Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: zwl311/MY0QvixBZADb3u447uC9eiUqkBYC0h+zwQxo=
Subject key identifier: 12:20:F9:64:68:31:4E:A7:D5:25:C7:A2:DE:8F:79:6F:FD:19:C6:6D
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019D98509D9CDE75A81EA60E4718D0A28F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 1282
Signing time: Thu 16 Apr 2026 22:01:53 +0000
Manifest this update: Thu 16 Apr 2026 22:01:53 +0000
Manifest next update: Fri 17 Apr 2026 22:01:53 +0000
Files and hashes: 1: 8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa (hash: LRaPlos+9PMu+yFLBbBjOJX5cPq1n8kJxvNzrnZnp+M=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: Pz3y3G2vNavkBOwBxrDeo5lvR7/9Gavd0/B7GTzUY08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9d:9c:de:75:a8:1e:a6:0e:47:18:d0:a2:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Apr 16 22:01:53 2026 GMT
Not After : Apr 17 22:01:53 2026 GMT
Subject: CN=1220f96468314ea7d525c7a2de8f796ffd19c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:30:75:ac:f3:b8:b1:55:06:1b:eb:b7:9e:
d7:5a:63:92:95:2b:a4:d1:b7:10:ac:90:db:fa:1e:
b8:29:b3:52:ce:84:5f:c7:7d:51:b6:8a:ae:66:80:
da:46:20:61:e6:cf:fa:6e:e1:33:00:a8:af:0c:95:
0c:fd:4c:1b:0c:9a:38:72:f3:58:2d:a7:05:71:f2:
5b:da:9e:5f:7b:9d:d4:bd:6e:e3:3c:fb:b7:2f:3f:
1b:68:eb:e0:c5:6c:3e:33:4c:5e:b2:fa:e5:22:f7:
1f:02:96:12:22:82:ea:5f:49:e1:67:68:a9:0c:ad:
de:83:fa:55:79:65:a6:62:2b:3f:a2:4c:11:de:6c:
bb:ff:bf:43:b0:5e:98:02:79:14:2b:b7:51:f5:57:
22:65:1c:4a:2c:df:29:76:86:3e:a1:5d:5b:89:fb:
6b:0f:60:db:31:28:15:6d:7d:01:57:0c:85:ba:bc:
12:b0:ab:31:e5:25:7a:43:38:5d:c2:2d:23:65:b7:
e2:35:65:78:ff:02:fb:4e:47:4f:df:07:85:23:c0:
f8:f0:65:c5:96:54:f7:b3:a8:d6:0f:27:e6:88:51:
f4:5c:d1:1e:fa:98:99:66:05:44:ae:36:01:37:65:
89:23:63:fb:cc:04:0d:f1:ca:ac:54:82:e0:ca:78:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:F9:64:68:31:4E:A7:D5:25:C7:A2:DE:8F:79:6F:FD:19:C6:6D
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:d1:6c:5e:55:01:08:b8:5e:7d:ae:2b:4d:8d:ae:48:c9:
f9:d8:60:88:25:68:a4:ae:e5:4e:5f:59:c6:70:f3:08:30:02:
48:74:a0:2b:43:38:7e:1b:6b:6a:39:b5:13:1d:51:ba:e8:50:
61:63:50:75:25:3f:95:60:57:c2:53:ef:5c:37:39:1c:cd:99:
ae:23:03:18:f2:55:b9:0d:a7:bd:2b:d4:27:60:25:52:27:4b:
e1:54:9a:3d:6b:eb:3d:9a:05:b5:59:7f:c9:cd:cb:0f:a8:d9:
9d:fb:c5:7c:35:6f:cc:64:33:5a:46:6e:a7:1e:70:a1:1b:2f:
56:b1:6b:49:b4:1d:81:6d:1a:3f:50:1f:23:da:db:1e:09:b0:
e8:6f:0b:8a:10:52:50:2c:5d:1f:b9:c8:3e:d2:1c:d7:7c:27:
12:85:e4:6f:5c:62:c2:71:1a:5b:07:5e:db:29:b6:c9:5a:ba:
b0:b7:c0:f9:26:dc:2a:0b:63:e5:36:4c:06:6a:ea:ec:7d:ad:
b6:55:3c:39:a0:34:0a:2e:af:88:d2:fd:f9:e4:c5:a9:bc:9c:
6f:43:3b:46:5b:5c:b5:af:4c:bd:61:b8:66:63:bb:5a:8c:28:
bf:85:ca:32:f7:ca:a6:7b:d9:d2:82:e8:04:af:e3:c4:64:01:
35:7d:2d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJ2c3nWoHqYORxjQoo9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk
MmU3ZDcwHhcNMjYwNDE2MjIwMTUzWhcNMjYwNDE3MjIwMTUzWjAzMTEwLwYDVQQD
EygxMjIwZjk2NDY4MzE0ZWE3ZDUyNWM3YTJkZThmNzk2ZmZkMTljNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog8wdazzuLFVBhvrt57XWmOSlSuk
0bcQrJDb+h64KbNSzoRfx31RtoquZoDaRiBh5s/6buEzAKivDJUM/UwbDJo4cvNY
LacFcfJb2p5fe53UvW7jPPu3Lz8baOvgxWw+M0xesvrlIvcfApYSIoLqX0nhZ2ip
DK3eg/pVeWWmYis/okwR3my7/79DsF6YAnkUK7dR9VciZRxKLN8pdoY+oV1biftr
D2DbMSgVbX0BVwyFurwSsKsx5SV6Qzhdwi0jZbfiNWV4/wL7TkdP3weFI8D48GXF
llT3s6jWDyfmiFH0XNEe+piZZgVErjYBN2WJI2P7zAQN8cqsVILgyngK5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIg+WRoMU6n1SXHot6PeW/9GcZtMB8GA1UdIwQY
MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt
NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk
LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo/RbF5V
AQi4Xn2uK02NrkjJ+dhgiCVopK7lTl9ZxnDzCDACSHSgK0M4fhtrajm1Ex1RuuhQ
YWNQdSU/lWBXwlPvXDc5HM2ZriMDGPJVuQ2nvSvUJ2AlUidL4VSaPWvrPZoFtVl/
yc3LD6jZnfvFfDVvzGQzWkZupx5woRsvVrFrSbQdgW0aP1AfI9rbHgmw6G8LihBS
UCxdH7nIPtIc13wnEoXkb1xiwnEaWwde2ym2yVq6sLfA+SbcKgtj5TZMBmrq7H2t
tlU8OaA0Ci6viNL9+eTFqbycb0M7Rltcta9MvWG4ZmO7Wowov4XKMvfKpnvZ0oLo
BK/jxGQBNX0t9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:36 2026 by rpki-client