Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: aqPW+ROjQ1tIriVKIoECwXrSf8TqwhAWiE7o9DLdUHI=
Subject key identifier: 76:A9:8E:A6:C2:62:55:CD:03:F5:B8:DC:50:92:44:54:CC:8E:8A:68
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A0BE42C8626CBE7CBB0D7DD70118CC7AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1A73
Signing time: Sun 20 Sep 2026 10:00:42 +0000
Manifest this update: Sun 20 Sep 2026 10:00:42 +0000
Manifest next update: Mon 21 Sep 2026 10:00:42 +0000
Files and hashes: 1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
2: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (hash: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=)
3: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
4: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
5: LKjf7o_3WUfKZdN019fUVQORc-s.roa (hash: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=)
6: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=)
7: hMETGb9VAC5A2KuzQKg4WmxFmJA.roa (hash: rjUrw2hE9fEw4IxQF4Ze8WeXj/DO7a6kjsn9RA2w4Os=)
8: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: iuvvtlhXeTnANKAC3l+ELnl1a5w79cYC62W/H4ViDFk=)
9: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:c8:62:6c:be:7c:bb:0d:7d:d7:01:18:cc:7a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 20 10:00:42 2026 GMT
Not After : Sep 21 10:00:42 2026 GMT
Subject: CN=76a98ea6c26255cd03f5b8dc50924454cc8e8a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:e0:dd:8c:3f:54:5e:53:4e:ed:dc:8e:03:
ec:31:e1:ab:fd:a1:c4:16:5a:5f:f3:56:69:8e:ef:
d3:ba:6c:41:a0:54:23:fd:74:46:0f:73:7d:13:8a:
3f:92:ee:9f:50:24:5f:19:46:de:78:05:45:e6:61:
73:88:1d:10:ac:6f:53:9b:65:48:e2:74:a5:72:63:
c9:ac:1a:29:38:11:b6:49:73:bc:f9:45:ca:42:b0:
03:7e:f2:14:64:20:7b:7e:a2:e1:2c:d4:16:b9:29:
a0:cc:6d:db:37:fe:22:fb:5b:4d:5f:31:a1:ba:52:
f0:9d:b4:13:32:b3:02:3c:c5:14:4c:01:bb:f2:16:
29:a3:85:08:93:02:61:81:d1:80:d8:68:3d:2b:be:
4c:c1:b5:f8:e7:96:7c:a2:8d:80:df:e4:f9:b6:ca:
8f:5b:23:0c:3e:c2:13:36:ad:14:e3:ad:22:1a:d5:
1b:29:34:75:6e:c6:ff:31:3b:70:95:d6:93:e4:f8:
7f:7f:14:7a:88:89:7e:3c:e5:ed:9d:42:8b:ed:22:
c5:fc:9b:7a:99:32:5c:d2:eb:b3:3c:29:a3:16:11:
75:e4:63:5e:0d:06:93:e8:de:01:ce:8b:fd:f9:4c:
75:24:12:aa:24:33:94:85:89:52:1b:b4:c9:91:40:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:8E:A6:C2:62:55:CD:03:F5:B8:DC:50:92:44:54:CC:8E:8A:68
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d5:11:92:18:4c:b8:cd:a0:79:c8:27:62:35:36:2e:94:1e:
ad:00:05:1a:54:2f:5f:da:8c:eb:bd:e7:cd:43:59:2c:76:f9:
67:58:d6:8c:e6:3d:8b:77:a2:88:4f:70:5b:43:ac:2c:85:90:
5e:99:e0:81:ec:f5:84:02:6b:98:a3:9d:5a:a9:d7:b8:09:4a:
69:e0:15:32:88:f0:41:bf:78:4f:19:01:28:3f:1d:b7:1a:e0:
b5:76:35:9f:74:3d:31:fa:0f:92:7b:5f:01:e3:d2:b2:dd:f1:
1f:37:ff:d2:73:b2:cc:3a:e6:3f:d3:7b:70:2e:7a:93:d5:81:
8a:c2:d6:97:11:6f:ee:30:48:40:fd:ca:82:9c:47:6b:73:11:
43:80:4e:2c:82:9a:be:78:ce:3e:7b:be:0c:6e:77:16:0d:1b:
d4:6b:cf:8c:43:2b:7f:0d:2b:e1:ba:8f:15:92:47:5a:34:b8:
68:b2:ae:e2:32:53:89:80:cf:4f:85:3c:6b:02:22:03:99:b0:
1a:36:0c:e2:81:aa:27:31:42:27:c2:b4:0a:a9:aa:10:54:f5:
f6:c1:fa:6c:9c:2b:e9:a0:fd:68:51:ff:52:f2:d8:92:bb:8a:
38:9b:8b:c2:2e:4b:66:62:ae:61:31:82:13:44:1d:2c:9f:bb:
18:f5:46:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+QshibL58uw191wEYzHqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjYwOTIwMTAwMDQyWhcNMjYwOTIxMTAwMDQyWjAzMTEwLwYDVQQD
Eyg3NmE5OGVhNmMyNjI1NWNkMDNmNWI4ZGM1MDkyNDQ1NGNjOGU4YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7/g3Yw/VF5TTu3cjgPsMeGr/aHE
Flpf81Zpju/TumxBoFQj/XRGD3N9E4o/ku6fUCRfGUbeeAVF5mFziB0QrG9Tm2VI
4nSlcmPJrBopOBG2SXO8+UXKQrADfvIUZCB7fqLhLNQWuSmgzG3bN/4i+1tNXzGh
ulLwnbQTMrMCPMUUTAG78hYpo4UIkwJhgdGA2Gg9K75MwbX455Z8oo2A3+T5tsqP
WyMMPsITNq0U460iGtUbKTR1bsb/MTtwldaT5Ph/fxR6iIl+POXtnUKL7SLF/Jt6
mTJc0uuzPCmjFhF15GNeDQaT6N4Bzov9+Ux1JBKqJDOUhYlSG7TJkUA2oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHapjqbCYlXNA/W43FCSRFTMjopoMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINURkhhM
uM2gecgnYjU2LpQerQAFGlQvX9qM673nzUNZLHb5Z1jWjOY9i3eiiE9wW0OsLIWQ
Xpnggez1hAJrmKOdWqnXuAlKaeAVMojwQb94TxkBKD8dtxrgtXY1n3Q9MfoPkntf
AePSst3xHzf/0nOyzDrmP9N7cC56k9WBisLWlxFv7jBIQP3KgpxHa3MRQ4BOLIKa
vnjOPnu+DG53Fg0b1GvPjEMrfw0r4bqPFZJHWjS4aLKu4jJTiYDPT4U8awIiA5mw
GjYM4oGqJzFCJ8K0CqmqEFT19sH6bJwr6aD9aFH/UvLYkruKOJuLwi5LZmKuYTGC
E0QdLJ+7GPVGMA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:01 2026 by rpki-client