Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: F8vU/q1CBCGsp5ZMuxVfGJacpxrdgj5f3ShByzQWMGI=
Subject key identifier: 3E:59:C9:D4:6A:55:32:4B:3E:54:06:00:D8:EF:E5:09:11:14:C8:DA
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019D999950BC91BCCA09887C2433FE06F01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0BBB
Signing time: Fri 17 Apr 2026 04:00:54 +0000
Manifest this update: Fri 17 Apr 2026 04:00:54 +0000
Manifest next update: Sat 18 Apr 2026 04:00:54 +0000
Files and hashes: 1: 65XPpJ8B0UDLjo_rBH8QftmyqVA.roa (hash: /nCe4ab35wvdZ2ZW1RceiPXC/RgtUn+BuxAA3UpZf4o=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: kOxr2f5DJ0SWsYY2cfsvWckP5EgtAOKJMFXElXjmbYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:50:bc:91:bc:ca:09:88:7c:24:33:fe:06:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Apr 17 04:00:54 2026 GMT
Not After : Apr 18 04:00:54 2026 GMT
Subject: CN=3e59c9d46a55324b3e540600d8efe5091114c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:5c:f0:85:dc:a4:e3:fa:b0:93:06:05:32:
79:e6:5e:68:b1:a8:a4:4b:cb:ec:86:a5:1a:0a:ad:
33:cb:5b:54:f9:bc:9d:4f:c5:f4:eb:41:6c:58:60:
1d:48:a0:1a:f8:2a:c5:01:de:a9:3b:4c:73:ae:01:
eb:23:d7:d7:d6:cb:b1:04:89:1e:18:34:0b:41:ef:
b7:c9:ea:37:8f:f7:a4:f9:a0:db:ef:c4:b9:48:d5:
8e:9b:d2:c3:6f:38:f2:25:c0:fa:27:38:8a:f0:b6:
9f:40:2d:d6:84:1d:3d:cf:70:fb:24:c3:38:37:64:
58:e4:6b:50:20:da:75:43:7c:a1:04:f1:78:0e:ee:
dd:fd:4a:58:ab:f1:9d:01:c6:1b:05:a4:9e:87:27:
37:5d:e7:07:9f:1c:10:cf:21:55:12:29:78:76:c1:
a1:a3:2b:81:c2:db:73:4a:f3:5c:b2:f1:a5:c3:eb:
41:86:85:28:f2:d5:06:92:4c:e3:01:c7:50:3a:f6:
51:11:e3:9f:f8:3a:76:61:90:72:14:25:84:3a:fc:
d8:ef:25:31:f5:0a:4c:dc:9a:8d:6c:01:b2:7e:a8:
6f:b0:25:d7:e9:53:e8:c1:8d:c1:28:fa:d1:5b:dd:
1d:99:85:5d:b0:c7:4b:1b:1d:d1:c9:51:bb:44:ae:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:59:C9:D4:6A:55:32:4B:3E:54:06:00:D8:EF:E5:09:11:14:C8:DA
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:99:b3:49:55:21:a1:97:db:62:6a:32:3a:ac:09:fa:d6:8b:
ed:6d:1b:86:c5:6d:22:3e:1f:c1:64:10:19:e0:6b:11:e5:7e:
e8:d4:e5:0c:d8:5f:f2:e4:0b:b3:71:38:3b:65:09:27:3f:fa:
98:35:61:ba:e4:df:e3:ae:89:2c:c7:bd:1c:8c:c7:38:f6:f6:
74:9e:5d:d0:08:cd:77:c9:6d:88:26:b8:13:bf:cf:7c:03:90:
a6:16:1a:55:e8:46:14:7e:56:dd:32:ab:fd:d5:4f:81:71:dd:
5b:f2:33:e7:1b:c3:62:29:94:15:cb:e0:48:05:4a:09:7a:63:
c3:f1:ab:e4:55:af:6b:3e:24:9c:f8:5c:9a:7f:ac:06:16:16:
64:e0:44:0e:b5:da:89:3e:fe:f9:20:83:60:04:04:cc:b7:5f:
39:8f:33:81:5e:69:5b:e7:e2:ad:5b:55:49:5f:82:e8:c6:57:
26:13:f0:46:6f:d4:b3:28:00:88:a4:f6:7e:ab:32:b6:70:d2:
3c:41:05:c2:8e:f8:c5:e6:dc:d7:61:99:e5:b4:30:ee:a1:d3:
94:2a:b4:40:a0:35:8f:12:ce:7b:49:b0:76:91:93:ee:ec:e0:
73:99:22:41:54:3e:df:57:f7:6b:1d:7c:d6:af:92:57:74:20:
0f:d6:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:14 2026 by rpki-client