Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: pdZc13cJMP84eJC1Qpp5q0jIU2eGpXpRg8fP/xq0fnU=
Subject key identifier: 90:62:DF:0D:F8:9D:38:11:6F:5B:50:32:70:60:7C:F1:1E:2F:42:5D
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019D98505734B44B1E2A4460044A53DA2C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 08B4
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: OKdLnViu/akJ39y1ewdq/leO3sFn1ERZgWFQsBNMGLk=)
2: zD32Xj3PcakiszsGIXBTPatK-9k.roa (hash: iQ8hQ52AgtodECYlHitEBw6MO3wK+GphXogbQ5umKAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:57:34:b4:4b:1e:2a:44:60:04:4a:53:da:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=9062df0df89d38116f5b503270607cf11e2f425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:ed:ad:6a:e4:08:fe:7c:50:71:c6:45:bf:
21:b6:d3:b3:d7:f7:07:4c:55:35:36:c0:a0:41:e1:
3b:9d:05:73:5a:5a:6f:50:ac:c1:d3:f0:cc:a9:2d:
95:f8:50:95:38:40:4c:31:4f:37:1d:3d:84:0a:e4:
52:12:5d:cb:80:c5:fd:21:61:07:6a:6b:04:72:71:
51:80:5e:ff:cd:30:ec:10:6f:d5:8a:06:23:17:be:
c5:0a:2d:47:20:4d:e8:f1:7a:0d:88:b0:2f:46:fd:
cd:aa:3f:36:92:c3:26:40:a9:0f:8d:2e:0c:17:3e:
73:39:06:a9:28:ef:db:b3:de:91:c9:47:5d:22:39:
24:2e:b8:40:01:06:7e:40:10:81:4b:11:4d:cb:49:
98:83:1e:af:0a:d7:fa:a1:46:4b:99:a9:91:b3:8a:
53:7a:0a:0d:6a:d0:85:10:6a:c0:82:e5:a0:0b:64:
e8:79:91:06:37:c8:47:a9:af:c2:60:12:3b:90:13:
08:85:48:4f:dc:76:ba:64:a4:37:d5:6c:87:27:94:
06:f0:17:99:f8:c5:9a:8e:e4:9a:37:8f:bd:de:35:
27:ed:ca:e4:01:08:eb:cd:c9:14:2f:00:b6:f6:aa:
fc:99:77:b7:51:3f:7c:cc:18:3d:7e:fc:e5:5d:0f:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:DF:0D:F8:9D:38:11:6F:5B:50:32:70:60:7C:F1:1E:2F:42:5D
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:ff:1d:d1:80:5b:9f:f0:97:27:05:5f:80:95:38:03:97:
53:8b:f5:2c:5d:af:96:6a:13:90:78:ab:66:a1:95:9a:7f:b0:
e7:50:ed:c3:82:ee:59:3f:ec:67:2d:48:43:d9:cb:c8:80:90:
67:22:cf:4b:e7:5a:a2:dd:10:3e:19:78:9d:07:49:ff:89:a6:
95:76:5c:8d:38:57:26:d8:5e:22:47:7e:00:f9:8f:96:31:f5:
84:e0:8a:0e:cb:f9:a2:77:ef:f5:3c:e3:93:55:e7:19:40:49:
55:ee:0b:ec:bd:92:38:e8:62:05:b5:99:21:f1:6e:20:0d:2c:
08:a1:81:a5:10:dc:1b:19:e2:9f:cf:6a:4c:f6:0b:68:78:67:
2b:46:50:cf:e3:cb:6f:07:6a:7e:c2:97:ad:e4:76:f9:d1:01:
76:d4:a9:b3:11:60:ae:20:30:75:41:99:29:05:8b:48:7b:9c:
89:49:eb:48:6f:a7:8a:87:b0:72:d5:9d:db:f1:62:80:c9:37:
18:bb:c3:8a:52:e4:e2:b2:49:21:f0:b1:82:ee:01:81:66:df:
c3:49:8c:bc:a8:5d:74:e4:4f:ea:77:8d:e0:af:90:84:27:5a:
f9:af:3c:5b:dc:fd:81:a6:29:ad:0d:dd:4f:4b:8f:be:54:ee:
9e:fe:16:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:48 2026 by rpki-client