Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: 9qU2ihOBcLdmvwc7oes6IV3L8wWFblfwESXwwvSQli8=
Subject key identifier: 91:87:2E:BC:24:78:91:98:AF:F0:3E:35:F4:62:4A:43:25:60:3E:17
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019CAEA367318D23D9A10F7477CA551734A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 1209
Signing time: Mon 02 Mar 2026 13:01:10 +0000
Manifest this update: Mon 02 Mar 2026 13:01:10 +0000
Manifest next update: Tue 03 Mar 2026 13:01:10 +0000
Files and hashes: 1: 8cEfC1N1e8UVOvxoeOQe4DTgdIo.roa (hash: LRaPlos+9PMu+yFLBbBjOJX5cPq1n8kJxvNzrnZnp+M=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: StVbV6E+DcHJshX9aAdRR41TviBGaseLAFKxUif2QIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:67:31:8d:23:d9:a1:0f:74:77:ca:55:17:34:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Mar 2 13:01:10 2026 GMT
Not After : Mar 3 13:01:10 2026 GMT
Subject: CN=91872ebc24789198aff03e35f4624a4325603e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:63:6c:be:84:96:61:68:1a:4f:a2:16:d1:
54:51:cc:41:37:8b:eb:b8:15:ca:c2:f6:eb:93:ea:
e3:20:eb:25:af:42:28:d1:01:1c:ec:f4:09:a1:34:
6d:a5:2f:73:56:46:58:86:17:e0:62:80:f9:27:71:
05:61:e2:2f:0a:86:22:15:7d:d0:45:07:43:38:2a:
66:e6:4d:f1:f9:76:20:34:98:d9:fb:d1:17:07:c1:
76:24:5f:0f:06:f6:c3:34:48:a4:61:93:0f:af:06:
74:b9:6c:a7:37:20:28:c8:b3:80:c2:4c:d3:6c:ff:
32:68:19:6d:12:ef:b3:66:e4:00:ef:d5:e7:60:8a:
8c:98:db:15:20:65:34:c0:02:a5:6b:16:39:80:ee:
15:09:8c:f0:92:8e:42:c3:35:b1:57:c9:d1:80:4e:
fe:8c:14:8c:74:87:fa:08:ba:01:de:a2:8f:28:f4:
8e:43:b6:55:c2:ef:fe:f8:99:cb:6a:53:ca:7b:16:
98:4e:21:9b:b0:9b:b7:22:7a:2d:05:49:f6:c1:53:
e7:bb:14:b1:d2:4a:5b:6e:79:19:19:2a:9a:0f:e3:
5b:e1:39:58:dc:a8:36:c8:1d:a8:3c:e8:80:99:9b:
52:f9:28:55:58:fe:f6:57:eb:7c:6f:f9:4b:09:6e:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:87:2E:BC:24:78:91:98:AF:F0:3E:35:F4:62:4A:43:25:60:3E:17
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0e:9c:59:90:a0:c1:75:79:44:16:3c:c0:c9:92:f3:cd:d1:
a4:df:8f:85:52:8b:e9:ea:51:9f:cf:89:95:70:5e:8c:a8:35:
8b:ea:8d:a6:a8:d5:c9:83:8a:19:12:ad:f8:bf:ce:5f:04:d3:
20:26:cb:bc:c9:cf:63:a6:35:38:1b:b8:9a:86:47:88:ba:9e:
6c:ca:b9:9e:fd:f1:24:23:9c:5a:84:26:3f:94:34:09:5c:24:
f8:1e:c0:25:bf:12:21:11:eb:3c:1e:f0:27:1b:07:4c:8b:c1:
2f:78:eb:7a:6d:45:f4:be:81:9a:50:8d:91:f4:1d:38:19:08:
33:6e:a9:c8:68:57:03:1f:25:c2:53:99:4d:ce:62:cd:00:bc:
7b:78:96:36:42:4f:0c:36:27:1f:f1:5e:97:b1:7f:6e:4b:4b:
e6:7a:85:32:8d:be:76:72:f9:c9:0c:fd:1d:e2:40:83:d6:a2:
2c:1b:77:59:b4:26:03:93:80:4e:be:ea:01:e1:13:fd:07:58:
2c:08:a3:6a:24:17:1d:c7:15:96:47:d6:7b:79:74:e2:28:4c:
39:b1:9f:48:e4:8b:89:de:0c:2d:ca:35:1c:da:dc:33:dc:08:
6f:41:4d:c8:2e:75:af:7d:ee:b5:d7:83:a8:d2:a5:02:1c:24:
a3:ef:9c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo2cxjSPZoQ90d8pVFzSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk
MmU3ZDcwHhcNMjYwMzAyMTMwMTEwWhcNMjYwMzAzMTMwMTEwWjAzMTEwLwYDVQQD
Eyg5MTg3MmViYzI0Nzg5MTk4YWZmMDNlMzVmNDYyNGE0MzI1NjAzZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxjbL6ElmFoGk+iFtFUUcxBN4vr
uBXKwvbrk+rjIOslr0Io0QEc7PQJoTRtpS9zVkZYhhfgYoD5J3EFYeIvCoYiFX3Q
RQdDOCpm5k3x+XYgNJjZ+9EXB8F2JF8PBvbDNEikYZMPrwZ0uWynNyAoyLOAwkzT
bP8yaBltEu+zZuQA79XnYIqMmNsVIGU0wAKlaxY5gO4VCYzwko5CwzWxV8nRgE7+
jBSMdIf6CLoB3qKPKPSOQ7ZVwu/++JnLalPKexaYTiGbsJu3InotBUn2wVPnuxSx
0kpbbnkZGSqaD+Nb4TlY3Kg2yB2oPOiAmZtS+ShVWP72V+t8b/lLCW4pJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGHLrwkeJGYr/A+NfRiSkMlYD4XMB8GA1UdIwQY
MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt
NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk
LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA6cWZCg
wXV5RBY8wMmS883RpN+PhVKL6epRn8+JlXBejKg1i+qNpqjVyYOKGRKt+L/OXwTT
ICbLvMnPY6Y1OBu4moZHiLqebMq5nv3xJCOcWoQmP5Q0CVwk+B7AJb8SIRHrPB7w
JxsHTIvBL3jrem1F9L6BmlCNkfQdOBkIM26pyGhXAx8lwlOZTc5izQC8e3iWNkJP
DDYnH/Fel7F/bktL5nqFMo2+dnL5yQz9HeJAg9aiLBt3WbQmA5OATr7qAeET/QdY
LAijaiQXHccVlkfWe3l04ihMObGfSOSLid4MLco1HNrcM9wIb0FNyC51r33utdeD
qNKlAhwko++cpw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:00 2026 by rpki-client