Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: tI9veYe+2Jau+WAEEP0s5dL+aITiMfQh1hmOmlG43Hw=
Subject key identifier: A5:20:50:36:12:CD:81:33:D8:71:50:92:64:DC:B7:65:AA:8C:D5:87
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019CACEB528C94748A6C11FC6861A14A923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1343
Signing time: Mon 02 Mar 2026 05:00:29 +0000
Manifest this update: Mon 02 Mar 2026 05:00:29 +0000
Manifest next update: Tue 03 Mar 2026 05:00:29 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: nJQGASgfso0v8RsKC4XM4F2kXcjnCMOIHy20XZgwcK0=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:52:8c:94:74:8a:6c:11:fc:68:61:a1:4a:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Mar 2 05:00:29 2026 GMT
Not After : Mar 3 05:00:29 2026 GMT
Subject: CN=a520503612cd8133d871509264dcb765aa8cd587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:2a:1b:5a:9e:5c:aa:d8:05:bc:21:ed:92:
d2:71:01:5c:3e:df:c8:f9:48:be:2f:b6:b6:c4:eb:
c8:a4:74:b2:18:70:49:e8:43:7d:00:51:de:6f:f4:
ea:f4:d3:a1:e4:7e:90:fe:36:41:8c:e7:df:7e:4d:
92:83:5f:ff:9b:11:62:d0:7d:43:eb:a4:c1:93:11:
79:e9:0b:90:1e:9b:a0:ae:c8:66:6e:52:60:45:cf:
08:e2:6d:4d:e1:08:d9:55:04:9e:28:6e:c4:0b:9b:
81:c8:67:61:9a:c3:05:d1:3e:17:65:74:86:ec:a5:
14:38:1a:9d:fe:f0:d6:6c:71:86:2f:67:48:39:f0:
bf:62:3e:b3:47:43:b6:b5:e9:cc:13:8d:10:67:77:
20:2b:86:c8:2d:b5:83:35:fe:4d:3c:b6:53:2e:35:
0f:29:99:63:5d:19:db:09:b3:51:4a:bc:c1:7f:9e:
28:58:4b:92:9c:3f:f8:5d:5f:40:67:db:87:08:50:
a4:9f:9a:ff:80:e7:bd:da:80:49:8f:56:ac:a5:45:
4b:89:cd:79:5e:c2:e0:0d:a7:7e:33:d7:74:ce:70:
76:f2:90:fb:cd:4a:16:34:3e:84:70:9a:37:a7:fc:
04:ff:e6:42:66:e5:3e:8c:f4:3a:79:f6:bc:5c:66:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:50:36:12:CD:81:33:D8:71:50:92:64:DC:B7:65:AA:8C:D5:87
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:21:6a:26:17:8b:cd:90:45:d0:63:45:28:6a:5c:43:1b:
ef:83:c1:56:92:74:5a:33:15:2b:89:d8:f5:70:c1:cd:8b:c0:
92:47:75:66:65:03:83:69:90:5a:fe:61:2c:fa:3e:ed:45:bb:
8d:0c:ce:6f:d4:3e:34:c9:19:2d:29:cb:5b:85:63:13:c2:25:
16:9e:ec:4e:28:42:4a:b0:d1:44:98:e1:6c:d1:36:25:94:7e:
c1:02:7a:ef:cf:fc:f3:88:2b:33:34:18:40:88:2a:1d:03:8c:
0f:86:ff:68:ad:ee:7f:11:47:d5:93:64:50:53:32:ad:b4:67:
b4:af:4b:0e:b0:40:24:9d:dc:80:7e:d5:8e:9f:da:73:a5:86:
50:f4:93:75:a0:d3:a4:6c:34:e0:e1:cb:30:08:0e:4b:12:b2:
1b:65:64:39:22:b4:29:fb:fc:c0:e1:3b:e0:dc:e0:c1:81:f0:
25:44:6f:3e:76:4d:4e:58:87:18:c9:c4:1d:2c:cf:c8:60:9c:
95:0f:1e:44:c5:2e:c2:3e:26:7b:3a:21:51:e8:6f:b5:79:58:
b3:56:cf:ad:c4:52:4e:2b:97:d0:38:e5:83:88:b6:f6:cb:88:
30:87:da:23:f4:6e:9e:01:41:61:8c:80:e7:ca:ba:87:ae:e5:
04:1d:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:41 2026 by rpki-client