Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: 6WcB8fvTZkAFASHmdeJ1QSKVm8IBPVO9LZMWKnE4KBM=
Subject key identifier: 65:B4:FC:2E:B9:E3:3A:C2:4E:1E:47:5B:B1:53:20:8F:F6:5D:BD:FB
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 01A123C201E7050DB9CB6E391954E1D0B28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 161D
Signing time: Sat 10 Oct 2026 03:01:19 +0000
Manifest this update: Sat 10 Oct 2026 03:01:19 +0000
Manifest next update: Sun 11 Oct 2026 03:01:19 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: LabiJHXUdUzeyfAd6tNRWSy8JhUWrDcBWiYdkmKWSjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c2:01:e7:05:0d:b9:cb:6e:39:19:54:e1:d0:b2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Oct 10 03:01:19 2026 GMT
Not After : Oct 11 03:01:19 2026 GMT
Subject: CN=65b4fc2eb9e33ac24e1e475bb153208ff65dbdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:a3:d0:b0:76:79:3c:19:8f:58:e6:06:d6:
cb:9f:1e:bb:c8:94:1b:d7:74:08:8e:c7:02:28:28:
c9:c3:87:ce:1b:ef:d6:ca:5c:2e:2f:47:93:0f:1a:
94:fa:85:85:4a:1d:bf:e3:e3:b0:a6:e4:33:e4:03:
cd:34:f3:14:5c:dd:5b:1f:ca:62:a7:e3:7a:ba:4e:
e3:43:4c:4d:75:89:ed:b5:06:87:cb:b0:99:21:6d:
c9:ee:48:0f:c5:08:dc:2b:74:02:f3:26:e9:de:77:
9d:d0:b0:64:db:61:80:46:1b:e7:69:5e:02:64:f4:
72:aa:c0:14:47:b0:2f:8a:5f:54:5c:0f:af:9e:0a:
d0:bd:b0:0d:14:de:f2:da:de:99:59:78:bc:30:6d:
65:4d:30:dc:68:d6:2e:a1:93:f5:e2:e3:4d:eb:2e:
c1:01:7f:11:94:8b:af:3d:f8:b2:9d:96:b3:33:c5:
d3:aa:b2:31:3b:98:2c:43:a8:79:d7:2a:1a:95:7e:
88:70:1b:40:ac:51:0d:39:dc:96:e1:b9:69:cf:91:
45:43:42:f1:f8:43:2f:78:09:30:46:63:d3:45:3e:
05:3f:fc:53:7b:0d:b3:19:6e:b7:35:3d:0b:37:eb:
f4:c2:72:41:ce:6b:b3:71:59:76:90:c9:74:f7:f0:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:FC:2E:B9:E3:3A:C2:4E:1E:47:5B:B1:53:20:8F:F6:5D:BD:FB
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:c2:b7:3c:9e:40:2f:c8:38:f9:13:94:64:f3:8f:c5:c1:
90:a4:68:71:a7:87:41:e1:28:e7:a6:a4:1a:2f:30:c9:25:1b:
c2:04:88:ab:53:e0:9b:41:2b:a6:b9:62:6d:57:ca:c4:b8:c6:
35:12:d1:66:b5:62:c0:a9:6d:e7:4d:98:4f:51:ca:2d:02:f1:
e5:d3:66:09:1a:fe:b5:99:af:8d:e1:32:14:64:64:13:e2:1d:
2c:86:3d:b5:69:e9:16:b1:d7:ac:49:4b:ee:5d:56:14:b7:e7:
ae:f3:f7:09:63:82:36:af:66:63:fe:e9:7c:ea:3c:1e:26:a9:
08:70:46:14:b3:5a:3f:68:b6:98:22:d2:94:60:11:c4:dc:de:
86:f8:dd:61:28:e8:25:79:87:ea:0c:19:79:1c:80:0b:09:51:
6f:52:07:b5:e4:8b:66:2e:9b:25:cf:ec:50:be:d0:53:67:ab:
5b:a9:9f:4d:87:f6:27:46:ad:71:26:30:09:ad:c1:2b:5a:61:
01:6c:0b:96:40:b8:ca:9b:a6:d9:ed:6e:63:fe:4b:7e:70:09:
f5:71:83:d4:d0:4c:bc:f1:1a:e6:a8:59:96:9c:39:f4:61:ec:
3e:61:e6:25:a4:99:02:b0:b3:99:5d:b5:5c:a1:64:11:d6:61:
35:fb:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:55:19 2026 by rpki-client