Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: sg6E/Qit0iiLqnLkgSymitaGzY1zqVo3wBza4Vr6css=
Subject key identifier: 20:03:4D:BF:A3:01:5F:AB:D8:5F:BD:BD:FC:D8:5C:7F:6E:D7:34:D7
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01A0D87287D0A893496EA1E51990CDBA3406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 13F7
Signing time: Fri 25 Sep 2026 12:02:59 +0000
Manifest this update: Fri 25 Sep 2026 12:02:59 +0000
Manifest next update: Sat 26 Sep 2026 12:02:59 +0000
Files and hashes: 1: 799p01cEpzh1fQudfMPgpFjsRRs.roa (hash: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw=)
2: Zq8AjHxCv4FTGqPd4LKVALKStFc.roa (hash: +Wgeeo4qZQi4AfCHDA8NNz4m0OfIuxblNCKxxi1fR7Y=)
3: myoyX_q9vIPxTzAgYlbVSc2eX88.roa (hash: P4ROwA466VASPGzKDVl6YaY3SuVjqtjt4nxr/DAe/W0=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: Wq/ajeKNYVhdygjU8dlv4kccUmFYkwgXvnUp2F3P+3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:87:d0:a8:93:49:6e:a1:e5:19:90:cd:ba:34:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Sep 25 12:02:59 2026 GMT
Not After : Sep 26 12:02:59 2026 GMT
Subject: CN=20034dbfa3015fabd85fbdbdfcd85c7f6ed734d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:91:89:16:66:23:84:47:c2:90:cd:8d:16:
a9:64:e1:63:98:a3:17:b4:6d:24:9c:68:6a:73:a2:
a1:01:58:f3:b2:03:bf:05:00:ab:69:22:e0:f1:66:
13:c5:e3:fd:57:c1:49:f5:7c:b7:7b:cc:67:29:f1:
a2:45:36:16:77:26:cd:4f:a3:37:9f:c6:4c:a5:83:
2e:6d:81:2c:6a:77:47:da:b9:06:f9:1c:a1:ce:e9:
53:28:35:d7:3a:7e:41:64:38:98:75:d4:d5:6f:4e:
a7:df:cb:f5:d3:c2:e9:32:ed:2a:fb:be:12:a3:e9:
fb:19:e1:55:87:4b:88:45:80:fd:86:a4:dc:0b:90:
06:a3:53:47:a2:65:3a:a5:39:35:27:c7:14:0c:c9:
32:ca:d4:48:d7:83:0b:fa:50:c9:d5:c9:40:b3:1a:
dc:44:8e:8b:53:ca:5a:37:7f:89:4b:09:12:ed:36:
20:d1:c9:73:97:20:4f:6b:b9:d3:4e:49:83:9a:47:
15:72:70:1c:33:54:dd:cf:f9:a2:25:d1:e6:85:4a:
03:e9:13:b2:42:28:23:5f:cd:2a:89:e1:34:ff:56:
8b:c0:ce:74:f1:63:b2:c6:13:54:e7:e7:e7:83:e4:
b0:13:6b:d8:d2:2d:c2:2b:e0:7a:19:29:f1:21:8e:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:4D:BF:A3:01:5F:AB:D8:5F:BD:BD:FC:D8:5C:7F:6E:D7:34:D7
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:32:31:d0:6f:33:7a:ac:05:bb:bc:36:52:01:2c:ca:ae:
71:37:f7:be:7d:28:9b:58:d9:47:a8:44:63:f9:03:47:f9:ad:
83:e7:8a:b7:6c:66:00:de:52:98:48:7f:86:07:dd:c4:b2:9f:
97:2d:38:2b:c3:56:7a:d5:95:9e:0f:b8:86:d8:ca:15:ac:4b:
d1:81:01:d0:60:69:09:09:5a:60:21:8f:b6:06:83:40:1a:ae:
f8:3f:dc:af:1e:d6:c1:2f:72:b3:bd:ea:4c:f6:e5:17:a0:54:
d2:2b:06:5c:97:ed:55:54:6e:f0:b4:c2:cf:3a:79:a1:cb:78:
86:15:84:b5:b5:a5:3b:e2:06:6c:7e:54:08:be:c9:9a:bf:a9:
bf:b5:2e:81:f2:c7:bd:65:48:b4:9b:72:9c:36:9e:3c:12:b4:
79:30:09:e6:92:50:ce:62:56:14:23:7c:d1:05:d6:f4:1b:ff:
2c:6d:ef:03:d5:39:48:71:9f:53:05:61:61:50:39:80:7d:fe:
a1:e8:6b:d9:4e:aa:f7:73:57:0a:dd:a4:e5:06:c0:b1:5d:ed:
6a:c6:55:80:0e:24:99:0f:9f:e1:17:bc:f6:a5:45:3e:5e:9a:
7a:65:cf:b8:12:6a:1b:60:cc:f1:d8:af:87:7c:0b:c9:20:3d:
94:73:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:37:33 2026 by rpki-client