Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: S4z7CJS8mNcYPeWDDmSQdU449q9Ve3ztMpGVDhaitG4=
Subject key identifier: 4F:13:5D:20:24:52:35:3C:9B:22:F7:6C:AF:52:27:7B:BF:E7:9A:A4
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019D39AF0A322B500314B142A12F9904CD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 1251
Signing time: Sun 29 Mar 2026 13:01:05 +0000
Manifest this update: Sun 29 Mar 2026 13:01:05 +0000
Manifest next update: Mon 30 Mar 2026 13:01:05 +0000
Files and hashes: 1: 8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa (hash: LRaPlos+9PMu+yFLBbBjOJX5cPq1n8kJxvNzrnZnp+M=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: pH3JZexv3W91AAzZf/EANdnaekpOAm6NPjaBkKwM4/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0a:32:2b:50:03:14:b1:42:a1:2f:99:04:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Mar 29 13:01:05 2026 GMT
Not After : Mar 30 13:01:05 2026 GMT
Subject: CN=4f135d202452353c9b22f76caf52277bbfe79aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:70:bc:06:61:10:79:8f:be:59:6a:3c:79:
24:e3:95:0c:0d:c0:c6:78:f5:d3:7a:bf:f3:0c:af:
36:4c:42:d5:01:8e:a8:6b:1f:2c:2a:6e:89:9c:66:
94:ec:2f:39:67:cd:fe:f4:46:8b:0a:e4:e0:b4:2c:
a0:85:6c:ba:a9:07:c4:8b:0d:c5:82:88:e6:93:5e:
a9:e9:a4:df:78:1c:1e:f2:76:2a:b2:ba:d7:1d:97:
0a:cd:33:63:15:6e:0e:b6:be:a6:b8:c2:63:83:be:
22:4f:98:15:4b:af:85:a8:e1:87:3a:84:17:0c:03:
31:85:3b:99:e9:03:b6:83:86:0e:98:89:a7:64:27:
30:84:0d:46:ca:fc:3e:5d:1e:d9:59:f6:2a:72:68:
94:ec:40:13:93:51:83:f4:54:c8:d8:af:a4:33:44:
b7:ff:d7:34:5e:cb:0b:f6:03:7a:ec:b9:dc:1b:b0:
5e:bc:9b:50:93:ba:62:52:e7:98:80:d3:51:3c:89:
41:cf:97:f9:53:e0:8b:97:a8:30:84:a9:43:0c:25:
23:c8:94:39:4c:1b:c9:59:6e:cd:36:6e:55:89:21:
7a:ec:99:df:92:d2:61:b5:5b:24:f2:ff:67:7b:3d:
65:fa:68:11:44:6c:db:49:c5:f4:a9:42:30:25:df:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:13:5D:20:24:52:35:3C:9B:22:F7:6C:AF:52:27:7B:BF:E7:9A:A4
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:70:bc:49:ee:7a:b9:ec:be:68:4d:6b:fa:5b:9c:a4:5f:0a:
f7:c3:d3:4c:51:64:f8:bc:d4:da:60:59:ad:d6:5e:bb:4f:7b:
5a:94:7a:94:fc:14:3c:e2:16:8e:d6:2f:0b:e5:31:2d:9a:04:
5b:a8:ff:d2:35:52:4d:ef:4f:7d:3c:b9:c0:d5:07:7b:77:29:
03:89:31:64:85:8e:00:c7:f8:3b:b1:da:40:b8:10:68:91:94:
44:e7:c0:fa:82:4b:14:64:20:75:10:e1:71:60:99:af:d1:6c:
21:b2:54:f5:06:92:e9:06:fd:d5:2f:10:b9:3b:f5:bb:ab:77:
4b:2c:c4:b3:bf:a1:d6:be:36:4b:e4:ec:a3:0e:98:0e:45:7b:
e8:58:89:6c:8c:27:bb:76:cd:a1:b6:01:86:e0:2a:5b:8e:c5:
39:42:1e:7c:c1:d5:05:31:23:61:c2:11:6c:59:b7:1c:ec:90:
ed:88:b9:94:86:53:74:1b:ac:16:56:d3:56:77:a8:05:d1:77:
01:93:53:9a:69:86:de:a4:ad:74:f2:e4:5f:ff:07:d7:84:6e:
88:e9:62:d0:b8:dc:48:95:77:02:14:aa:1d:d2:25:69:9e:f5:
21:4f:36:07:55:ad:86:91:f8:4b:d3:34:fd:0d:9a:90:f7:7b:
fb:6a:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:03 2026 by rpki-client