d1:bf:42:60:4f:30:86:14:df:13:6b:c5:d1:8d:76:
f2:b6:3e:06:dc:33:0d:d0:fe:bb:fd:5d:a2:ab:ad:1d:2c:b6:
66:17:1e:31:81:f2:61:9a:02:e8:cc:92:27:5b:98:f3:03:a9:
86:db:5f:41:e5:31:d4:59:f6:b8:3e:89:f3:1d:b4:6b:57:b9:
b9:ce:d1:e1:64:e2:bd:d7:0c:ba:73:41:fc:05:8f:d5:05:b5:
a4:7e:70:10:1f:53:4b:e6:ae:81:ff:f1:58:b6:7b:d8:7e:4a:
2f:d1:a0:9e:27:f5:44:79:e8:7e:9b:35:22:2c:55:7d:e7:8d:
ee:9b:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:23 2026 by rpki-client