Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: /rW0jZ3FViZX8mMslI1J53IUQAkiAt/6Ss5xhL2Jf5s=
Subject key identifier: CD:ED:DE:12:F4:B2:EE:1B:25:B3:AF:AF:1F:94:C6:1B:3B:BD:38:A6
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019CADC795DD7A1744D08BE26CBCA12953CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 117E
Signing time: Mon 02 Mar 2026 09:01:04 +0000
Manifest this update: Mon 02 Mar 2026 09:01:04 +0000
Manifest next update: Tue 03 Mar 2026 09:01:04 +0000
Files and hashes: 1: GJLrnN9jbFArqwGuqjb_171b46A.roa (hash: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: kWWNN9SSI5upT0mM6ZY3R75OHkCcreaJzrhT15+c0YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:95:dd:7a:17:44:d0:8b:e2:6c:bc:a1:29:53:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Mar 2 09:01:04 2026 GMT
Not After : Mar 3 09:01:04 2026 GMT
Subject: CN=cdedde12f4b2ee1b25b3afaf1f94c61b3bbd38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:cd:0c:4c:70:6f:77:b1:7e:bb:32:2e:ff:
b5:55:0c:46:0b:61:ac:12:09:14:ac:4f:01:8b:33:
fd:07:63:16:d1:6c:ed:7d:f6:81:34:18:6a:b3:9f:
7c:93:66:bb:e7:d2:ff:a2:2f:1d:86:ed:61:d7:72:
b9:5d:0b:ae:ca:5f:4d:6f:76:47:96:01:41:9c:b6:
03:4d:84:9a:9e:87:64:7c:e5:8a:cd:18:65:19:4b:
62:33:2a:0c:74:9e:90:9d:9b:08:33:e0:6c:09:8a:
dd:67:8c:ac:31:f4:97:d6:70:53:39:27:d2:e4:3e:
a9:b6:03:5e:7e:bc:d4:c4:4b:10:d6:30:15:ea:be:
89:d1:81:26:d6:ce:c5:db:b2:5b:72:e9:75:4a:8f:
b0:8b:2e:a1:63:7e:58:0d:f1:84:fe:fa:9f:e9:12:
4b:b7:61:ea:e4:20:cf:66:0f:76:d9:ca:c2:e3:fe:
10:1f:98:2c:2a:0a:77:47:b7:8f:e1:63:73:40:8b:
8e:3b:8a:70:25:56:9e:49:e3:29:14:05:f0:b5:62:
a2:f0:e0:49:68:4a:e6:6c:51:1c:41:b1:32:0c:f3:
f2:4e:92:e1:ee:61:c1:63:05:c4:f9:b9:f1:50:c8:
40:c0:43:1c:1a:5e:58:9e:ed:2e:5e:e1:93:3b:9b:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:ED:DE:12:F4:B2:EE:1B:25:B3:AF:AF:1F:94:C6:1B:3B:BD:38:A6
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:6f:5c:26:6d:1e:27:9a:89:c9:b5:71:30:4f:a4:54:b3:
9c:aa:20:66:8e:d6:30:9d:c7:b0:47:98:a4:7b:2d:37:58:25:
87:2b:fc:c8:64:bf:22:30:1e:c6:de:b6:1c:27:d4:3e:2b:e9:
12:dc:3f:2e:fa:2a:86:07:12:a8:93:7f:fe:b7:26:03:74:5c:
ec:40:5e:f3:96:c8:bf:25:ac:48:71:d4:20:f7:b0:f5:79:11:
04:7f:50:04:6c:ef:1c:fb:b6:71:41:e8:25:08:9b:4a:d5:ab:
4a:14:60:c0:d5:14:74:22:67:74:84:03:b9:91:ba:cd:6a:13:
f1:bd:33:c7:0b:bd:7f:49:4c:4e:38:b1:d7:a0:20:7a:f7:56:
0a:5e:51:40:e0:97:66:b2:75:06:11:73:59:11:69:d3:66:b5:
70:3a:3e:e1:6c:29:39:4a:e3:64:54:db:c3:d0:90:cc:e8:2a:
16:e2:30:1b:9f:7b:88:15:99:62:53:3b:bb:f1:c3:45:33:2a:
21:91:4a:9a:9d:7f:cb:96:c0:a4:09:fc:fc:67:88:3f:c5:1d:
1a:2b:58:c0:16:3e:a2:2a:75:e1:89:dc:af:66:04:05:a1:13:
a7:4c:b1:79:78:05:f7:fc:f7:f6:1c:5c:54:ac:13:a4:81:80:
18:b6:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:57 2026 by rpki-client