Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 7scjsEhehN9dZsc3VGGnwKgubxaa2KWI2CWoufkTAL8=
Subject key identifier: 06:57:E8:5E:53:37:9C:79:ED:FD:44:14:D2:46:15:C1:B0:57:89:D1
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019FA975170133E573467B0092DDBC451684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1477
Signing time: Tue 28 Jul 2026 16:00:50 +0000
Manifest this update: Tue 28 Jul 2026 16:00:50 +0000
Manifest next update: Wed 29 Jul 2026 16:00:50 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: Mb5N1T+h407xnQPtCWhGSPUe0h102Z3ktgw3kcMe7Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:17:01:33:e5:73:46:7b:00:92:dd:bc:45:16:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jul 28 16:00:50 2026 GMT
Not After : Jul 29 16:00:50 2026 GMT
Subject: CN=0657e85e53379c79edfd4414d24615c1b05789d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:7b:42:d6:78:92:60:66:23:b5:9d:c9:c3:
46:2e:a7:e0:eb:7a:20:fd:da:51:57:ee:94:1f:b5:
ca:34:1b:01:27:0b:66:6a:d0:78:55:25:65:2f:22:
b7:88:63:d2:d9:a3:14:26:79:5d:89:85:07:58:66:
4f:db:69:c4:45:e9:9c:38:9f:4d:98:92:5a:4d:11:
a2:42:fa:0b:2e:f4:5d:b8:94:90:8c:2e:0e:fc:8e:
f5:ee:71:75:38:d0:42:35:75:d3:db:e3:cd:79:6f:
d8:82:8f:c4:c5:2a:83:62:fb:f3:95:5e:a1:8e:d6:
b3:7a:61:de:ea:2b:51:05:de:15:08:11:8e:27:11:
2d:af:58:47:4a:3f:f7:88:cc:1d:36:b8:df:42:7f:
ea:ac:90:f2:bd:88:dc:7a:9c:c9:c6:bc:22:1a:b8:
bb:57:6f:f0:2a:06:20:13:8c:39:50:8f:bb:f6:35:
41:81:0d:8d:36:19:30:03:cb:49:c6:ca:4a:44:82:
49:6f:ee:55:f6:3f:fc:9a:9a:c7:17:0d:80:b1:b4:
08:85:ab:89:7e:5d:50:e7:3d:97:3b:e9:3c:5e:1c:
a8:df:3e:c3:02:d1:0f:59:a4:65:d2:a6:22:53:e2:
ce:f5:fb:e6:e4:c7:7f:5a:5d:b0:34:b8:ac:2f:51:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:E8:5E:53:37:9C:79:ED:FD:44:14:D2:46:15:C1:B0:57:89:D1
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:2c:2b:66:9c:ff:7a:5b:96:68:5c:51:cf:f8:2e:8c:f6:
c5:91:29:9e:99:c1:bf:5e:9f:72:e4:c8:4f:5b:ba:f9:7a:45:
cd:56:3a:90:e3:b9:46:d2:cb:34:22:6e:45:e4:85:15:6a:fc:
3c:53:49:58:a0:1d:39:a9:84:b9:6e:c1:fe:16:6e:03:5d:05:
75:ec:70:87:74:59:c4:18:02:a4:b6:e8:42:07:1b:3b:ab:78:
17:3c:ff:89:1d:2e:4f:2b:40:ad:a6:08:1b:c7:d4:76:95:59:
05:ba:e8:40:9f:c7:24:56:61:d3:c4:0f:61:f2:2c:96:ac:90:
cf:73:fa:51:b2:ad:e1:aa:83:e9:23:b0:84:0a:0c:b8:68:8e:
30:c9:0a:d3:e2:f7:18:92:62:5f:09:26:ee:99:1c:0b:31:b4:
17:c8:e0:89:32:f7:73:4e:f0:50:cb:66:7d:68:d5:b6:db:1f:
6a:35:d8:12:ff:28:3a:ab:37:f0:85:a2:5c:7b:f8:40:c4:60:
35:36:b2:aa:a3:86:0c:03:68:48:38:62:1b:fc:8b:8d:bc:7b:
0e:8a:25:52:59:79:97:fa:a6:ba:71:5f:06:9c:09:c6:3b:e2:
68:e8:1e:8a:e6:a8:b7:7f:d4:6c:15:9e:f6:52:38:8d:90:ce:
65:72:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:31 2026 by rpki-client