Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: Z42e4GIUIRi6OxJGj3wXuSi1n7Usx8VPMD/xlX+w8+I=
Subject key identifier: 09:15:A7:96:C2:E4:2F:69:6B:78:A1:21:F1:44:E3:61:B0:A4:2A:31
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019D0E576791D72A9A7FB7B378CB17D85FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 11A5
Signing time: Sat 21 Mar 2026 03:01:42 +0000
Manifest this update: Sat 21 Mar 2026 03:01:42 +0000
Manifest next update: Sun 22 Mar 2026 03:01:42 +0000
Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=)
2: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
3: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=)
4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: GKtcwNqEFBvPTPH0PKJHdEwqouTB24zxVA4FjmHcDyo=)
7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=)
8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:57:67:91:d7:2a:9a:7f:b7:b3:78:cb:17:d8:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Mar 21 03:01:42 2026 GMT
Not After : Mar 22 03:01:42 2026 GMT
Subject: CN=0915a796c2e42f696b78a121f144e361b0a42a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:ff:f1:80:ef:1c:25:27:75:7e:10:b5:d3:
60:ac:0d:bb:8a:aa:07:c5:6c:72:56:1a:5e:a8:d4:
3c:4b:56:8e:dd:c7:3f:75:c6:05:54:10:9d:dd:56:
52:e5:1c:1a:a5:bb:f2:57:37:d0:35:78:8c:25:65:
07:f4:9c:c3:24:fd:4d:80:c2:24:ac:c0:fe:ac:63:
ce:2b:9a:66:50:ca:33:74:64:74:07:c8:33:de:1a:
8d:e1:9a:e5:f2:d6:d1:78:e0:aa:72:43:e7:37:72:
37:79:96:97:47:88:e6:80:c1:d8:f1:e1:a8:3f:1f:
ff:c1:74:ad:26:be:99:2e:94:f0:ba:1c:64:ce:ca:
d3:88:e9:3f:c4:9b:8e:86:16:22:01:a4:66:48:20:
39:74:6d:15:72:4a:b9:80:57:f7:61:8c:3f:dd:e5:
45:0c:f2:99:6e:8b:9f:e8:75:cd:a8:a5:a5:e7:13:
53:e7:d6:49:3e:98:9a:ef:42:2a:62:1c:5e:7b:99:
45:a4:45:ec:68:0a:a6:35:54:d5:c0:21:13:95:a2:
2b:c2:d5:f2:91:70:9e:a2:d5:0e:30:9b:19:9c:10:
82:09:c2:3e:a7:6b:04:ef:bf:4a:dd:00:ad:55:a4:
31:7a:67:06:44:05:bd:e2:bc:77:bd:6d:b4:d7:81:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:A7:96:C2:E4:2F:69:6B:78:A1:21:F1:44:E3:61:B0:A4:2A:31
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d0:66:61:24:2f:4c:e6:f3:20:30:59:2c:6c:f8:65:84:12:
09:6f:83:a1:60:f1:bd:a2:2f:c1:91:70:eb:f5:98:81:c2:b0:
ee:95:b1:e0:bc:48:2c:7b:40:44:58:4a:f1:a0:94:07:3a:a9:
cf:93:39:03:5b:37:0a:1c:65:24:c7:10:b4:a1:8e:63:fe:37:
be:d7:41:37:ac:73:0d:c6:99:f5:8f:eb:1d:24:3c:31:cc:67:
c0:c4:b8:4c:3c:ab:eb:b1:e5:a1:51:ce:06:28:cc:c9:8a:83:
da:89:87:5f:a6:d4:93:3d:27:d0:bd:cd:e8:0c:5d:a5:ac:05:
b1:4d:d1:f0:5d:9b:bd:16:34:e9:02:01:25:17:18:bb:97:2e:
db:01:d0:4e:84:d1:61:ac:e7:64:37:35:22:95:67:ba:47:a4:
c6:c4:3e:38:ac:42:2e:97:e1:de:69:1a:04:f2:0d:75:9b:72:
a5:37:48:36:6a:61:76:51:3c:16:24:70:00:e7:5f:b8:cf:a1:
21:80:a0:e5:e6:4a:fa:ad:33:72:4a:2c:29:cb:94:fb:95:fa:
e5:a7:cc:31:30:0f:d7:ea:b5:ef:2f:9c:17:a8:cd:cf:d4:fe:
d5:ce:c1:ad:bb:4a:e7:35:11:a4:c0:d3:18:83:c9:a2:9d:79:
6c:74:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:07:17 2026 by rpki-client