Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: hCNbxBrTqnQZ3ax6MyPdrMbkf4p56qrNg/NZ9pip55Y=
Subject key identifier: C5:D1:5B:43:64:DA:6C:D9:17:71:89:C9:1F:09:5A:8B:16:B3:60:F4
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019EC0DAD969654C6C96EBCECF4346D0E50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 12:00:28 +0000
Manifest this update: Sat 13 Jun 2026 12:00:28 +0000
Manifest next update: Sun 14 Jun 2026 12:00:28 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: WwaRaN2AqJZQfaOjdjsOxIFT7gUD2hgxGgy2tesT/SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:d9:69:65:4c:6c:96:eb:ce:cf:43:46:d0:e5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Jun 13 12:00:28 2026 GMT
Not After : Jun 14 12:00:28 2026 GMT
Subject: CN=c5d15b4364da6cd9177189c91f095a8b16b360f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:28:89:5f:2b:ba:fa:10:ad:66:47:18:14:
33:38:91:a9:79:a1:fc:c0:5a:6b:e4:ac:94:01:80:
fb:f9:40:54:a1:77:7a:d7:cb:32:6b:b8:70:78:1e:
5c:5d:16:f3:dd:0a:6b:64:3f:e7:18:13:45:e2:a7:
8f:f8:52:eb:f4:78:f5:09:47:45:24:1c:c2:2a:84:
52:6f:60:d1:6b:e9:4a:2f:0c:58:73:08:13:ad:9d:
e7:67:8c:ce:f6:3d:c0:4b:48:d9:78:f8:a9:69:74:
5b:6d:b3:51:c8:97:32:03:a2:48:14:94:b3:96:24:
57:69:c8:84:11:9f:6b:66:0c:77:2c:f4:c5:c2:4b:
d0:02:64:eb:63:d2:c2:49:f3:9a:17:76:92:3f:94:
aa:b7:4e:1b:35:3b:1f:a2:4e:88:b8:af:c5:81:a0:
7a:a2:e1:ab:44:01:47:65:ee:6f:c7:6b:27:63:3b:
96:f0:78:f0:06:4c:e8:7b:b6:ee:30:61:33:dc:ce:
ab:83:fb:26:f4:28:c3:10:c7:19:2a:a6:06:e3:92:
46:d5:a2:bb:f6:b1:17:97:e7:c7:c9:e5:9b:1f:4d:
d7:37:9b:95:96:e4:d7:b8:85:98:08:15:4c:ca:e3:
f2:5b:ed:d0:3d:58:24:a2:ac:e9:de:42:1c:f1:9a:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D1:5B:43:64:DA:6C:D9:17:71:89:C9:1F:09:5A:8B:16:B3:60:F4
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a2:83:49:25:44:a1:42:d4:9f:c6:0f:3e:10:86:0d:99:6c:
8e:b6:07:77:03:74:98:3d:5c:dc:8e:de:f8:69:5f:42:6d:eb:
fc:2a:0d:64:cc:e2:20:eb:e4:a4:52:05:88:c5:b5:c2:02:2c:
8d:1a:8e:32:e3:41:0e:21:63:5d:67:7c:05:20:bd:e8:d2:d8:
2f:1b:c9:a2:8d:d0:35:89:db:1b:89:db:24:37:bf:7c:85:8d:
b9:34:fc:1d:92:b3:66:6d:f2:e6:9d:b6:36:5d:0d:ea:32:ff:
2e:94:90:46:6e:e8:d5:8a:5f:c2:c3:ba:37:20:2b:32:96:82:
e4:1b:89:b2:70:7a:51:7e:06:4c:fd:cd:b1:11:2a:06:f8:a4:
d8:23:8d:eb:d3:2d:f7:54:30:56:51:ba:3b:17:c2:85:4b:57:
06:51:01:82:a9:50:3f:49:26:f1:ff:5f:90:37:e0:a1:9d:4e:
6a:31:a9:ac:74:e8:6a:02:25:26:a3:8f:e8:94:2a:36:47:b8:
f2:9f:13:74:2c:bc:7e:c2:f6:cc:0e:88:50:7e:b3:cb:1f:7f:
bb:0f:ce:02:68:ba:6e:4f:94:26:f1:8b:f6:e3:ba:0b:3a:de:
e7:f3:8f:79:1d:f1:26:bf:18:0a:61:25:e1:24:cf:f5:16:5e:
a4:b7:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:06 2026 by rpki-client