Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: umCItgHT/aICX29SSE6Odu1Fhfs/AtDaLd+D3+nM7LE=
Subject key identifier: C8:CF:BD:36:0D:DC:7B:CA:F5:9B:3D:DB:A9:C3:F9:BE:4B:8B:BE:FC
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 019D389C1F4009D9919B214F003CE8CF0B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: w52lNBDM47IqSC95amwFUDxFWSNYzQ0escC67gum/Ys=)
2: QK0mOdG40zIzUlHnuUgQoD_cUNo.roa (hash: zxJjpxSeZ9UWE8WyEG7kXzpGqf6oWC16IltjE0DZr50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:40:09:d9:91:9b:21:4f:00:3c:e8:cf:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=c8cfbd360ddc7bcaf59b3ddba9c3f9be4b8bbefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:24:72:40:55:f3:ee:3b:ce:58:07:bc:ac:
fb:56:17:e6:00:84:95:87:2b:d8:36:e3:97:6d:4f:
d0:cc:87:33:f5:b3:e3:0e:b9:0e:b1:43:a4:4a:3b:
0c:79:90:76:a2:98:bd:07:2b:31:51:a1:b7:e0:fc:
b0:68:6a:90:ea:2c:cb:4f:e6:1b:bd:15:a5:94:20:
ea:44:3b:1a:51:25:20:25:37:2f:31:cb:80:c2:bd:
de:88:36:0a:34:4b:be:a0:f1:e0:9c:cb:08:75:05:
8c:4b:e6:1a:a2:3f:ec:15:8e:bf:9c:ee:94:6d:92:
78:65:7a:76:16:bd:c2:35:f6:47:10:4f:67:c9:bf:
5e:21:ce:8e:11:e4:5b:5c:68:da:68:f3:14:22:25:
3f:0e:f7:62:78:d7:d9:9b:88:27:48:54:c3:1c:5b:
d1:fb:eb:31:57:aa:93:f3:61:1c:d0:89:d3:18:6f:
07:2a:4f:6f:c5:d4:7a:26:38:cd:b7:61:10:05:7a:
5a:65:f9:4b:8a:45:5f:a8:5b:cd:99:b4:8d:e6:fb:
86:a9:47:96:9c:95:e4:b5:ce:16:38:b2:33:3f:7a:
f2:c9:70:0c:0d:ed:51:b6:17:fe:33:c0:62:99:b3:
0d:e0:64:66:09:8f:53:f0:2a:34:a4:ab:c4:cc:5e:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:BD:36:0D:DC:7B:CA:F5:9B:3D:DB:A9:C3:F9:BE:4B:8B:BE:FC
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:7c:12:b8:26:e8:bb:ec:43:20:63:4f:aa:58:77:91:f2:
5f:f3:a9:84:25:f3:c0:42:91:9f:20:ee:cf:75:89:7c:4b:ea:
5c:6c:b1:e3:71:6b:fc:4a:06:30:2e:33:5b:b0:11:67:a8:c6:
04:d8:ac:55:3f:3f:2d:8d:f0:ef:61:4b:86:20:e0:8d:1d:77:
e4:c5:9d:ab:8c:a7:bc:15:19:f8:64:14:ef:f8:f0:71:2f:d2:
f2:46:d3:09:07:f3:a0:e3:4b:ed:04:a4:2a:c7:d8:dc:0c:77:
05:ce:30:7f:b8:27:87:f3:6f:84:43:ce:b5:55:5b:49:3a:5c:
d4:2d:38:9a:1d:5b:8f:e0:20:be:c3:34:ca:78:24:c4:35:e4:
67:59:97:0e:cf:30:0e:ce:4f:38:8d:90:0d:f7:85:11:dd:6b:
92:15:41:1c:b0:55:fd:60:a9:6b:c8:60:76:15:64:39:95:06:
af:8d:e0:51:c8:d1:6f:a9:a8:d3:f0:4c:78:37:e9:bf:88:22:
1b:46:16:b3:ed:17:e8:9c:19:b9:76:02:41:6a:6b:74:ec:32:
22:b4:75:f9:78:c1:20:2f:02:68:a4:30:25:10:4c:38:2b:a8:
fa:bf:18:ec:fc:d6:4a:c3:fd:6e:df:59:a1:25:e6:a7:d6:07:
96:01:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:51 2026 by rpki-client