Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: 8kg74ilX1ehUPd98Bz0IWsJRKKfLdxw6ljQn/1bK4ro=
Subject key identifier: CE:A7:37:01:9E:7A:F8:64:6B:FF:C3:A4:9D:51:A4:51:01:86:D4:1A
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019FAD5248DC7FE2CA77D3A2B049FBC1C6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0CD8
Signing time: Wed 29 Jul 2026 10:01:18 +0000
Manifest this update: Wed 29 Jul 2026 10:01:18 +0000
Manifest next update: Thu 30 Jul 2026 10:01:18 +0000
Files and hashes: 1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: I1jpOLoO20sv/KUnxzvkCXNuc9IvrqdYqXtePTzuvH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:48:dc:7f:e2:ca:77:d3:a2:b0:49:fb:c1:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jul 29 10:01:18 2026 GMT
Not After : Jul 30 10:01:18 2026 GMT
Subject: CN=cea737019e7af8646bffc3a49d51a4510186d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:a2:85:9e:e5:c1:b1:2c:6b:97:43:cb:26:
c7:34:f7:47:73:6b:70:94:25:29:3c:a3:72:3c:67:
cf:61:41:e8:9e:63:e5:7f:d3:b7:9d:9f:1e:97:91:
ff:12:aa:68:05:1c:63:18:fc:9f:fd:01:13:71:eb:
05:c9:0c:ec:0a:fb:65:1e:31:cd:c5:37:2d:69:a4:
ef:e9:b8:63:58:d4:09:4e:2e:82:57:f6:66:ac:60:
fb:ea:5a:32:2c:c4:2c:60:2f:29:cd:56:19:80:71:
e2:c3:cf:76:ed:ad:50:5c:80:3d:c7:70:a0:df:6f:
f3:cd:91:e2:f4:0f:b1:df:cd:7b:14:47:b8:cd:de:
1c:2a:70:3e:3c:df:c2:62:f4:39:bf:3e:09:85:94:
42:cd:0d:fc:9b:28:48:07:ac:94:01:7a:e8:a3:a7:
56:48:5f:78:5e:cd:a9:ab:14:74:2b:ef:e9:ea:02:
0b:18:d9:3f:78:7b:ce:fd:b9:b5:1d:0f:7b:60:1d:
91:6a:18:56:a1:4a:63:fe:3c:fd:f4:ec:5d:8c:47:
8e:e0:31:c4:30:f8:35:5b:60:3e:3b:2d:29:64:24:
70:16:5d:32:9b:5b:48:a5:a1:2b:e1:2f:2a:99:5f:
0e:49:ea:62:56:30:37:fe:3b:9a:9f:6f:46:94:4c:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:37:01:9E:7A:F8:64:6B:FF:C3:A4:9D:51:A4:51:01:86:D4:1A
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dc:89:2a:be:93:11:da:e9:68:de:05:70:d4:b1:76:61:72:
a8:0c:5b:e8:35:e4:50:b1:5f:d6:40:df:0b:07:f7:c8:c7:2e:
07:f0:81:bb:9a:a3:0f:21:9c:d5:28:e5:eb:f1:0b:98:0d:f1:
b1:03:c4:ea:91:ac:b7:1b:cd:d8:06:aa:49:b5:f6:32:9b:4f:
70:46:ba:ab:6e:f5:21:fd:22:b5:08:a4:4c:1f:43:ae:68:fb:
97:53:43:56:49:5b:45:2f:97:3a:4a:98:a2:66:d7:64:16:c5:
5d:b8:f7:8b:47:27:a7:c0:cf:26:ff:28:28:eb:87:c3:8c:ea:
b5:b3:f5:f4:3d:03:18:ad:e9:fc:07:93:bf:2f:e9:6c:f2:ad:
c4:3e:d8:a2:65:9f:d7:71:bd:4e:71:dd:d2:42:d8:40:2d:7f:
19:c1:d2:15:65:e4:05:1f:93:0a:2f:46:94:86:78:fc:12:a6:
51:8b:d1:59:b3:e6:67:56:fc:b9:07:43:fd:2a:e7:47:a1:3d:
a5:66:8b:2a:95:28:6b:f6:d7:f5:e8:f7:60:b7:89:17:3b:54:
1c:5b:03:27:bf:8c:e8:3c:52:1b:f4:6a:9f:08:10:1d:b0:14:
0f:ed:39:77:35:d9:94:87:9a:5c:7c:10:dd:00:bb:3d:1c:a4:
4a:be:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:47:15 2026 by rpki-client