Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: yG+/rPCFGLCQLJ4b6KbHoVDHvOfasIyemvQFGtRE88U=
Subject key identifier: 5B:2B:10:4A:E8:08:95:26:62:6B:10:C3:39:1B:F1:DC:CB:2F:52:8F
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01A12DD72CB2BA336897AA63E2D90241F3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1598
Signing time: Mon 12 Oct 2026 02:00:38 +0000
Manifest this update: Mon 12 Oct 2026 02:00:38 +0000
Manifest next update: Tue 13 Oct 2026 02:00:38 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 48If0Mf4fWzLLTwCe/8LkY7bBQUb/Ryci9p8FnOSif8=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:2c:b2:ba:33:68:97:aa:63:e2:d9:02:41:f3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Oct 12 02:00:38 2026 GMT
Not After : Oct 13 02:00:38 2026 GMT
Subject: CN=5b2b104ae8089526626b10c3391bf1dccb2f528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:a5:ad:1d:74:93:0a:18:82:90:57:49:e8:
45:01:83:24:fc:ae:f2:31:21:3c:33:fc:37:bd:35:
ec:d9:0d:36:70:2a:85:af:57:1d:9f:c4:c7:33:65:
aa:a7:c9:31:cd:70:9d:3c:55:fa:8d:4b:ec:03:ca:
83:36:8f:1b:9a:fa:0c:9f:43:3c:4b:9a:9c:a9:75:
cc:42:fa:68:c5:a2:f8:b4:88:b5:bc:b4:83:d4:63:
f9:4d:de:23:7b:f3:82:d2:50:c2:bb:11:e2:a4:18:
b5:30:06:f5:2f:ee:64:c4:5b:3f:7b:75:af:bd:0a:
be:a0:ff:45:83:e7:39:e4:e1:4c:e5:ef:bf:06:cb:
26:92:18:16:5b:41:b0:90:78:39:ff:7b:ad:53:7b:
4e:c9:3f:c5:4b:6f:15:1c:66:1b:21:d6:d1:81:2f:
54:6d:51:c3:60:d8:58:5c:22:ed:b1:d5:bf:67:09:
78:d4:e8:ee:0a:5f:ff:89:f7:c0:75:79:39:7d:69:
72:f9:70:d8:20:10:aa:e1:a4:0c:e6:84:d7:23:9c:
1b:3c:96:bc:78:99:8c:67:6c:16:af:31:4a:2a:1e:
20:aa:63:7d:ad:fb:f0:10:a9:80:bd:02:8d:57:a2:
ab:26:09:79:41:e9:63:cd:73:40:26:b3:7f:68:43:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:10:4A:E8:08:95:26:62:6B:10:C3:39:1B:F1:DC:CB:2F:52:8F
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:32:b4:b4:52:a9:61:79:b9:88:d0:13:e7:8d:69:2e:82:
92:fa:ba:6a:4d:ca:5b:b3:eb:39:66:14:26:19:80:1b:0c:d0:
f8:2a:cd:45:2a:4e:dd:ab:7a:84:00:49:02:42:2c:17:13:a8:
ef:18:d6:17:5a:af:7a:32:d7:a6:43:34:66:94:99:d3:b9:47:
15:98:81:5b:f6:63:52:2c:ab:5f:23:43:f7:06:bd:b5:57:c3:
52:49:b1:73:94:75:6e:70:9c:31:41:51:eb:5a:19:94:6e:a5:
f1:74:6c:45:f4:57:d2:fe:36:7e:1a:98:d8:4e:a3:22:b3:47:
8f:4c:97:99:15:bf:05:a4:67:3d:dd:a7:9d:2d:10:c4:80:19:
31:89:10:6a:5f:57:29:a5:6e:2f:fc:9b:7f:41:b3:fe:da:39:
21:28:96:db:4f:97:c5:da:40:aa:54:9a:6e:40:b9:c1:26:38:
97:c7:79:34:ad:98:f2:79:92:d2:e9:24:c0:0a:0c:75:6a:ee:
27:ce:cb:56:e4:06:40:b4:70:8b:21:db:b6:8a:81:48:8a:48:
a6:a8:5f:83:8a:52:78:a5:8f:5b:63:f2:76:1e:d0:1a:30:1b:
ad:e4:87:f2:98:21:ab:c1:ab:17:f8:2d:ab:5d:c2:a1:7f:2a:
ba:42:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:24:27 2026 by rpki-client