Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: nRtdSF9dQx96KUpgDqRMWHoaC7TziHws/Pzfz4w/Vns=
Subject key identifier: 68:A1:DB:8A:C4:E3:45:97:0C:DE:B3:17:3B:34:91:98:36:CD:AC:28
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 01A0E28718FF9CBB6B3CBB9533C6B1D7028D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0E53
Signing time: Sun 27 Sep 2026 11:01:39 +0000
Manifest this update: Sun 27 Sep 2026 11:01:39 +0000
Manifest next update: Mon 28 Sep 2026 11:01:39 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: fFJIqISRZIJ9c31UjsObG02JysP032iIgYQNLtXRW40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:18:ff:9c:bb:6b:3c:bb:95:33:c6:b1:d7:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Sep 27 11:01:39 2026 GMT
Not After : Sep 28 11:01:39 2026 GMT
Subject: CN=68a1db8ac4e345970cdeb3173b34919836cdac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:e1:28:30:80:64:06:84:85:ac:ee:3e:91:
b5:3e:5d:16:b7:07:ad:1b:b3:45:a3:d4:49:cd:fa:
8e:c4:da:fa:44:76:0c:de:cb:d5:aa:fe:db:11:cc:
e1:6e:16:e1:24:2c:7d:64:86:2d:be:8a:d7:80:63:
f2:23:0d:36:02:b3:28:32:2a:40:ec:7a:b4:5f:4e:
85:5b:71:94:f4:33:b5:0b:57:f8:aa:f5:ff:66:01:
8c:79:67:68:c2:af:3d:1d:de:fc:b8:9e:0b:1c:f4:
5c:19:94:9a:bb:6c:9b:2a:1c:82:34:78:37:be:1e:
c6:70:30:88:11:df:c7:14:b9:5d:da:ef:7b:a7:5b:
f5:8f:05:56:a7:54:e4:61:c2:f0:27:4d:98:87:00:
99:59:c8:1a:67:04:db:34:1b:17:6b:a8:f4:d4:6d:
56:07:1e:e6:ba:17:ab:45:58:10:0d:b8:c4:9c:38:
84:80:59:08:27:52:ae:a2:0a:ff:35:36:b7:73:29:
58:f1:67:d2:a5:5f:0a:ca:1b:7e:ed:7e:72:92:80:
98:b9:4d:a0:2b:f1:ab:f8:5e:9b:8d:37:6e:60:cd:
42:3e:2d:b9:ef:37:b1:a3:a3:56:79:f6:fd:19:c8:
ff:ae:b2:8f:94:d1:94:57:ed:99:75:d3:af:58:92:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:DB:8A:C4:E3:45:97:0C:DE:B3:17:3B:34:91:98:36:CD:AC:28
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b3:0b:10:a7:b6:10:45:50:1b:10:fc:36:fc:ec:d3:5a:f3:
c0:af:ce:27:3c:be:2f:74:e9:0c:13:db:c2:24:86:b7:8b:49:
eb:91:bd:ef:b4:c0:9d:6b:78:0d:2a:3d:41:73:f2:04:f9:21:
c8:97:36:90:4d:e3:92:61:8c:7a:2d:ae:2c:2a:91:38:55:19:
b6:ec:d8:2a:97:68:bd:32:09:6e:da:cb:2e:3d:9c:90:4e:ad:
f3:be:14:85:cc:09:b5:08:f0:e6:b0:d3:96:e2:68:61:d0:2f:
8f:a8:05:2e:30:45:12:5e:e1:d0:fc:57:dd:70:40:15:ed:d0:
f5:7c:92:4c:17:a0:ba:21:48:55:81:30:02:85:78:f4:78:6b:
5d:e6:19:1f:87:18:69:02:ba:61:77:46:c9:67:b1:88:2f:bf:
9f:67:c3:88:9e:2e:51:12:b5:f2:97:d2:f6:a5:7f:27:f3:6d:
27:8c:f4:1b:4f:0d:e8:05:ac:56:56:44:dd:22:dc:29:3e:f7:
48:8b:69:e2:61:b7:0e:b4:6f:d0:c0:5a:32:3b:f4:0d:cc:e1:
a1:22:71:8c:ac:eb:15:b1:bf:0c:5e:1d:ab:2c:f5:ca:5c:0e:
56:05:56:cb:20:bb:ef:2d:ed:5c:e4:03:27:55:c3:a1:55:6e:
f5:e1:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:18:02 2026 by rpki-client