Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: dGHU60Huwh3TTuojGLipnf9En12udTYsfWdjkLZEBX4=
Subject key identifier: 3B:63:89:50:5C:F6:09:DB:51:13:6C:24:F5:7D:82:4D:3E:EB:AD:62
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019D98BD6581268FDF0F96DF59B331BC6468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 1248
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: FAHbGGkA-ockCEhvvrJOayBGiSY.roa (hash: d3khCxUehB5Xaj9d2nF8tun9GlovuretpWutZjjFsR4=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 2qcAgbdB1IyRqEHIAL/l5G9cr3KOPZA1WqMWwkQ61ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:65:81:26:8f:df:0f:96:df:59:b3:31:bc:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=3b6389505cf609db51136c24f57d824d3eebad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:b4:7d:54:9c:aa:e3:7f:6c:71:f4:11:b4:
93:fa:13:78:20:be:3b:05:d8:ea:7f:e6:74:e8:82:
d4:95:cd:df:c5:5a:89:ab:8d:f6:2b:cc:33:24:08:
24:26:e8:77:36:d8:a9:5a:e7:d7:60:dd:a0:39:0a:
6f:d7:2c:8e:60:fb:40:cb:04:d2:d6:af:f2:6a:35:
e3:28:02:24:83:15:8b:6b:e9:ca:ec:16:ba:35:5a:
28:00:55:6b:31:2e:10:fe:63:ac:c0:f9:c9:49:69:
e1:1e:3e:63:fb:78:81:52:a3:a4:a7:d3:10:fd:54:
96:c7:8b:2a:9c:c8:cd:88:8e:6c:75:9b:86:11:00:
47:cf:ee:8d:d5:ac:5b:94:42:28:05:e3:12:66:0b:
b3:67:98:40:00:88:dd:65:23:64:d4:1e:b3:66:6b:
00:6e:04:81:43:e9:43:2f:9b:d7:b1:21:f4:b9:f3:
71:88:5b:ef:ac:eb:d4:c1:58:7e:12:88:71:68:f6:
74:ac:87:54:35:c1:33:23:e1:71:37:18:7a:1d:45:
b1:98:bb:48:09:95:db:16:67:33:16:25:7b:a7:37:
c6:7b:07:6c:d4:aa:cd:1d:a3:7c:ec:9c:ee:a1:02:
42:b5:fd:ab:97:9d:0b:e1:18:17:31:04:af:80:ca:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:63:89:50:5C:F6:09:DB:51:13:6C:24:F5:7D:82:4D:3E:EB:AD:62
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fa:50:38:55:62:83:fd:62:fd:15:74:39:8b:c2:54:d2:30:
e9:e5:f9:5d:53:bd:42:14:cc:6f:86:45:8b:d0:2f:cf:2f:f9:
8f:21:50:dd:d0:fc:de:d7:88:42:d8:40:df:14:10:a1:41:13:
66:ee:9f:eb:45:12:ff:6d:64:8d:f9:3a:ca:0a:fa:62:d1:37:
c7:d8:73:c6:a6:ce:5b:ae:fa:5e:c6:41:f5:ad:fd:45:8c:6d:
94:88:ca:ab:b8:3a:f0:1c:a4:a6:d2:4a:4a:24:29:90:f8:e8:
b8:1f:55:01:b0:a6:e7:9a:26:6f:25:3a:b8:7a:d5:fb:b7:ac:
26:78:3d:5d:db:23:36:63:3a:a7:9d:8a:04:d7:6b:17:21:31:
eb:d8:5c:c8:50:17:bd:35:03:e9:4d:a4:ec:8d:cb:5f:92:e2:
a3:b2:f0:6f:db:f1:da:2d:59:65:04:a5:f9:21:37:09:d0:f3:
92:0c:6d:64:48:e5:20:15:ff:d5:52:3a:b6:76:89:69:28:29:
4b:7e:84:ea:98:84:8a:39:e1:3e:3d:2c:c0:c2:23:9e:ec:a7:
c1:29:36:d6:55:cc:d9:0f:c6:3f:5d:b2:3a:86:20:fb:cd:c8:
e4:3e:c2:23:34:72:0e:fd:0a:ea:94:88:ac:2c:19:42:fa:4b:
1e:02:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:48 2026 by rpki-client