Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: AEZt/OkjW9VsV//xMR+qRJxSzVkDplnIY1w0CSMFX1s=
Subject key identifier: 3A:BD:38:E0:61:62:55:5E:1F:B5:F8:F7:A4:6F:67:32:01:5B:2F:DF
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019CABD93D45303D9D972FFA4E31DEA85A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: YlfoTdAGtKVJRl62UD-WprjA018.roa (hash: tlZ2JEwQVRGsx8Mat6/7pCvodOthprr+noO3HnDM5w0=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: //Rl1i6omhxh8fQWGT43ETCT7hi8iLdjxdBx8Yo8JhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3d:45:30:3d:9d:97:2f:fa:4e:31:de:a8:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=3abd38e06162555e1fb5f8f7a46f6732015b2fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:33:70:4d:6b:ea:9d:eb:f5:68:9d:5d:eb:
fc:a7:51:fc:ea:12:9d:44:c9:18:f9:a2:00:ae:af:
68:54:fc:ce:25:1c:05:fa:63:4a:f9:55:eb:03:b8:
4e:08:50:d9:4f:fe:fd:75:a5:24:57:88:88:d7:eb:
b6:bd:27:6a:c6:3e:0c:dc:83:86:0d:ac:f1:3a:63:
b5:f3:ca:66:f1:9e:76:b2:28:48:ef:dd:77:3c:e4:
8c:4d:8a:4b:fd:68:43:31:19:b7:f6:d0:b3:44:21:
a6:71:8d:6a:ad:40:a7:93:c6:68:a3:0e:f2:f1:80:
f7:33:d6:dd:c8:2c:6e:ab:be:b7:be:39:ee:2d:f7:
d1:e7:e7:8b:46:0a:a2:26:1f:b1:82:94:4f:34:9d:
90:c7:b4:0e:38:8b:db:50:71:ca:ad:19:3f:f3:c1:
47:a1:33:92:c7:f4:34:da:8b:c2:a3:73:46:85:ed:
13:46:11:6f:06:58:07:dc:fb:8e:ff:f8:4b:56:d0:
2d:91:f5:8d:3c:75:a2:76:e1:0a:06:9d:eb:18:7a:
ed:d6:33:18:4d:a4:59:02:5b:11:2f:5a:4e:a4:8c:
d9:d7:f8:44:e3:10:3a:5e:5d:c7:52:28:53:44:a0:
dc:96:05:93:35:ad:ba:83:99:6c:3d:ef:6f:3b:00:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:38:E0:61:62:55:5E:1F:B5:F8:F7:A4:6F:67:32:01:5B:2F:DF
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5e:ec:b5:8e:f8:cf:85:93:3f:9c:bd:fb:ca:ce:2b:d4:5e:
bc:68:b0:bf:7e:78:74:8e:42:85:71:04:35:09:b1:90:46:f9:
ee:d4:02:61:44:f7:ca:42:93:73:09:00:c3:95:4c:1a:20:e1:
e7:d4:a8:72:64:71:a7:c3:4b:15:da:a4:3d:91:93:16:2f:45:
b2:49:5f:5c:0c:b0:4b:dc:eb:2d:4d:90:11:db:3a:5e:17:90:
62:4d:12:7d:9b:c3:b1:65:4b:04:a3:20:13:42:29:75:df:12:
60:99:16:0c:d8:26:e6:4a:69:49:44:34:4f:55:11:5b:64:5f:
70:de:7a:70:30:11:10:b3:9f:ed:f2:cf:70:e3:d4:59:04:04:
1e:54:c1:cb:93:5f:a2:7b:71:dd:5f:7a:98:33:63:68:09:70:
5a:b2:de:a7:d6:2d:8d:6b:8c:f4:84:fe:4f:d5:58:e4:b8:27:
b3:6a:01:62:d3:af:b3:cf:a1:13:47:16:2e:71:69:b3:69:88:
1f:aa:f9:04:80:7e:d5:91:b0:01:0b:a8:7e:8e:97:23:d2:bc:
f3:52:58:da:29:92:b0:16:aa:8d:ad:bd:4d:f1:0d:0a:f3:6a:
63:09:5d:97:50:da:68:51:91:c9:8d:b7:14:17:8c:45:b7:65:
e7:11:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:59 2026 by rpki-client