Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: UecLs3VUWmPBI4xpbkQQ/bDiML60Fr4vc25PW+KxEJc=
Subject key identifier: 49:08:6F:7B:52:83:90:8C:50:1D:FD:F4:61:BE:D3:C1:6B:80:FF:B9
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019D9B5147795EF3A082F6D306FE3A380D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:28 +0000
Manifest this update: Fri 17 Apr 2026 12:01:28 +0000
Manifest next update: Sat 18 Apr 2026 12:01:28 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: LOhxZdOfiZqudZWWZHajAbwO0xsa6hHvMGPs5DbHUkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:47:79:5e:f3:a0:82:f6:d3:06:fe:3a:38:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Apr 17 12:01:28 2026 GMT
Not After : Apr 18 12:01:28 2026 GMT
Subject: CN=49086f7b5283908c501dfdf461bed3c16b80ffb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:53:8a:e3:11:bd:b2:50:75:85:85:04:b1:
bf:d4:ed:94:7c:ca:34:02:c3:54:82:92:00:ce:a0:
1f:60:30:f0:da:46:78:ed:df:ca:ee:a3:a2:37:5a:
b8:49:2d:a2:4b:13:e2:9e:bf:da:ed:a2:b7:9a:64:
64:18:37:47:e9:4b:c7:d5:e1:98:72:08:26:60:f6:
a3:8c:c9:f8:a5:ac:20:07:c7:01:b8:91:f8:7c:04:
3f:f8:17:92:0c:b4:76:93:90:58:5f:8d:df:80:b4:
80:94:ab:21:11:f7:dc:b2:16:72:7e:04:6c:4c:8a:
7e:3d:07:6a:d2:9b:a3:e8:f1:60:0f:65:1e:80:e6:
9d:72:21:92:82:5f:94:2b:31:f0:0b:50:8a:48:2c:
17:4b:9b:7d:1e:1b:d8:13:69:e5:f5:1c:8d:ad:e7:
f6:04:49:fc:d0:f7:a9:2d:dc:22:3f:71:8c:d6:26:
2f:e2:ec:56:3e:f9:1f:a0:84:b3:94:59:0d:4f:f4:
43:bb:0b:ae:0a:5a:37:a3:dc:8c:35:1e:4a:da:5f:
65:7c:3f:c1:76:4e:f7:c1:0d:e1:0b:34:ee:2a:24:
83:68:be:2b:ed:65:c3:ab:73:e7:41:6f:0a:af:c8:
a2:7d:ea:6b:93:60:29:d1:76:fd:12:68:4b:7e:db:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:6F:7B:52:83:90:8C:50:1D:FD:F4:61:BE:D3:C1:6B:80:FF:B9
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:98:79:b0:4a:f2:3a:8f:0d:45:7b:44:81:7f:55:f9:28:4d:
af:d4:f4:f6:1e:af:76:18:18:df:73:ae:3c:0c:18:ef:db:15:
5a:22:2e:bf:28:5a:62:0c:55:d4:fa:6a:c9:44:97:6f:5f:ac:
0c:2d:b1:89:31:6d:e3:42:94:b0:e6:d1:33:fd:8e:3f:58:b2:
42:1e:a0:d4:bd:f0:a7:09:e9:ff:f8:48:4f:f6:0c:88:2c:f0:
ae:2c:e1:bd:e7:9a:8d:83:28:68:f7:1b:02:7d:27:5b:2f:93:
e0:5b:07:12:70:1c:d2:8e:e4:a1:f0:45:29:e1:65:5f:31:d7:
da:70:5d:7d:b1:b9:ad:37:cf:72:34:0e:34:36:26:44:72:22:
1a:94:2c:17:07:73:45:36:76:dc:f3:9f:51:c3:2f:b8:80:41:
f4:b6:1b:aa:f4:08:ef:66:41:74:35:99:1a:5c:3d:fd:a8:a3:
d6:03:6e:9e:48:b5:16:0f:85:5c:2f:ee:cb:e7:71:64:f5:16:
61:18:37:d6:32:9e:f6:5d:8d:eb:7e:55:8a:f2:95:9d:a5:58:
5b:ea:60:54:a8:b8:1e:1c:dd:dc:53:13:2d:6a:01:57:4d:e6:
2c:92:f0:ac:73:7f:e8:ed:de:4c:94:16:4c:8b:2d:08:2b:7a:
3a:f5:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:56 2026 by rpki-client