Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 9QkEvfSfrCxsnp3X8soO8Wl/Oo0JmRqaUf6SSuXDQA0=
Subject key identifier: 91:85:AD:58:BD:C2:3D:4D:C0:EE:52:C4:81:40:CF:89:11:F4:56:44
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 01A0D50219F3341F0F0FCB5C57757485922A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 20:01:19 +0000
Manifest this update: Thu 24 Sep 2026 20:01:19 +0000
Manifest next update: Fri 25 Sep 2026 20:01:19 +0000
Files and hashes: 1: BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa (hash: Vh7lrvSAUjPIHB6bGQC1IFBTrjCNtjxlb9V3hEBQfKM=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: UJX9fEXyUIs5pX6fzxVZGA5t9zHBIbodc4+XDKvVL8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:19:f3:34:1f:0f:0f:cb:5c:57:75:74:85:92:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Sep 24 20:01:19 2026 GMT
Not After : Sep 25 20:01:19 2026 GMT
Subject: CN=9185ad58bdc23d4dc0ee52c48140cf8911f45644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:0c:fb:ac:aa:2a:e5:24:1b:cf:0b:0d:1f:
18:92:63:d1:38:b8:f7:84:c1:76:48:98:0b:83:4f:
e6:6b:5f:c9:5e:88:6c:63:96:3f:b0:31:59:97:5b:
25:6d:99:47:03:eb:ba:97:bf:c7:35:c0:41:7f:4a:
0e:2e:1f:0c:cf:48:9a:6a:3a:39:49:a7:23:76:a1:
ed:09:03:fc:ac:59:ca:83:23:7b:2a:3a:91:25:9e:
6a:60:33:cf:83:fa:1c:e8:56:ab:95:bb:16:fb:84:
cf:9d:b8:58:74:5a:13:ee:a0:f9:ae:e6:a5:a1:ac:
7b:6e:7e:cd:05:6e:18:ee:98:07:ad:25:bc:28:a3:
b4:f9:7f:0c:b2:e5:3e:fb:62:3d:53:4c:1a:29:a2:
5c:8b:b5:36:a7:d4:ce:5b:1a:ff:a3:a2:5a:2b:a8:
bd:6d:52:d0:fa:3e:7b:a5:f4:31:83:9f:57:dc:3f:
b8:89:51:51:e7:09:f9:97:a7:06:82:96:df:91:80:
af:38:06:37:5b:95:08:6b:fb:f3:b6:e8:80:ad:8c:
b9:ac:c6:27:fd:21:5f:22:18:05:1e:18:9a:a6:01:
c0:1e:fe:35:91:dc:4f:ff:0f:8e:44:16:e9:6f:ee:
47:3e:89:0f:2e:5c:61:32:f5:eb:6b:3d:ad:cb:a8:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:AD:58:BD:C2:3D:4D:C0:EE:52:C4:81:40:CF:89:11:F4:56:44
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:10:0e:af:1b:83:81:ad:64:64:8a:f8:1f:cd:5f:94:a4:
a1:00:22:6e:f9:f6:49:87:2b:2c:b6:a3:53:8e:64:32:9c:89:
0a:3d:28:79:69:e7:de:6c:55:fb:85:87:3d:ad:70:f1:64:3d:
df:be:01:79:8f:44:79:7e:40:22:0c:39:69:72:12:94:38:ba:
bf:32:33:2f:b8:8b:f6:9b:eb:c1:c1:16:36:0e:36:65:f6:59:
fb:c1:02:f1:13:4f:ed:80:03:82:c8:a2:8c:bb:8a:64:62:25:
f5:ba:af:62:55:84:f1:21:37:98:df:31:66:42:8a:f4:d4:12:
61:d5:7b:86:e9:83:60:b7:86:c4:96:1d:45:b9:fe:46:4c:17:
0c:77:65:01:6a:63:88:03:a5:30:31:f2:a6:57:52:54:1f:73:
a8:9a:9d:95:2e:19:cc:ea:1d:41:c0:29:45:3b:a0:44:36:fb:
b3:ba:60:5e:ce:17:d2:78:89:7c:97:7f:bd:5d:61:0f:b5:b8:
dc:c8:e7:7e:3d:2f:9e:2e:30:d5:d2:8b:79:5a:a2:e1:81:5a:
17:14:6e:89:4d:e0:a2:3a:c0:8f:02:53:4b:46:8f:6a:c5:8c:
f5:da:65:53:5e:82:c1:70:d7:e1:a1:06:85:da:c0:3e:71:a6:
7c:d3:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:36 2026 by rpki-client