Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: hoGL5Y7rLsZXG2b12lldHIvcCHHX8FtkTz0Isr7b2hI=
Subject key identifier: 14:66:24:BE:6E:4A:CC:E1:4C:B0:5E:56:9A:8B:F1:A7:7E:AF:84:8E
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 019EB8EA6E69C879234FB6DB5E7C8705CA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0ECB
Signing time: Thu 11 Jun 2026 23:00:31 +0000
Manifest this update: Thu 11 Jun 2026 23:00:31 +0000
Manifest next update: Fri 12 Jun 2026 23:00:31 +0000
Files and hashes: 1: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: s1VEwA5BAmn7uZmyKQts7Wbwm1sCH5dfeP9oCMz1TiE=)
2: QK0mOdG40zIzUlHnuUgQoD_cUNo.roa (hash: zxJjpxSeZ9UWE8WyEG7kXzpGqf6oWC16IltjE0DZr50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:6e:69:c8:79:23:4f:b6:db:5e:7c:87:05:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Jun 11 23:00:31 2026 GMT
Not After : Jun 12 23:00:31 2026 GMT
Subject: CN=146624be6e4acce14cb05e569a8bf1a77eaf848e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:2a:3c:4f:fd:f5:e3:65:2c:6a:e5:1c:99:
24:2c:f5:6d:78:1c:a6:1e:15:53:4e:ac:95:44:33:
17:06:d9:7f:25:ca:d3:89:51:ef:a4:6c:37:ea:bf:
4c:ca:34:13:16:53:2a:eb:01:13:f3:eb:29:ca:48:
de:81:3b:c1:61:ef:b9:b1:34:b3:e6:c7:e9:7d:18:
d5:11:e6:4c:40:07:bc:53:fb:c3:06:bf:d7:0b:ac:
5e:2d:04:d2:65:37:b5:ad:04:dd:37:3f:7e:c9:62:
86:af:6e:fc:63:7a:ee:53:35:a3:18:24:17:3e:fb:
f7:14:c8:41:79:cd:a7:99:94:1a:56:63:ab:eb:0f:
51:68:eb:73:57:d6:fd:7a:41:69:e5:43:c8:93:49:
9f:eb:de:77:a9:32:fa:be:9e:bc:06:19:66:50:7d:
34:e6:be:82:d1:70:c8:c3:bd:7b:b1:a6:51:a7:28:
54:30:66:d2:52:3c:7c:9c:fc:a4:b1:13:0c:ce:f0:
7c:f3:f7:9c:dc:ee:10:1e:1f:f6:da:2c:ea:d3:4e:
bb:bd:e8:4f:f5:ce:2e:70:06:92:fb:74:ec:ef:6f:
64:e4:f5:af:6d:5d:be:24:c6:29:00:24:70:63:42:
b3:dd:d9:29:de:cc:e8:04:03:51:83:66:74:fb:56:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:24:BE:6E:4A:CC:E1:4C:B0:5E:56:9A:8B:F1:A7:7E:AF:84:8E
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:6f:cb:78:94:00:71:f4:f4:f5:c3:8f:6c:17:25:af:6c:
21:22:79:24:f2:9c:cc:bd:12:3c:44:78:81:7e:1c:f4:8e:84:
de:ea:24:b3:3e:db:5f:a4:aa:0c:be:a5:1a:89:6f:89:bb:9b:
78:ba:83:07:fc:38:c6:35:b4:2d:26:a8:94:79:63:e1:62:fd:
9e:6e:51:de:47:cd:8c:e9:14:36:69:bd:9a:06:96:74:c3:02:
05:4c:1f:d6:8e:28:98:a7:f4:31:c6:1b:4c:5c:d5:fe:26:1c:
09:a4:ad:58:e3:14:fa:4d:83:4b:b0:7b:f8:74:f3:63:5f:24:
27:78:e7:0a:f6:1e:ec:dc:f3:b1:57:f5:5b:a5:c9:9c:24:52:
3e:68:8c:e9:9d:0a:6b:7b:a2:65:37:bc:ac:a8:38:91:a1:e0:
45:f2:d7:aa:1e:66:f2:e0:01:4a:5e:1a:e9:74:d9:88:53:cf:
33:6c:43:e8:47:6d:96:a4:c5:a4:c3:64:ec:d3:bd:e3:44:94:
1f:fe:4b:1f:19:dc:de:1f:15:3a:82:67:aa:fa:3e:b4:84:b4:
15:e7:65:58:fa:e1:1c:32:93:79:86:40:1d:b2:1e:0d:8e:5e:
42:ba:82:13:10:eb:17:cd:a6:cc:d3:5c:d5:55:eb:90:ff:e0:
ad:6b:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:35 2026 by rpki-client