Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 6QmvNt6mhz9GzG7mJmtxwpS5K85olxkRBIEcUcjxwLY=
Subject key identifier: 1F:9E:25:96:17:28:83:2E:E0:57:7E:E6:B9:C3:4A:45:C3:16:C8:23
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019D9A3E090B3FBBBC210E60BA3BD12337F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1366
Signing time: Fri 17 Apr 2026 07:00:49 +0000
Manifest this update: Fri 17 Apr 2026 07:00:49 +0000
Manifest next update: Sat 18 Apr 2026 07:00:49 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: mUx3XKHyJmZpIs4hg7z0tYIYBA0FinltBIiVTxh2FOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:09:0b:3f:bb:bc:21:0e:60:ba:3b:d1:23:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Apr 17 07:00:49 2026 GMT
Not After : Apr 18 07:00:49 2026 GMT
Subject: CN=1f9e25961728832ee0577ee6b9c34a45c316c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:09:03:96:89:9e:09:3f:35:a0:bc:74:c7:
6d:54:39:13:7b:98:31:b7:1d:3b:54:ac:53:25:95:
f6:10:10:b9:a5:f2:d0:d6:81:ed:e2:10:b9:71:ca:
5f:d1:e4:46:7b:30:bd:b2:03:cc:e5:65:d1:f3:45:
88:0a:c7:c2:58:32:db:de:08:e9:18:48:da:70:a0:
13:72:44:3c:c7:98:85:fe:8b:29:e9:cf:a6:0a:8a:
fc:20:80:5d:2a:e5:3c:76:b0:9b:f3:aa:35:98:f5:
cf:93:be:27:70:52:10:62:3e:82:80:1e:c5:e3:09:
27:db:d0:15:78:58:1b:60:3b:84:10:e9:58:99:25:
f2:89:52:91:91:73:8b:c9:b2:ee:99:eb:9b:7d:24:
65:fc:e5:18:eb:7b:50:52:d9:cf:ef:d4:39:cf:66:
2e:5c:28:52:c3:57:d4:c3:17:93:04:5e:a4:75:4d:
e2:3c:53:b1:80:2a:0a:29:80:43:7e:43:7a:d2:15:
0d:d2:18:df:59:b6:a6:7b:4f:02:1a:f7:72:4a:d6:
2e:16:cb:a1:ca:ae:d6:ca:ad:3f:ef:27:c7:c5:72:
57:d6:1b:ca:65:ed:37:00:9a:04:d4:d7:e3:2c:42:
74:f0:f6:39:2f:97:b0:7c:b1:92:3a:23:8d:9b:8b:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:25:96:17:28:83:2E:E0:57:7E:E6:B9:C3:4A:45:C3:16:C8:23
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:be:f8:e7:d8:de:8a:82:fa:8e:74:12:ac:3b:5a:d3:60:
22:d4:ad:1d:8c:51:3a:ce:7f:52:0d:9d:68:c4:0b:75:08:d5:
d4:ab:57:18:36:66:ac:ff:6d:53:f3:2b:63:e3:0c:58:1c:fa:
4f:7e:ea:d5:db:0c:77:ab:5a:23:88:27:b3:e8:fe:ce:94:78:
12:18:5f:2c:d9:4e:c3:3d:8b:9a:87:7b:a3:5d:a0:a4:25:f7:
32:b9:05:2d:60:89:d8:d6:eb:9f:48:c6:21:10:53:62:ec:e9:
e2:88:e6:8b:7a:f6:61:06:c7:54:21:41:c9:47:9c:cf:66:78:
0d:ca:4e:38:cd:bd:c1:be:26:7c:4a:b8:ec:21:08:4d:e4:11:
6d:1d:88:93:b9:4c:10:e0:d3:fd:db:88:03:98:33:a8:6d:82:
0d:85:0b:13:d6:23:e2:26:39:91:5f:e4:97:3a:42:1e:a6:70:
c7:f3:05:c2:79:98:1a:70:6c:e7:0f:91:5c:73:7a:76:59:71:
bd:fc:a2:b7:b0:72:04:93:1c:9b:2d:1f:c1:64:ec:9d:4e:ee:
47:ff:0a:cf:0c:43:6b:c1:85:91:f5:6c:db:bb:15:ab:ad:7e:
b2:46:e4:b8:bd:64:01:cc:ae:87:99:1c:1b:d2:94:a0:b7:39:
85:c4:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:16 2026 by rpki-client