Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: 754feDXHIjgS8v3E5kOynD/1cg+wucUMJESm1WRcF+c=
Subject key identifier: BE:38:C3:23:6B:C0:F3:B5:76:0F:91:4A:F8:51:64:4C:8E:AF:BF:09
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019EC0DAC718B38436230F6067BF5C21F7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 12:00:23 +0000
Manifest this update: Sat 13 Jun 2026 12:00:23 +0000
Manifest next update: Sun 14 Jun 2026 12:00:23 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: yl50HKHuN6deCOmtm9roceNYpYk3WqmZ9gfiMHcvX9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:c7:18:b3:84:36:23:0f:60:67:bf:5c:21:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jun 13 12:00:23 2026 GMT
Not After : Jun 14 12:00:23 2026 GMT
Subject: CN=be38c3236bc0f3b5760f914af851644c8eafbf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:50:8e:46:99:96:97:47:e8:e4:82:cc:57:
ec:b2:5c:10:7c:45:84:03:9f:4e:eb:50:e6:59:65:
4c:b8:6b:d6:0e:24:cc:f3:42:23:54:83:8c:3e:36:
9b:d6:5d:a5:c1:fa:7c:28:3c:33:ee:26:f0:e2:cd:
36:3f:b9:94:4b:e4:e5:15:62:86:97:06:e8:92:0a:
17:4c:c7:c9:0f:be:e9:dc:51:3c:32:11:4f:a6:10:
ed:1b:36:f2:27:36:55:40:2f:ef:f1:e9:b0:a8:f6:
16:9d:f1:db:0e:8d:8d:31:04:3e:0e:0d:48:64:39:
2e:49:df:be:f2:82:9d:b0:36:ce:62:bb:bd:9e:9c:
3e:b1:c0:de:3d:c0:33:51:cc:c8:0f:48:f2:2f:6c:
a7:c9:20:af:70:16:d5:94:59:b8:07:04:b1:a5:30:
89:19:24:96:d7:1d:68:0c:23:2a:7e:cb:66:40:14:
29:13:d9:59:82:d5:f0:ee:08:13:95:e5:bb:03:bf:
74:e8:44:63:b7:a7:9f:1c:f3:b1:86:c4:7a:4a:28:
38:1f:a0:ce:bd:25:1c:78:93:83:7f:02:ed:69:d7:
2e:ab:d4:cc:7c:d6:0a:0e:db:34:6e:05:2c:9e:cf:
d9:7a:2c:04:71:b7:90:9e:63:17:7d:90:84:8f:72:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:C3:23:6B:C0:F3:B5:76:0F:91:4A:F8:51:64:4C:8E:AF:BF:09
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:f8:51:2a:e7:b9:0b:fe:0d:0a:33:e5:da:2f:d4:cd:65:
26:0e:13:ed:7c:55:26:c7:ec:e6:de:a2:ba:a5:f9:45:7b:ba:
a2:d2:38:38:d9:0e:41:2c:34:fa:5e:6a:71:1e:61:9b:c5:61:
19:db:77:bb:1b:81:83:d2:23:42:91:46:31:9a:8b:43:c7:dc:
7e:87:9c:42:30:2e:a8:97:96:98:39:5f:a0:80:20:7e:ac:5d:
16:6a:31:66:24:6e:05:56:e7:30:ca:0f:c8:9c:e2:99:23:a3:
eb:3d:36:53:ed:14:5e:c8:08:21:ef:84:ac:da:ad:e1:b9:84:
26:17:75:9c:14:e7:c9:cc:ec:21:21:cb:88:15:8e:e0:2a:b7:
99:ff:28:27:88:0a:5f:d2:63:cc:e0:7c:1c:04:dd:d0:da:4c:
05:98:74:aa:ce:de:12:1f:22:0d:1e:b7:d9:45:ee:8e:e0:53:
88:93:fb:86:36:fb:fc:e8:08:d6:de:ab:4f:65:d8:c2:e2:e9:
f8:db:e9:16:47:2c:87:68:c3:d5:23:96:07:b2:9c:b2:18:21:
a9:2c:0e:58:5b:bc:27:48:c3:0c:f7:07:77:90:a9:64:d6:62:
23:f3:ac:2c:84:c9:b7:0b:ad:64:87:cb:a3:13:c6:ed:fa:50:
d0:45:15:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2scYs4Q2Iw9gZ79cIffKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYwNjEzMTIwMDIzWhcNMjYwNjE0MTIwMDIzWjAzMTEwLwYDVQQD
EyhiZTM4YzMyMzZiYzBmM2I1NzYwZjkxNGFmODUxNjQ0YzhlYWZiZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0tQjkaZlpdH6OSCzFfsslwQfEWE
A59O61DmWWVMuGvWDiTM80IjVIOMPjab1l2lwfp8KDwz7ibw4s02P7mUS+TlFWKG
lwbokgoXTMfJD77p3FE8MhFPphDtGzbyJzZVQC/v8emwqPYWnfHbDo2NMQQ+Dg1I
ZDkuSd++8oKdsDbOYru9npw+scDePcAzUczID0jyL2ynySCvcBbVlFm4BwSxpTCJ
GSSW1x1oDCMqfstmQBQpE9lZgtXw7ggTleW7A7906ERjt6efHPOxhsR6Sig4H6DO
vSUceJODfwLtadcuq9TMfNYKDts0bgUsns/ZeiwEcbeQnmMXfZCEj3LPXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL44wyNrwPO1dg+RSvhRZEyOr78JMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1P4USrn
uQv+DQoz5dov1M1lJg4T7XxVJsfs5t6iuqX5RXu6otI4ONkOQSw0+l5qcR5hm8Vh
Gdt3uxuBg9IjQpFGMZqLQ8fcfoecQjAuqJeWmDlfoIAgfqxdFmoxZiRuBVbnMMoP
yJzimSOj6z02U+0UXsgIIe+ErNqt4bmEJhd1nBTnyczsISHLiBWO4Cq3mf8oJ4gK
X9JjzOB8HATd0NpMBZh0qs7eEh8iDR632UXujuBTiJP7hjb7/OgI1t6rT2XYwuLp
+NvpFkcsh2jD1SOWB7KcshghqSwOWFu8J0jDDPcHd5CpZNZiI/OsLITJtwutZIfL
oxPG7fpQ0EUVlA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:56 2026 by rpki-client