Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: 6mcJ8mVSr+jslh9zwnv25A5Z3HlznACOt0rfsuy8Lis=
Subject key identifier: 14:10:00:EF:A6:25:8D:B9:39:22:06:D2:7D:44:0A:BF:58:AD:39:B1
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019CAED9C1310BF9D867752DC7953F8FE96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 14:00:32 +0000
Manifest this update: Mon 02 Mar 2026 14:00:32 +0000
Manifest next update: Tue 03 Mar 2026 14:00:32 +0000
Files and hashes: 1: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (hash: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: xD40356JtSHCz8x2AiQ9vcipwPBNi8LVRsxbSbbfKTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c1:31:0b:f9:d8:67:75:2d:c7:95:3f:8f:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Mar 2 14:00:32 2026 GMT
Not After : Mar 3 14:00:32 2026 GMT
Subject: CN=141000efa6258db9392206d27d440abf58ad39b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:9e:9e:90:75:c0:89:1b:44:7f:d8:66:cb:
c2:fe:22:65:8f:58:92:a7:7e:9e:a6:b8:83:b1:32:
17:b8:1b:00:fd:56:f7:56:39:32:f0:1d:1a:47:16:
24:d3:97:d5:16:fa:d9:a5:e5:de:79:9f:b9:0a:af:
4c:2f:71:ae:cf:d1:3b:21:1a:66:8d:7f:99:08:a0:
c8:62:a9:ff:0d:a7:92:51:ad:b2:ca:09:46:ed:a6:
9d:3a:1d:1d:3e:02:e9:f5:c7:04:6e:91:33:47:4b:
74:6c:14:5e:32:6d:54:95:8d:73:54:26:28:3d:be:
40:71:0e:25:be:6e:10:56:a0:46:34:b1:57:48:15:
14:6d:9a:03:bd:27:63:20:9f:27:00:36:aa:18:60:
43:c1:ab:c4:e5:8f:4e:2e:ee:00:f5:e8:bb:46:90:
da:67:79:51:28:f4:72:1a:25:07:97:99:f5:57:f6:
f3:d7:a5:45:07:8f:fe:65:1f:c1:4f:91:df:3c:8e:
48:4b:d6:8f:12:2e:9d:07:fe:bc:68:c7:41:5e:37:
e4:22:73:b7:34:9a:39:69:64:41:03:c2:a8:68:84:
29:8e:92:2f:46:1d:87:68:42:37:f1:af:a1:25:e0:
56:7d:c1:bd:dc:bd:1a:c0:29:76:66:fb:18:bf:a9:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:00:EF:A6:25:8D:B9:39:22:06:D2:7D:44:0A:BF:58:AD:39:B1
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:3e:df:23:09:b5:e0:19:6b:d4:2d:8c:4a:33:85:f1:e5:
e4:38:b1:14:e9:2b:82:60:68:7d:e5:bd:af:9d:54:30:80:6f:
29:40:a0:6b:b4:09:fd:4d:c8:66:96:9b:aa:86:d8:00:ec:d2:
ef:20:8c:e0:4e:f2:c6:5d:29:25:20:70:ea:cd:93:04:d7:2b:
8e:b4:96:c2:89:12:62:a2:b9:09:ad:8c:b7:c6:44:d5:64:8a:
03:8d:24:8d:cc:01:9b:56:92:d4:85:18:db:f3:b8:29:22:c6:
a9:91:69:92:aa:91:44:d4:88:0c:32:03:bc:67:66:91:40:54:
43:d2:51:5c:3e:3e:c1:86:6f:e6:66:c6:9b:98:0d:ad:74:38:
d0:63:d6:69:1b:c2:da:91:cd:16:16:aa:a4:12:6f:9d:b7:83:
90:08:b0:6f:ce:8e:33:09:7b:41:c1:1f:aa:3c:af:57:e9:01:
e4:f4:43:0a:ed:c9:53:0c:86:d3:fb:06:bd:cc:e4:40:44:12:
e8:bb:15:2e:d9:b1:ec:20:d9:e2:75:50:b3:21:af:63:63:7e:
9d:a2:5f:8b:dd:25:fd:8e:76:1c:02:49:2d:78:93:e5:2b:a2:
74:dc:6e:a9:38:dd:88:55:f5:f0:73:44:7a:8b:84:df:e8:a9:
43:af:bd:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2cExC/nYZ3Utx5U/j+lqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjYwMzAyMTQwMDMyWhcNMjYwMzAzMTQwMDMyWjAzMTEwLwYDVQQD
EygxNDEwMDBlZmE2MjU4ZGI5MzkyMjA2ZDI3ZDQ0MGFiZjU4YWQzOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZOenpB1wIkbRH/YZsvC/iJlj1iS
p36epriDsTIXuBsA/Vb3Vjky8B0aRxYk05fVFvrZpeXeeZ+5Cq9ML3Guz9E7IRpm
jX+ZCKDIYqn/DaeSUa2yyglG7aadOh0dPgLp9ccEbpEzR0t0bBReMm1UlY1zVCYo
Pb5AcQ4lvm4QVqBGNLFXSBUUbZoDvSdjIJ8nADaqGGBDwavE5Y9OLu4A9ei7RpDa
Z3lRKPRyGiUHl5n1V/bz16VFB4/+ZR/BT5HfPI5IS9aPEi6dB/68aMdBXjfkInO3
NJo5aWRBA8KoaIQpjpIvRh2HaEI38a+hJeBWfcG93L0awCl2ZvsYv6lq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQQAO+mJY25OSIG0n1ECr9YrTmxMB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0Q+3yMJ
teAZa9QtjEozhfHl5DixFOkrgmBofeW9r51UMIBvKUCga7QJ/U3IZpabqobYAOzS
7yCM4E7yxl0pJSBw6s2TBNcrjrSWwokSYqK5Ca2Mt8ZE1WSKA40kjcwBm1aS1IUY
2/O4KSLGqZFpkqqRRNSIDDIDvGdmkUBUQ9JRXD4+wYZv5mbGm5gNrXQ40GPWaRvC
2pHNFhaqpBJvnbeDkAiwb86OMwl7QcEfqjyvV+kB5PRDCu3JUwyG0/sGvczkQEQS
6LsVLtmx7CDZ4nVQsyGvY2N+naJfi90l/Y52HAJJLXiT5SuidNxuqTjdiFX18HNE
eouE3+ipQ6+9AA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:39 2026 by rpki-client