Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: Vg2lzavtP1v9kaA0emFvDMmlTz0P6sTP7+yj/raxf34=
Subject key identifier: 07:98:69:F3:CD:1C:F5:25:2C:90:07:07:E3:BF:38:29:8C:40:3A:E9
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019D9B50AEC39176DC93BF12321E5A910C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 11F9
Signing time: Fri 17 Apr 2026 12:00:49 +0000
Manifest this update: Fri 17 Apr 2026 12:00:49 +0000
Manifest next update: Sat 18 Apr 2026 12:00:49 +0000
Files and hashes: 1: GJLrnN9jbFArqwGuqjb_171b46A.roa (hash: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: jTh44PDTf+XOaWQgRTqUHloze6dIkkCBa2IBqfXdWOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:ae:c3:91:76:dc:93:bf:12:32:1e:5a:91:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Apr 17 12:00:49 2026 GMT
Not After : Apr 18 12:00:49 2026 GMT
Subject: CN=079869f3cd1cf5252c900707e3bf38298c403ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:42:ce:b7:82:d6:19:c6:97:02:61:c3:ed:
1e:35:0e:3f:09:c9:8a:0a:5c:73:fb:d8:4f:99:44:
08:2c:94:5d:11:3f:25:af:34:e0:59:b6:85:a0:16:
1a:b7:9e:e0:c9:98:48:89:81:75:fc:d9:e1:70:47:
06:a2:8a:84:71:2c:ec:82:eb:95:f7:73:0d:cc:3b:
ea:ff:54:db:7a:2e:4d:03:4a:03:58:20:a6:05:3b:
0f:4e:70:45:c3:60:7c:e3:86:45:17:7d:01:ea:32:
6a:c6:20:bc:2d:b5:52:ef:ee:ba:e9:64:11:6f:a3:
32:58:78:1b:41:af:2b:4a:98:5c:2d:69:74:4c:41:
8c:20:37:31:9f:60:d1:df:18:be:78:58:0c:04:14:
f5:e6:42:07:ab:35:37:c2:9a:f0:09:5b:24:44:57:
44:50:9e:02:bc:51:66:88:93:5a:e6:63:90:89:78:
f5:f6:ff:cf:41:6f:81:0b:81:d8:55:2e:d5:c0:c1:
8b:10:5a:5a:7f:2f:6c:e3:74:d8:bb:a2:0b:4d:eb:
8c:e6:80:8a:4d:02:d7:19:c7:01:ec:6f:0d:76:c2:
d4:d9:16:6f:ed:02:a8:67:de:ff:fb:a3:11:c0:38:
99:96:02:24:6a:bb:4a:5e:95:ce:3e:66:32:fd:ec:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:69:F3:CD:1C:F5:25:2C:90:07:07:E3:BF:38:29:8C:40:3A:E9
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:8a:d9:87:92:73:fe:e3:a6:0b:fe:08:ed:0c:5b:ad:c6:
9f:59:90:ef:32:5f:81:e5:2e:04:51:a3:f1:7a:61:28:6a:46:
5e:4c:c8:f6:f8:b4:ab:a2:d8:d7:ef:e2:d5:15:81:28:ae:84:
10:52:5f:e8:77:18:38:2c:cf:2e:c2:77:ea:64:f1:ba:a2:d0:
6d:29:2b:a6:22:e5:1a:e5:61:e6:ae:9d:f9:c1:f0:99:15:7c:
84:16:72:28:46:f7:80:c1:d2:11:34:32:99:56:d1:81:9b:d6:
4e:0f:83:c5:0d:d3:14:72:ba:e7:d8:c0:71:80:2e:32:77:6e:
cd:8e:48:76:22:47:ea:e3:de:ca:11:0b:ca:98:4e:e9:cc:cc:
29:49:8c:7d:13:e7:d5:29:0d:13:a2:a0:ad:e9:68:67:a9:99:
fc:53:d2:fc:6d:21:d6:a5:63:a8:07:ba:5f:07:03:82:69:b1:
6a:33:71:1b:33:5a:4a:30:97:0e:2c:fb:0d:9e:68:64:bf:88:
92:ce:74:14:93:16:de:c7:78:56:33:d6:5e:6a:a7:75:b0:8c:
ca:dc:72:53:70:e2:92:e9:3e:3a:8e:c2:08:2d:45:a2:9c:75:
a7:0e:ba:5c:b0:65:23:46:7c:17:1c:8e:7f:f8:7b:d6:69:a3:
e2:14:e5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUK7DkXbck78SMh5akQwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjYwNDE3MTIwMDQ5WhcNMjYwNDE4MTIwMDQ5WjAzMTEwLwYDVQQD
EygwNzk4NjlmM2NkMWNmNTI1MmM5MDA3MDdlM2JmMzgyOThjNDAzYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VBCzreC1hnGlwJhw+0eNQ4/CcmK
Clxz+9hPmUQILJRdET8lrzTgWbaFoBYat57gyZhIiYF1/NnhcEcGooqEcSzsguuV
93MNzDvq/1Tbei5NA0oDWCCmBTsPTnBFw2B844ZFF30B6jJqxiC8LbVS7+666WQR
b6MyWHgbQa8rSphcLWl0TEGMIDcxn2DR3xi+eFgMBBT15kIHqzU3wprwCVskRFdE
UJ4CvFFmiJNa5mOQiXj19v/PQW+BC4HYVS7VwMGLEFpafy9s43TYu6ILTeuM5oCK
TQLXGccB7G8NdsLU2RZv7QKoZ97/+6MRwDiZlgIkartKXpXOPmYy/ezBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeYafPNHPUlLJAHB+O/OCmMQDrpMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvmK2YeS
c/7jpgv+CO0MW63Gn1mQ7zJfgeUuBFGj8XphKGpGXkzI9vi0q6LY1+/i1RWBKK6E
EFJf6HcYOCzPLsJ36mTxuqLQbSkrpiLlGuVh5q6d+cHwmRV8hBZyKEb3gMHSETQy
mVbRgZvWTg+DxQ3TFHK659jAcYAuMnduzY5IdiJH6uPeyhELyphO6czMKUmMfRPn
1SkNE6KgreloZ6mZ/FPS/G0h1qVjqAe6XwcDgmmxajNxGzNaSjCXDiz7DZ5oZL+I
ks50FJMW3sd4VjPWXmqndbCMytxyU3Dikuk+Oo7CCC1Fopx1pw66XLBlI0Z8FxyO
f/h71mmj4hTlXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:53 2026 by rpki-client