Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: GljPVDOJNYP7B/iHbB3yqtm/qUzHVbxNJMuvfqgMN0M=
Subject key identifier: 95:D7:A8:B2:74:B5:53:4E:A6:64:21:A7:75:B1:A2:C7:56:0B:4F:D5
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019CABD9BF02496B8F9EE4D179E0B06A2230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:39 +0000
Manifest this update: Mon 02 Mar 2026 00:01:39 +0000
Manifest next update: Tue 03 Mar 2026 00:01:39 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: FUz+sfk6mZ5NfVPw+yEKc3F1XRRqoOZLicBHI+697uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:bf:02:49:6b:8f:9e:e4:d1:79:e0:b0:6a:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Mar 2 00:01:39 2026 GMT
Not After : Mar 3 00:01:39 2026 GMT
Subject: CN=95d7a8b274b5534ea66421a775b1a2c7560b4fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:14:19:00:3a:0a:00:56:9e:f1:f6:0b:b9:
b8:d8:b2:0b:2f:0d:8c:d7:f8:46:d5:3c:64:ac:d7:
d1:0b:23:74:09:de:85:c9:87:06:9e:49:3a:13:8f:
ad:f4:f3:6b:d6:34:90:07:94:b4:2d:f7:cd:fe:ad:
f0:e4:d6:e0:3c:64:a5:80:29:97:ec:d3:8e:d4:59:
53:60:59:ec:36:05:97:9f:6a:39:f2:5e:0e:d4:df:
70:d3:0e:28:eb:11:1b:ed:65:98:3b:d6:5d:eb:76:
fd:d8:f8:c9:4f:56:fc:82:ea:a0:1f:b3:83:3e:a5:
0c:ff:d4:27:d9:88:b8:4e:6a:2b:ba:0f:67:d4:9c:
b2:81:39:92:23:ca:6c:e2:68:e6:5e:8a:da:b8:af:
82:bd:92:f0:f7:dd:9e:fd:d4:e1:d4:08:cd:34:7b:
e8:ce:26:32:4f:82:8b:61:d6:b7:be:60:9e:0e:91:
55:15:e5:8b:38:9c:1a:50:0a:97:5f:f3:69:df:51:
22:6e:db:e7:8d:af:51:a6:31:89:ff:3b:50:6e:b7:
04:82:fa:0f:30:33:a8:c1:75:7d:61:1d:f1:e4:39:
66:76:d4:91:0e:e1:fc:72:c0:a1:c8:e1:1f:2c:2a:
78:59:cd:70:5e:14:b4:9a:1a:04:b5:11:c8:6b:fc:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:A8:B2:74:B5:53:4E:A6:64:21:A7:75:B1:A2:C7:56:0B:4F:D5
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:37:90:1e:1f:a7:4b:98:0e:57:07:0b:8a:1c:20:35:41:ac:
d7:b1:c1:7d:c3:04:e7:1c:5c:21:67:a4:af:3d:3a:34:1b:5a:
ae:6c:ef:09:fa:9f:8d:5b:69:90:8f:be:bc:80:ab:d1:20:59:
bc:be:6d:0a:8e:da:50:52:34:2c:24:ad:f1:4d:40:39:7e:c6:
73:3c:65:5a:42:18:de:9b:bb:51:c2:67:d6:25:c7:4d:06:44:
98:11:f7:a7:94:f2:c7:f1:aa:92:89:52:5f:6d:40:2b:bb:63:
ed:c4:05:74:24:dc:69:a6:10:56:5d:3d:ae:a3:c4:09:8a:00:
97:31:0f:54:76:ab:a3:64:3f:ac:4f:12:2b:22:cc:d5:6e:13:
8f:6b:e5:b1:f8:0a:9a:5f:33:6d:71:e7:20:02:86:ad:a1:8f:
4d:35:62:d4:7c:bd:8b:41:03:da:68:da:1d:1d:d7:7c:3e:d9:
41:7f:07:45:7b:3a:9d:1e:82:e6:a0:ca:90:b8:08:b2:77:40:
57:c1:fb:82:8e:40:0c:b2:4c:5c:a0:1c:1f:f5:52:10:60:50:
51:54:68:5a:41:27:9a:c5:ea:e8:8b:53:03:14:1d:07:ae:76:
2b:c1:94:2f:10:b2:d3:43:a8:56:a9:95:37:48:4e:30:ee:0f:
1c:06:fd:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2b8CSWuPnuTReeCwaiIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYwMzAyMDAwMTM5WhcNMjYwMzAzMDAwMTM5WjAzMTEwLwYDVQQD
Eyg5NWQ3YThiMjc0YjU1MzRlYTY2NDIxYTc3NWIxYTJjNzU2MGI0ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dEUGQA6CgBWnvH2C7m42LILLw2M
1/hG1TxkrNfRCyN0Cd6FyYcGnkk6E4+t9PNr1jSQB5S0LffN/q3w5NbgPGSlgCmX
7NOO1FlTYFnsNgWXn2o58l4O1N9w0w4o6xEb7WWYO9Zd63b92PjJT1b8guqgH7OD
PqUM/9Qn2Yi4Tmorug9n1JyygTmSI8ps4mjmXorauK+CvZLw992e/dTh1AjNNHvo
ziYyT4KLYda3vmCeDpFVFeWLOJwaUAqXX/Np31Eibtvnja9RpjGJ/ztQbrcEgvoP
MDOowXV9YR3x5DlmdtSRDuH8csChyOEfLCp4Wc1wXhS0mhoEtRHIa/xqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXXqLJ0tVNOpmQhp3WxosdWC0/VMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuzeQHh+n
S5gOVwcLihwgNUGs17HBfcME5xxcIWekrz06NBtarmzvCfqfjVtpkI++vICr0SBZ
vL5tCo7aUFI0LCSt8U1AOX7GczxlWkIY3pu7UcJn1iXHTQZEmBH3p5Tyx/GqkolS
X21AK7tj7cQFdCTcaaYQVl09rqPECYoAlzEPVHaro2Q/rE8SKyLM1W4Tj2vlsfgK
ml8zbXHnIAKGraGPTTVi1Hy9i0ED2mjaHR3XfD7ZQX8HRXs6nR6C5qDKkLgIsndA
V8H7go5ADLJMXKAcH/VSEGBQUVRoWkEnmsXq6ItTAxQdB652K8GULxCy00OoVqmV
N0hOMO4PHAb9ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:53 2026 by rpki-client