Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: CzBlH77H5okJOIywsCsYYt30lmQX0mVPgPxqoLKJZlg=
Subject key identifier: DB:0F:F6:1F:6E:A0:89:54:0E:5C:FD:C4:1A:56:15:39:D8:11:42:16
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01A0D192FCE108A42AEBC402711850FAE902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0A61
Signing time: Thu 24 Sep 2026 04:01:06 +0000
Manifest this update: Thu 24 Sep 2026 04:01:06 +0000
Manifest next update: Fri 25 Sep 2026 04:01:06 +0000
Files and hashes: 1: JzLW8GyEJdEZAZBHGxxypt1ByX4.roa (hash: 9OsitL8ABoUN/oBkEaFvTG9xg39aKzooy4oqb/xcYz8=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: Qpnw8eoG6BGcpsL0wj3jzeRtj59HKBslJZ9GgbB7isM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:fc:e1:08:a4:2a:eb:c4:02:71:18:50:fa:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Sep 24 04:01:06 2026 GMT
Not After : Sep 25 04:01:06 2026 GMT
Subject: CN=db0ff61f6ea089540e5cfdc41a561539d8114216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:90:85:d6:72:e4:1b:16:24:2e:26:6d:2b:
6a:be:ea:b0:2e:87:29:06:98:3d:f2:7a:15:1e:4c:
55:e7:5d:cc:61:b6:01:9f:f1:f5:d8:4b:39:5d:ba:
85:45:65:86:22:dc:3a:5c:90:78:9d:77:f4:3c:97:
85:23:2c:12:f0:fe:ca:2a:45:89:ba:59:e8:bb:30:
e7:5d:fc:01:b2:68:ab:8f:9d:41:e7:8a:20:be:ef:
8d:df:5e:c2:91:ef:4e:34:90:e8:b2:e2:0f:9d:85:
90:17:d4:96:26:25:b6:a3:8f:ad:4b:c6:d1:1a:38:
7b:24:a8:97:78:22:67:47:6c:17:e8:3c:85:37:9d:
f1:26:ee:2d:15:93:32:89:9f:da:10:70:8f:1a:cb:
8e:46:a7:fd:0e:67:3e:27:3a:43:ae:74:6a:21:e9:
02:a3:94:3b:11:22:e5:dc:c8:77:7b:74:99:01:a2:
c0:6c:97:66:f7:a6:eb:d0:92:25:fb:ac:7c:6f:13:
4c:31:87:c9:cd:13:d0:e6:4e:48:0f:e0:cb:b1:9b:
11:73:0c:ca:2e:c2:78:49:73:21:ee:cd:0c:06:2b:
18:f2:82:b0:e8:5c:2b:c6:80:62:14:3d:b8:04:04:
78:d6:9e:52:94:74:c1:92:73:df:8a:02:c0:28:27:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:F6:1F:6E:A0:89:54:0E:5C:FD:C4:1A:56:15:39:D8:11:42:16
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2e:82:ac:e9:83:48:10:a1:9c:04:07:09:db:2b:a0:dc:8d:
8b:46:0f:77:24:3c:b3:bc:fb:09:78:5c:b9:28:d9:83:f6:fa:
1e:03:01:5c:d0:eb:ce:e5:a9:a1:24:8d:c5:24:dc:1e:aa:aa:
94:b3:04:3a:6f:93:2a:7a:6a:32:02:f1:05:31:7e:f3:05:33:
63:5e:6c:e4:39:ee:e4:d4:25:a3:9f:ed:a2:d2:9f:6b:67:41:
49:d0:92:a6:06:3a:65:6b:e1:b5:34:b4:f9:5b:ac:19:6f:ee:
ec:cc:e7:e0:fe:34:bf:67:7f:d0:e8:89:d4:f3:e0:0e:0d:6a:
7e:94:d3:54:9c:9a:21:9f:0a:f9:ab:10:8b:8f:24:dc:78:a7:
10:d8:b3:a4:35:15:b4:78:8c:ea:1f:2e:f0:05:56:e4:00:24:
56:a9:e5:cd:57:42:b0:48:d9:44:fc:39:d7:2b:8e:df:79:93:
ef:95:12:09:2b:a6:de:f3:6a:e3:b4:83:99:24:51:77:54:05:
cb:bf:24:68:10:87:7d:6d:df:8e:6e:4d:2d:82:af:c3:09:33:
79:22:ed:c6:ed:d6:4a:76:5c:e8:81:bd:11:56:c0:5e:cd:4c:
4c:e1:af:59:d6:fc:2b:58:47:22:f8:fd:4b:bc:fd:22:c9:f1:
cd:66:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:10:29 2026 by rpki-client