Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: 7I+lLY0DzFFgR6Ur77UbNIMK1JYm45SAYbCUpVYe9SQ=
Subject key identifier: FA:96:E1:18:6E:12:9B:AF:AF:75:E6:3E:62:6A:CC:AD:43:DD:14:C5
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019D39AEFDBF2DE324E60C1B9374B967C6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0883
Signing time: Sun 29 Mar 2026 13:01:02 +0000
Manifest this update: Sun 29 Mar 2026 13:01:02 +0000
Manifest next update: Mon 30 Mar 2026 13:01:02 +0000
Files and hashes: 1: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: xid0xZzcY8/8ovEGUOXD7rI77+LXDuGkbXljzWwTmYE=)
2: zD32Xj3PcakiszsGIXBTPatK-9k.roa (hash: iQ8hQ52AgtodECYlHitEBw6MO3wK+GphXogbQ5umKAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:fd:bf:2d:e3:24:e6:0c:1b:93:74:b9:67:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Mar 29 13:01:02 2026 GMT
Not After : Mar 30 13:01:02 2026 GMT
Subject: CN=fa96e1186e129bafaf75e63e626accad43dd14c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:58:69:39:ed:d2:78:8d:a5:39:89:84:da:
7a:12:57:a9:4a:74:a5:c1:d6:49:c3:f2:e6:a7:29:
99:e3:f5:54:78:da:d4:24:ea:14:f1:ea:88:0a:f7:
35:18:17:ef:ff:aa:be:0b:bb:94:2e:3f:44:97:05:
e2:c5:c8:9d:9a:42:4f:61:72:37:1f:92:53:3a:b0:
3c:59:c8:4f:11:05:e0:3c:56:32:05:68:aa:5e:2c:
7f:59:5a:d4:08:09:51:92:e9:71:a3:c6:f6:08:fc:
ca:7b:4b:43:a2:15:8f:d7:6c:f9:0e:84:34:b6:07:
6d:a3:87:0d:94:90:42:b4:ed:0a:e7:57:f9:25:a5:
cd:8f:ad:a8:08:75:ea:36:21:ec:c1:cc:fc:4b:93:
c2:a8:ce:f7:88:d0:6b:d2:85:96:aa:8d:36:a8:8d:
8b:3b:f4:b7:aa:64:f6:65:9d:f9:b7:94:af:56:3c:
0f:bd:f9:b7:0a:fb:be:69:94:ad:15:32:af:56:3d:
61:de:93:83:80:dc:8a:70:6d:ef:7c:02:1b:6a:64:
18:1b:d7:b4:7e:cc:72:94:76:96:22:41:cd:de:f7:
9d:e3:ac:40:8b:e2:66:04:9e:71:e9:42:2d:95:bf:
07:13:98:a6:c8:70:85:92:89:db:46:a7:33:d9:c5:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:96:E1:18:6E:12:9B:AF:AF:75:E6:3E:62:6A:CC:AD:43:DD:14:C5
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:ec:97:29:89:d0:42:2d:38:29:f1:b0:6e:ce:e3:49:03:
6c:a3:5e:02:b3:ec:97:4e:c2:aa:67:ea:88:e6:d9:b7:dd:17:
4c:4e:82:4f:24:e3:ec:cf:97:99:77:56:9c:22:03:f7:a6:3c:
95:96:8a:20:24:36:d9:51:52:bd:7c:56:38:5c:da:da:d5:b8:
ba:d9:13:95:82:c9:c0:d7:9b:ac:6c:f6:d7:0d:7b:76:3b:48:
8e:f2:15:5e:df:f3:6f:91:fb:82:3b:b9:40:93:d3:86:9b:cd:
55:48:bc:20:ee:f2:58:bb:c3:7e:bd:0a:a8:89:58:57:75:de:
f3:56:6d:61:12:7e:ee:e0:bd:10:82:66:c9:c2:84:fe:26:c8:
b0:1d:03:30:9b:0f:27:5a:76:d8:17:63:7b:63:5b:2e:1a:a7:
26:29:8f:38:2c:5a:c1:93:6f:39:b9:fb:00:1e:b2:b8:16:70:
d3:40:76:81:33:24:f2:9e:3c:8e:e2:dc:c6:d7:53:72:43:d7:
69:d2:8d:42:32:3a:b6:e0:42:2b:66:ae:cd:9e:50:ee:15:79:
7b:62:36:b9:89:2d:47:10:37:ab:f1:48:f7:92:7c:3d:6a:56:
8e:42:67:0c:8f:2a:45:0f:35:d1:ab:08:90:e4:2a:c9:6d:29:
e2:4a:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:26 2026 by rpki-client