Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 2Mx93A7s0FLaHEEksTUxVH/8KjVIh9L8Bf4Fi7cQac8=
Subject key identifier: 59:39:55:41:3F:2A:71:64:F3:C9:E3:07:EE:9E:71:E9:31:AE:62:E6
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019EBFFF4FBCD510F136481BFEE0789A2157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 08:00:40 +0000
Manifest this update: Sat 13 Jun 2026 08:00:40 +0000
Manifest next update: Sun 14 Jun 2026 08:00:40 +0000
Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: fb5+/p2qI9djk7/bTk2LLKEPJOzQBYHJrLDM5i145+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:4f:bc:d5:10:f1:36:48:1b:fe:e0:78:9a:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Jun 13 08:00:40 2026 GMT
Not After : Jun 14 08:00:40 2026 GMT
Subject: CN=593955413f2a7164f3c9e307ee9e71e931ae62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:0a:fc:fb:7d:42:fe:8e:18:e8:7d:3d:21:
df:ba:4f:e0:f5:b4:e9:33:7a:6e:b2:06:9f:c9:40:
a0:ce:75:0a:4b:77:6f:46:e1:83:58:64:66:ad:1e:
e5:e5:bb:59:77:b4:43:7d:1b:b2:83:7a:89:69:61:
6a:88:ae:5a:ef:34:9f:aa:cd:c5:64:ea:c7:32:e9:
da:da:62:04:eb:39:a5:f3:49:79:a6:fe:99:1b:a1:
53:d4:13:e6:c7:69:7e:62:6e:3d:1d:23:9e:66:1b:
48:f9:07:1f:95:e0:cc:44:4a:a3:29:b2:e5:de:97:
20:e8:65:6a:24:32:06:79:b4:a8:d0:dd:41:ce:68:
4b:02:3e:b4:1b:98:9a:1c:1f:e8:49:76:8f:32:7e:
f8:38:74:c8:7c:9c:1f:b4:a1:4b:25:a3:59:52:1e:
15:5b:5a:c8:45:f6:b6:83:e9:fa:70:13:4a:e0:a3:
56:15:79:dc:88:7a:3c:94:06:33:56:f3:bb:d2:77:
f6:ca:e0:15:e9:04:4e:5c:ab:35:63:02:b5:07:c2:
e8:1d:08:1e:67:5f:34:ed:2f:13:1d:64:f6:54:03:
5d:a1:3d:8b:b2:be:33:f5:52:b9:81:df:2c:ce:19:
b5:69:84:de:24:77:c3:4a:91:c7:bd:7d:da:33:77:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:55:41:3F:2A:71:64:F3:C9:E3:07:EE:9E:71:E9:31:AE:62:E6
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:03:5e:e5:f4:49:e1:29:21:8a:a4:29:88:3d:db:a2:e1:
20:a7:fd:53:fe:7e:00:f7:58:cd:67:01:9a:db:db:6f:77:5d:
fa:22:9e:db:6f:12:8b:d7:a0:62:ef:ea:c6:45:28:0d:aa:97:
12:36:83:94:7c:22:56:59:e8:6e:35:bf:47:8e:61:49:0a:5e:
69:d1:69:28:ea:b8:91:14:79:4f:45:16:33:e6:8f:10:67:93:
75:6c:e1:88:3b:3c:de:57:1c:f3:77:55:a9:51:28:ae:48:d7:
83:9c:89:da:64:8c:a2:c9:bd:36:9e:4b:0c:57:16:80:23:c6:
ce:71:74:38:bd:71:1b:94:31:71:86:d3:8f:9d:cb:1d:1e:87:
05:33:57:ba:eb:c1:45:2e:e7:23:77:89:cb:7a:2e:d5:e5:a6:
38:0d:26:00:b8:af:32:20:a0:0a:ca:ea:cc:42:80:55:e7:9f:
f4:95:5c:73:60:23:a0:d7:6d:2e:35:ca:2c:c3:26:34:33:f7:
de:53:71:f5:13:98:c8:77:69:33:81:7d:42:1a:f2:52:7d:16:
5f:c3:e0:ec:b1:64:14:f9:94:7e:92:56:33:11:72:da:7a:34:
53:30:53:e6:1c:01:5b:e5:ab:60:77:21:48:19:8d:16:c3:d3:
e5:c6:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:34 2026 by rpki-client