Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: Ux+2SwjXT9rrWFmoOt8ioFqdnTuXx2A8EPIZUjv2018=
Subject key identifier: A0:23:42:B7:B6:92:9E:0C:FE:79:4F:C8:32:5C:CC:D8:0F:97:69:A6
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 01A12F8F63419081EE276F638A78D3CD4ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0DA0
Signing time: Mon 12 Oct 2026 10:01:28 +0000
Manifest this update: Mon 12 Oct 2026 10:01:28 +0000
Manifest next update: Tue 13 Oct 2026 10:01:28 +0000
Files and hashes: 1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: tenGz84RFZIcthgpWv4lSYVe8E6+pQycIfZFud+eis4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:63:41:90:81:ee:27:6f:63:8a:78:d3:cd:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Oct 12 10:01:28 2026 GMT
Not After : Oct 13 10:01:28 2026 GMT
Subject: CN=a02342b7b6929e0cfe794fc8325cccd80f9769a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:90:4b:e0:6e:97:12:16:ac:c6:b4:ce:99:
aa:46:e9:9a:43:6b:8c:fe:fa:ee:25:b6:71:20:77:
3b:af:e4:9c:cc:59:4b:b8:f9:43:bb:cc:dc:20:24:
43:ea:6c:bf:52:27:3a:aa:18:5f:41:6b:9a:9b:b6:
fb:43:e3:f7:25:dd:e5:6b:0a:e3:49:6a:28:b5:a2:
68:1f:38:be:a1:65:f5:5f:17:12:59:cb:49:8f:79:
eb:dd:b3:68:00:05:fc:0e:59:92:26:e3:0a:cf:85:
a1:9f:f0:a2:05:d6:a2:c4:34:d4:08:3a:0d:13:a1:
87:56:d0:b5:24:7a:77:1a:cb:b5:46:39:11:9a:44:
b6:c4:47:51:3c:94:20:a9:78:ad:d5:78:45:7a:11:
ad:76:a2:ed:da:3c:0d:6c:5f:e1:16:2e:9e:b2:6e:
51:19:6c:07:55:60:0d:b9:33:98:24:4f:05:72:6f:
c0:7b:04:5a:08:0f:e7:0b:5d:1f:77:e1:e5:50:f3:
ae:e1:af:0f:10:05:d1:e1:22:74:bc:9f:28:3d:c6:
50:84:b7:0b:99:7f:fa:62:00:4a:55:78:37:95:98:
fe:54:9a:96:d2:d2:d1:b3:dd:f6:97:ea:4f:a7:3d:
73:65:e0:05:4d:bc:6c:dc:20:7f:87:3f:bc:a7:d3:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:42:B7:B6:92:9E:0C:FE:79:4F:C8:32:5C:CC:D8:0F:97:69:A6
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e1:f6:18:fa:f8:f4:a3:b1:52:e3:0d:12:c0:56:e8:52:dd:
62:c5:54:0b:5a:69:ac:1a:be:82:87:fd:08:37:be:74:0f:32:
69:6f:e0:bd:4d:1d:b0:68:5e:8c:e1:98:49:92:42:5e:dd:50:
bd:a3:76:7c:64:b5:31:69:a1:7e:e4:7a:80:71:30:a6:e9:4f:
92:f3:ab:20:ef:77:a1:46:d4:5c:7c:24:2a:fa:92:cf:cb:5b:
80:b5:f7:0b:a3:70:24:0b:63:d9:c8:40:90:ae:fb:3c:ef:f5:
79:a9:52:87:1c:5b:06:c4:2b:44:12:b1:1c:eb:77:39:e8:8a:
9c:4c:a7:07:33:d7:50:3c:45:ac:43:93:87:93:24:41:b8:26:
13:ca:44:44:36:92:7c:3c:08:f7:bf:eb:11:33:4c:6b:4f:e4:
c4:d2:20:d3:7a:ae:aa:a9:d8:e7:88:92:50:f0:ac:ac:b7:b5:
f1:23:45:ab:1b:bf:c9:ff:03:87:45:be:ab:bc:10:54:cc:cf:
d6:a1:5c:3b:41:f9:5e:79:c3:c1:07:a0:72:9a:a0:05:18:79:
ba:01:68:68:9a:ca:fa:a5:84:a5:d8:fb:df:fb:58:c2:29:82:
e3:ee:86:43:af:58:2f:c0:10:73:b9:a8:6d:33:df:7b:92:86:
51:3c:a0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvj2NBkIHuJ29jinjTzU7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh
MGZjOGMwHhcNMjYxMDEyMTAwMTI4WhcNMjYxMDEzMTAwMTI4WjAzMTEwLwYDVQQD
EyhhMDIzNDJiN2I2OTI5ZTBjZmU3OTRmYzgzMjVjY2NkODBmOTc2OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVSQS+BulxIWrMa0zpmqRumaQ2uM
/vruJbZxIHc7r+SczFlLuPlDu8zcICRD6my/Uic6qhhfQWuam7b7Q+P3Jd3lawrj
SWootaJoHzi+oWX1XxcSWctJj3nr3bNoAAX8DlmSJuMKz4Whn/CiBdaixDTUCDoN
E6GHVtC1JHp3Gsu1RjkRmkS2xEdRPJQgqXit1XhFehGtdqLt2jwNbF/hFi6esm5R
GWwHVWANuTOYJE8Fcm/AewRaCA/nC10fd+HlUPOu4a8PEAXR4SJ0vJ8oPcZQhLcL
mX/6YgBKVXg3lZj+VJqW0tLRs932l+pPpz1zZeAFTbxs3CB/hz+8p9MhhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAjQre2kp4M/nlPyDJczNgPl2mmMB8GA1UdIwQY
MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt
ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh
LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuH2GPr4
9KOxUuMNEsBW6FLdYsVUC1pprBq+gof9CDe+dA8yaW/gvU0dsGhejOGYSZJCXt1Q
vaN2fGS1MWmhfuR6gHEwpulPkvOrIO93oUbUXHwkKvqSz8tbgLX3C6NwJAtj2chA
kK77PO/1ealShxxbBsQrRBKxHOt3OeiKnEynBzPXUDxFrEOTh5MkQbgmE8pERDaS
fDwI97/rETNMa0/kxNIg03quqqnY54iSUPCsrLe18SNFqxu/yf8Dh0W+q7wQVMzP
1qFcO0H5XnnDwQegcpqgBRh5ugFoaJrK+qWEpdj73/tYwimC4+6GQ69YL8AQc7mo
bTPfe5KGUTygUg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 13:35:09 2026 by rpki-client