Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: cjZ8Mk2GKuPKzoMxHLKjnQEl0LD/TmUAY7lZPZykMCM=
Subject key identifier: 07:00:B7:46:75:89:E9:2C:6A:CC:1D:70:46:54:C2:D3:74:E2:74:71
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019D9B511034D2233152B297B505B867FDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 12BE
Signing time: Fri 17 Apr 2026 12:01:14 +0000
Manifest this update: Fri 17 Apr 2026 12:01:14 +0000
Manifest next update: Sat 18 Apr 2026 12:01:14 +0000
Files and hashes: 1: YlfoTdAGtKVJRl62UD-WprjA018.roa (hash: tlZ2JEwQVRGsx8Mat6/7pCvodOthprr+noO3HnDM5w0=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: mivDHe7lfG91tP9ai5boR6NjJJAVKROeUwmNNvKrRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:10:34:d2:23:31:52:b2:97:b5:05:b8:67:fd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Apr 17 12:01:14 2026 GMT
Not After : Apr 18 12:01:14 2026 GMT
Subject: CN=0700b7467589e92c6acc1d704654c2d374e27471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:46:9b:9a:c4:a3:10:e8:0d:71:2b:b2:fe:
9e:c1:c9:63:8b:a8:c1:bb:3c:b7:eb:55:12:08:a9:
f7:bb:f4:c9:89:63:7d:36:db:45:f0:de:d3:bc:63:
eb:b8:98:7e:20:fb:9b:28:5f:4e:9b:2d:b2:34:52:
ee:4d:65:3e:26:ce:1b:1f:af:f6:62:82:90:ba:c6:
0e:74:c7:3a:6d:0e:51:b9:ff:ee:c6:17:0b:18:bc:
b7:d8:13:cb:86:6e:f3:58:50:f0:c1:4c:9e:90:0d:
6f:11:e9:e9:e3:9c:61:95:12:a1:fe:3a:a8:2c:5f:
a9:9c:a0:6d:4f:06:44:42:61:73:b8:21:db:b2:2a:
c9:f4:e8:72:e4:9a:7a:d9:2c:79:b5:0a:c8:ec:e3:
e7:96:04:f2:13:42:29:fc:c0:51:51:4f:48:ea:8e:
25:22:66:a7:30:0a:97:68:a9:eb:ee:d3:d7:82:7c:
49:94:5b:2c:35:14:8e:d3:3a:31:6b:43:01:3e:f0:
0a:b8:f1:9e:65:64:4d:f1:fd:6f:07:60:99:c0:91:
d8:94:37:74:6b:a0:9f:b7:36:0e:b3:f1:8d:38:c1:
a1:03:ff:08:f8:37:ad:e7:7e:fd:83:8b:f1:5c:43:
ed:4c:7b:13:de:30:d2:06:23:ef:f9:3c:35:3c:75:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:B7:46:75:89:E9:2C:6A:CC:1D:70:46:54:C2:D3:74:E2:74:71
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:7c:19:5f:2e:38:6d:04:4b:7a:6f:11:b3:4a:9f:f1:c4:
88:9b:2d:a7:f4:f8:bc:16:bd:11:58:f7:ce:83:04:d3:4f:8c:
d1:b7:47:5e:4b:a4:99:de:da:e5:cd:36:c0:8d:48:7e:a6:e0:
88:48:19:60:99:60:e8:49:15:f6:fb:0f:b0:c6:d8:43:1a:b0:
23:8f:ac:53:ff:c2:01:e8:4f:cf:4f:18:9c:f4:7d:a0:e5:15:
5d:fa:06:0c:65:d1:81:f0:fc:84:3e:23:19:af:ee:8f:be:63:
7d:25:dc:64:08:2a:9b:36:55:62:4a:92:7b:4f:fe:a3:ab:30:
34:83:a7:21:f0:8f:6d:e7:1b:f0:fe:ef:05:46:b3:4f:a4:12:
39:ae:61:9c:1d:49:0b:9a:14:ff:dc:dc:21:18:a0:cf:98:35:
69:26:d5:58:ed:44:43:fd:a7:e5:04:20:5e:19:23:33:f1:62:
29:d0:d0:aa:0f:7d:3f:79:81:09:a8:e6:b9:c5:2d:e7:fd:28:
8c:43:cb:3b:8b:16:8b:75:a1:51:f5:57:2a:ec:1e:58:0e:90:
41:a4:2c:78:02:36:46:20:28:44:de:11:d5:d4:75:b9:d1:29:
14:88:d3:0c:24:64:c0:cc:e3:32:21:c5:19:39:25:74:6e:97:
8f:43:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:08 2026 by rpki-client