Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: 4zgAjGI8qHBaSBme4tMaSKpMteyf+rqUjeuPjDsKOu4=
Subject key identifier: 69:E7:F7:33:01:37:97:8D:65:77:3E:C0:74:AB:CB:B4:5D:5C:C9:6E
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019D38D31D63DCB2614EBD77320E23249C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 128B
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: YlfoTdAGtKVJRl62UD-WprjA018.roa (hash: tlZ2JEwQVRGsx8Mat6/7pCvodOthprr+noO3HnDM5w0=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: gnPRZ+4CvqwV0Tna2dOt4H3OgZBwWXqKjIiAgKUY96s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1d:63:dc:b2:61:4e:bd:77:32:0e:23:24:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=69e7f7330137978d65773ec074abcbb45d5cc96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:c5:78:49:cf:84:31:3f:40:81:c8:cb:e2:
5e:6f:38:00:70:3c:cf:88:42:08:ed:a5:f8:a9:1a:
fd:aa:be:f2:2f:3d:fa:fa:8c:55:2d:ab:bf:fd:35:
68:04:60:92:89:75:2f:bc:c3:26:61:68:0c:92:6c:
61:ca:76:e9:75:4e:2f:ed:84:cb:85:22:ff:29:87:
11:ae:c4:21:22:ee:16:23:5b:58:51:c2:f4:c2:e8:
e7:50:60:0d:9a:4e:4d:4a:d7:92:38:06:02:2d:c1:
dc:9e:fa:5b:37:40:16:15:13:17:25:b8:7e:13:02:
b5:14:0f:3d:9c:63:5e:13:81:54:5c:cb:5e:1b:bf:
97:df:22:eb:aa:7d:05:74:25:d9:d1:08:a1:0b:17:
b4:dd:dc:7c:1a:45:da:b0:ed:75:07:02:22:b6:ed:
96:51:57:f8:39:e1:73:48:14:80:cc:81:23:62:2e:
d1:8b:2f:17:c9:e2:24:6a:64:8d:96:75:44:c9:45:
cd:cb:d3:37:87:56:2c:d8:b5:cd:a6:d2:69:7a:f2:
7a:9c:ff:9d:e9:07:61:40:b4:46:5f:4c:a9:a4:91:
fa:ce:23:84:40:92:ba:a2:b7:4b:ec:08:20:2f:8b:
a8:e8:fd:b9:61:c5:09:4f:06:c0:98:d3:77:1d:54:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:F7:33:01:37:97:8D:65:77:3E:C0:74:AB:CB:B4:5D:5C:C9:6E
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4a:0d:a8:e5:8a:e7:dd:a0:75:c2:4c:af:5b:05:e5:d0:62:
31:e7:55:b0:cf:0e:43:7b:46:eb:32:4c:77:78:94:0f:05:ce:
40:56:06:bc:7b:2a:b7:86:9f:52:e5:4d:60:eb:79:dc:55:3b:
0a:cc:81:95:9c:d9:f1:39:3d:b4:27:3b:48:e4:6f:4f:a0:5a:
1b:f5:b0:c9:e9:b9:43:d1:25:60:57:69:46:98:fc:ff:79:89:
af:a7:15:8f:90:68:46:7a:ba:73:a4:a7:1f:27:bf:65:f2:4b:
a1:06:05:a7:cd:27:0b:c1:f2:91:96:d5:48:00:4d:44:9d:44:
48:db:94:98:d4:6f:66:d8:46:0a:3f:41:15:2b:33:a0:39:20:
61:64:e8:d9:f6:74:61:6c:a3:84:96:2a:3c:1b:cf:e5:e9:5c:
4b:ba:f0:a3:86:14:fd:5e:d2:9c:23:f4:34:24:5e:03:fc:59:
ad:fc:c0:73:72:aa:2a:f2:4f:84:fd:2f:6a:d6:b5:aa:5a:92:
cf:77:62:ce:5c:5c:32:b0:6f:af:20:00:a1:8c:e1:b2:98:a0:
93:1f:59:bc:e2:37:d0:70:bf:3d:cb:f3:07:b9:89:5f:cc:8d:
5b:e0:20:fe:fa:c4:70:f3:68:54:66:18:91:03:06:ab:d2:17:
63:44:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:40 2026 by rpki-client