Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: 147HYIFL3Djgfe0MIggicEHtQfxtY9JoT6sjuzHxdb0=
Subject key identifier: EA:AB:D8:8F:CB:35:C2:DE:B6:5E:7A:82:AC:79:C2:97:88:95:6D:D0
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019CABD9CBABEF7E02F212A9CCDDE4382FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (hash: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: 0hTNpc8ByNI0akJTvHqTvi/CxUE71MVS1g5OQEDGIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cb:ab:ef:7e:02:f2:12:a9:cc:dd:e4:38:2f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=eaabd88fcb35c2deb65e7a82ac79c29788956dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:ea:1f:de:43:de:fa:ff:e0:05:bd:38:ce:
e2:76:3c:e4:6b:15:b2:d6:6a:8c:90:2d:05:b4:f4:
d9:d5:e7:88:9f:07:62:bb:2d:aa:c3:28:9b:8c:c4:
12:9b:0d:26:51:58:33:9a:89:e3:c0:e8:29:84:70:
ce:90:4f:3f:44:78:1d:06:ce:0b:dd:66:0d:c8:51:
83:8c:cc:0d:63:9a:a7:02:72:90:23:ac:82:9a:50:
e3:54:e5:c1:77:f5:bc:ab:c5:34:23:2f:4d:02:a9:
8d:fb:ae:93:e2:cc:4f:ee:24:29:03:32:c4:54:16:
8e:62:f8:df:2c:75:ae:5b:c6:f2:b1:78:07:1c:15:
2a:05:37:93:9a:a6:27:82:61:4f:a9:c5:6b:60:22:
17:de:d8:b5:41:4b:71:0e:48:35:10:d3:04:af:1b:
4d:be:a3:7b:a0:af:52:49:af:60:3f:dd:82:34:72:
a3:06:c8:6d:dd:20:65:07:80:c4:22:03:02:97:bd:
c4:6a:28:39:b5:0d:b0:54:40:42:2b:15:4d:54:02:
56:14:d8:e2:e9:a1:d8:86:41:b8:2b:07:81:e2:5d:
d5:5a:62:ec:1a:fa:8b:85:90:b5:2e:cd:bc:9c:d3:
c0:c2:34:9e:9d:41:f1:85:73:f6:ff:89:07:db:75:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:D8:8F:CB:35:C2:DE:B6:5E:7A:82:AC:79:C2:97:88:95:6D:D0
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1e:36:77:7d:e1:97:26:35:66:ca:43:2a:a4:18:f7:35:23:
67:6e:98:3d:dd:92:50:74:f3:db:5a:95:a8:c9:09:a6:64:f0:
35:22:7c:6d:3e:92:20:58:cc:77:b2:35:6b:5e:82:36:17:cd:
bf:da:57:05:c1:35:a4:30:a1:c5:e3:d4:f8:d1:be:5b:4a:e8:
c6:38:d3:fd:43:c9:ed:9c:96:1c:89:db:60:91:62:14:ff:d7:
f9:d5:25:72:9d:34:65:95:4c:27:e9:fd:bb:00:c4:ea:e6:18:
2a:cc:b2:2a:b6:81:e5:27:41:1e:6b:9e:f0:49:67:a4:47:6e:
b5:91:a2:c5:84:60:1f:29:e8:af:f7:2d:d8:56:3d:6e:ea:99:
6d:6a:09:14:85:7e:1b:e1:2c:53:5e:c1:f7:b1:41:94:b5:c7:
6c:09:12:ae:6b:ae:76:3a:59:38:94:e2:a8:b4:18:7c:27:16:
53:8f:13:3d:0b:4f:74:7c:f4:f0:4b:a4:93:cc:35:ee:1a:e2:
d5:c7:83:9a:dd:e8:ba:cf:a2:3d:a9:a9:3e:a7:44:af:ae:1f:
1a:9b:5c:b8:fc:a3:3b:e1:0f:c1:23:67:94:1a:3d:14:76:a3:
18:4c:12:a3:c3:98:6e:b5:15:fd:52:a8:be:af:c9:56:e2:d3:
42:12:df:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cur734C8hKpzN3kOC/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDI3NGYxMzliZDY2OWFhZWY3NzRkNjUwM2IyOGQ5OTY2
MzdiYmQwHhcNMjYwMzAyMDAwMTQzWhcNMjYwMzAzMDAwMTQzWjAzMTEwLwYDVQQD
EyhlYWFiZDg4ZmNiMzVjMmRlYjY1ZTdhODJhYzc5YzI5Nzg4OTU2ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArffqH95D3vr/4AW9OM7idjzkaxWy
1mqMkC0FtPTZ1eeInwdiuy2qwyibjMQSmw0mUVgzmonjwOgphHDOkE8/RHgdBs4L
3WYNyFGDjMwNY5qnAnKQI6yCmlDjVOXBd/W8q8U0Iy9NAqmN+66T4sxP7iQpAzLE
VBaOYvjfLHWuW8bysXgHHBUqBTeTmqYngmFPqcVrYCIX3ti1QUtxDkg1ENMErxtN
vqN7oK9SSa9gP92CNHKjBsht3SBlB4DEIgMCl73Eaig5tQ2wVEBCKxVNVAJWFNji
6aHYhkG4KweB4l3VWmLsGvqLhZC1Ls28nNPAwjSenUHxhXP2/4kH23Wj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqr2I/LNcLetl56gqx5wpeIlW3QMB8GA1UdIwQY
MBaAFJ5CdPE5vWaarvd01lA7KNmWY3u9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQt
Mjc3NWRlNTIwMmZiLzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQtMjc3NWRlNTIwMmZi
LzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh42d33h
lyY1ZspDKqQY9zUjZ26YPd2SUHTz21qVqMkJpmTwNSJ8bT6SIFjMd7I1a16CNhfN
v9pXBcE1pDChxePU+NG+W0roxjjT/UPJ7ZyWHInbYJFiFP/X+dUlcp00ZZVMJ+n9
uwDE6uYYKsyyKraB5SdBHmue8ElnpEdutZGixYRgHynor/ct2FY9buqZbWoJFIV+
G+EsU17B97FBlLXHbAkSrmuudjpZOJTiqLQYfCcWU48TPQtPdHz08Eukk8w17hri
1ceDmt3ous+iPampPqdEr64fGptcuPyjO+EPwSNnlBo9FHajGEwSo8OYbrUV/VKo
vq/JVuLTQhLf+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:38 2026 by rpki-client