Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: W8MJcZ8nbLSUrxupJAdfDU2W95xGInjN4hZ1bGjqEr8=
Subject key identifier: 0C:40:C6:48:1F:1B:67:19:6D:2A:04:BC:E7:49:9B:BB:0D:61:4E:75
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019CA90F27F526EDDB1116ADB24490DBC9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 11:01:08 +0000
Manifest this update: Sun 01 Mar 2026 11:01:08 +0000
Manifest next update: Mon 02 Mar 2026 11:01:08 +0000
Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: WRGTeDvCy7M6V9fcGPOVO5ib5n+RJkF/U04h7rPlJl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:27:f5:26:ed:db:11:16:ad:b2:44:90:db:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Mar 1 11:01:08 2026 GMT
Not After : Mar 2 11:01:08 2026 GMT
Subject: CN=0c40c6481f1b67196d2a04bce7499bbb0d614e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ae:1c:14:8d:29:b5:8a:5c:06:97:c1:36:2b:
c5:88:d5:ae:fd:e1:79:4c:38:78:85:15:53:67:fc:
95:d8:0b:27:84:66:f3:ce:d0:40:1d:66:44:13:d3:
67:50:cc:b3:75:cf:e1:d3:11:5b:3b:7b:30:e5:2c:
0f:76:90:30:ea:36:d8:c9:8e:87:e8:72:46:c5:1c:
0b:5a:2f:fa:31:91:6b:77:57:9a:70:02:f1:26:a9:
63:70:fa:0b:3c:01:e8:6e:84:68:83:ad:a1:ca:67:
12:9d:dc:c9:38:b0:61:c8:6c:b2:f8:7d:50:1c:3d:
e1:15:d2:a0:6c:a5:77:1e:bb:ad:85:70:5a:88:15:
ee:88:55:70:17:03:20:bd:3f:a1:82:8f:7c:d1:5d:
7e:4f:ce:25:24:ad:e1:79:71:37:f6:c3:75:ef:76:
6b:84:4c:31:d6:3d:1d:da:72:6d:8b:08:6c:44:f5:
60:82:8f:66:49:b0:0b:da:58:6d:20:cb:42:06:86:
e9:65:7e:dd:67:8e:ea:62:53:f4:3f:34:6e:86:79:
8c:d7:c9:0d:57:d3:85:d2:5d:f0:3b:79:a5:c6:56:
39:bf:85:5c:bb:7f:53:b9:56:7a:97:54:9c:32:55:
60:91:8b:5a:04:e2:8d:a4:37:bc:7f:5a:94:83:a2:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:40:C6:48:1F:1B:67:19:6D:2A:04:BC:E7:49:9B:BB:0D:61:4E:75
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:10:7a:09:e0:65:49:44:3d:bf:95:5b:1e:82:d4:94:87:
d3:0a:0d:4f:cd:93:32:79:0d:20:42:68:24:f4:f1:99:66:fe:
5f:11:c1:f1:b5:e7:fd:a2:27:3d:43:c4:c9:ba:49:f3:79:a7:
80:98:19:b9:99:1d:8b:0d:6b:63:66:ed:35:20:a6:ce:b9:7f:
00:59:2b:41:93:8f:56:8d:6b:16:4c:ee:78:85:05:30:cf:c4:
8c:9e:b6:c5:a9:aa:3f:74:b4:50:4c:b5:91:dc:ad:7b:2a:7e:
b5:3d:34:36:f9:c7:29:fd:11:57:cd:38:b2:92:08:e2:1b:90:
88:d5:5b:f8:55:a8:a6:11:fb:99:bf:8a:24:89:84:d8:85:33:
9d:c9:e4:96:32:0c:10:36:eb:d8:a9:e6:e1:56:d2:74:0f:3c:
b0:bb:3e:b7:73:94:72:ae:73:13:5b:ec:db:e5:73:d2:09:40:
67:af:1b:cf:f6:bc:4f:b8:45:3d:66:0f:70:66:90:e1:c6:b1:
0d:65:98:d5:45:80:de:29:5a:4e:4e:de:4a:df:26:e5:80:b8:
57:2b:12:02:42:d3:3b:75:d4:04:9b:bd:a7:73:d7:de:5b:e1:
b6:a7:fc:8e:08:3e:fd:80:bf:13:9f:d0:59:c2:00:ca:27:91:
89:8a:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:53 2026 by rpki-client