Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: pobWy3J9OcLitqqCx0pJOB9Lc3nHw/ZwDkNtRmKR9z0=
Subject key identifier: F0:3D:76:45:6B:DF:82:8A:5C:51:91:48:A8:E9:0C:C8:62:00:69:EF
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01A154E590AAC77E75C19F5772B0F9939D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0AA5
Signing time: Mon 19 Oct 2026 16:01:33 +0000
Manifest this update: Mon 19 Oct 2026 16:01:33 +0000
Manifest next update: Tue 20 Oct 2026 16:01:33 +0000
Files and hashes: 1: JzLW8GyEJdEZAZBHGxxypt1ByX4.roa (hash: 9OsitL8ABoUN/oBkEaFvTG9xg39aKzooy4oqb/xcYz8=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: +knXoskYeDOjGhZhSSlihkWT5SSSQvs1l59u+/BEGbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:e5:90:aa:c7:7e:75:c1:9f:57:72:b0:f9:93:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Oct 19 16:01:33 2026 GMT
Not After : Oct 20 16:01:33 2026 GMT
Subject: CN=f03d76456bdf828a5c519148a8e90cc8620069ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:4a:53:d9:6b:51:94:38:49:5e:7b:96:97:
7b:c0:58:76:ef:f0:1c:37:57:72:0a:dd:31:98:bc:
5f:c9:fb:f0:c2:43:5e:df:ad:dc:74:03:8f:4b:88:
d0:1f:e4:26:2a:fc:66:51:f2:a2:4d:87:4b:7a:b8:
d5:c2:1a:8a:3f:61:ed:27:85:69:1d:5b:3f:c2:ba:
fd:ff:81:84:45:d3:d4:e2:94:20:5e:1c:8a:ba:31:
c1:9c:62:01:a1:75:84:21:9a:6d:49:3b:78:0a:80:
55:43:8b:9f:8c:66:3c:6b:ee:64:93:3a:fc:d1:3f:
d9:47:57:4c:3a:d2:60:a1:63:45:82:19:79:69:90:
1d:e8:91:d2:1e:40:e4:c8:75:c8:6f:95:16:e9:a0:
c8:90:7b:89:4b:e6:29:42:97:50:cb:9f:d0:b5:55:
9a:19:29:29:45:68:86:f9:43:69:a7:58:bc:66:09:
40:b5:e6:93:c3:89:c8:84:b5:3f:cf:fb:e3:be:91:
55:90:e6:52:c8:90:e0:6f:58:e7:6c:e6:03:51:00:
20:22:44:3f:f4:66:29:9d:dc:4e:a0:1e:fe:98:0e:
22:a9:47:1a:d0:8c:16:36:83:3a:c1:4e:33:ff:51:
9c:76:c5:8b:cd:0c:88:13:59:01:48:12:95:29:f4:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3D:76:45:6B:DF:82:8A:5C:51:91:48:A8:E9:0C:C8:62:00:69:EF
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f7:3d:70:35:40:86:26:f0:05:45:cc:30:45:bc:b8:42:5b:
a8:98:36:2f:fd:11:5b:c3:1c:f5:61:ff:63:73:7a:b5:1b:40:
a7:df:55:39:b2:58:1d:76:51:2d:e8:9b:0e:16:b5:25:fc:94:
b4:21:31:87:c2:3e:eb:5e:0b:7c:3f:6a:b2:8c:23:0b:86:65:
9f:39:78:0f:aa:5f:e9:2d:2a:85:93:d1:e5:36:57:cb:25:d0:
35:96:4d:dd:9c:01:1f:6a:3a:22:58:3e:91:94:7b:ba:43:34:
4b:fd:e5:d7:1e:09:cd:84:16:ce:8c:69:10:9a:aa:63:6c:db:
be:6b:1b:3d:7f:8d:13:83:1f:9d:47:5d:1a:52:a3:23:be:02:
b1:46:31:36:9d:d1:bd:1f:ab:f6:eb:c2:f7:a6:6e:93:c6:12:
93:46:04:16:5d:46:5c:fb:47:df:4a:05:ea:f0:c0:c0:f9:c3:
20:17:99:3f:d1:ae:21:03:e9:4b:1e:ca:c2:02:61:da:6a:44:
14:41:0a:32:c2:d3:2d:f6:03:e6:8f:15:27:1b:75:75:a4:04:
e9:de:a9:be:2b:9a:e9:40:f8:4c:ac:2a:29:e0:4b:bb:a2:58:
12:9c:22:ad:05:42:45:0b:46:c1:c4:9b:8b:b5:7b:68:92:94:
27:93:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:02:20 2026 by rpki-client