Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: 5W8bDLdDs6Q66Y2d/bsT9WT7bx18jVI7VeeNMQitrbo=
Subject key identifier: FF:20:97:C3:21:8E:7F:69:B9:76:50:4C:AF:1A:89:49:99:48:D9:4C
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019ED31941D50A4237E1EB46584A95FEE243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0957
Signing time: Wed 17 Jun 2026 01:01:48 +0000
Manifest this update: Wed 17 Jun 2026 01:01:48 +0000
Manifest next update: Thu 18 Jun 2026 01:01:48 +0000
Files and hashes: 1: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: 3MT99MRWJ3JKuzung3tXwLUpNWEq5rXC9EnuPvlvYJM=)
2: zD32Xj3PcakiszsGIXBTPatK-9k.roa (hash: iQ8hQ52AgtodECYlHitEBw6MO3wK+GphXogbQ5umKAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:19:41:d5:0a:42:37:e1:eb:46:58:4a:95:fe:e2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jun 17 01:01:48 2026 GMT
Not After : Jun 18 01:01:48 2026 GMT
Subject: CN=ff2097c3218e7f69b976504caf1a89499948d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:4c:c5:1b:71:f6:18:e6:4e:08:a4:9a:c3:
e9:95:c5:cf:e1:98:22:1c:8a:f7:49:60:fc:76:60:
a1:b6:44:b8:2d:f9:bb:fa:81:8d:ba:c0:4a:71:d5:
9b:b5:dc:81:3e:e6:c0:5b:13:78:30:20:cf:70:1a:
f1:28:8f:58:f3:1a:c6:cd:34:dc:6f:68:e0:23:23:
3b:6c:e4:2c:84:e7:b1:64:64:8c:97:da:d9:45:81:
dd:a4:b4:68:97:20:5a:ed:75:28:ef:8d:bb:17:0f:
4f:04:8e:7f:bd:e1:c2:94:14:35:a4:8c:73:a3:b2:
b2:97:d0:ee:41:59:89:dd:4b:30:20:2a:83:13:bb:
98:d1:f7:5a:f4:ae:38:74:fa:53:44:4e:ea:c5:66:
20:a6:ee:3c:85:29:1e:2e:d3:ca:13:5c:ea:08:d5:
cf:7f:05:5b:fe:3b:11:3b:b7:34:d9:fc:e8:6c:86:
b6:11:2f:5d:d1:95:18:cb:55:81:1e:a6:89:1e:8a:
fe:cc:db:81:2c:75:ec:cc:ad:7d:0a:6a:ff:4d:83:
64:16:89:3d:53:ba:83:40:61:50:66:be:d0:09:aa:
31:3e:04:d5:3e:0c:58:f8:9e:88:34:2d:a4:e3:af:
a6:6a:01:c9:e5:5b:96:cc:d1:ca:43:62:7a:c8:79:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:97:C3:21:8E:7F:69:B9:76:50:4C:AF:1A:89:49:99:48:D9:4C
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c3:ed:52:f0:4f:0d:75:70:36:5d:a3:5d:8f:e2:52:f3:e1:
44:31:f5:88:98:a2:a3:41:80:aa:d7:96:2a:e7:fd:3c:9d:98:
45:33:38:82:87:e7:47:a3:5b:4f:c9:7c:e2:c4:34:60:6b:d8:
05:6c:60:9b:eb:e1:ab:04:b5:de:48:45:ec:40:97:7f:c8:92:
03:c1:98:ea:d3:cb:a8:c8:06:37:ad:a5:91:ce:b6:e3:75:54:
a9:a8:e9:5f:88:89:45:c9:c0:2c:35:63:09:61:30:09:ed:23:
12:0b:c0:55:eb:89:a4:fb:ba:c0:15:00:b3:51:27:d7:69:e3:
96:0a:11:33:dc:13:06:89:01:03:21:fc:0a:4c:45:f3:f5:dc:
5b:1e:88:fd:50:27:eb:31:a6:26:8b:cc:18:46:a6:59:0b:41:
b2:95:9b:24:0b:a8:ac:51:2c:9f:a6:00:15:3f:96:16:9c:6c:
8f:07:17:1e:6a:ef:9a:f9:ee:a4:78:c4:e3:d9:2a:d9:61:11:
d6:41:4c:20:ab:61:13:da:41:e7:06:64:6b:f8:92:dc:3c:5d:
56:25:f0:96:a6:c5:f3:0f:a2:e1:0a:4f:97:76:63:84:44:54:
0e:26:93:9c:54:2c:88:66:7b:f9:25:f4:22:2e:ee:b9:d3:97:
2a:89:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:52 2026 by rpki-client