Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: srA4pa7VFtgz+SMEpjMoBHPoAh44w0exQt2b0cl3uDw=
Subject key identifier: BE:D0:64:82:70:09:2F:BD:82:6B:E5:DF:01:B1:FA:02:96:9D:CE:26
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019FA7BDAA9AA5A3408D1803473C24AE02E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 08:00:52 +0000
Manifest this update: Tue 28 Jul 2026 08:00:52 +0000
Manifest next update: Wed 29 Jul 2026 08:00:52 +0000
Files and hashes: 1: BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa (hash: Vh7lrvSAUjPIHB6bGQC1IFBTrjCNtjxlb9V3hEBQfKM=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: 16zskuCK51I9ylxEfFrq4/2beg5hzaQE3z0QguScHa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:aa:9a:a5:a3:40:8d:18:03:47:3c:24:ae:02:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Jul 28 08:00:52 2026 GMT
Not After : Jul 29 08:00:52 2026 GMT
Subject: CN=bed0648270092fbd826be5df01b1fa02969dce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:53:87:ae:17:26:3f:68:4a:6b:04:e7:bf:
a1:b1:a4:5a:aa:82:4d:6b:af:7f:04:7a:8d:6e:25:
03:61:c0:94:42:20:dd:e7:46:08:41:84:9f:6b:e8:
93:0c:65:0b:98:32:88:00:cd:5e:4a:65:19:24:a9:
0e:7e:5a:67:cd:3f:2a:e4:d7:68:6c:36:4c:4d:57:
65:d0:4f:1f:f9:1c:be:df:46:e6:6b:da:54:80:9b:
16:40:46:38:b7:5f:bb:ba:9d:9c:38:8d:da:91:e4:
12:ee:32:f5:53:b8:ea:c3:f0:71:b4:49:d7:b7:1f:
2a:25:70:b3:86:0e:c6:76:21:bc:a5:6e:1e:2a:22:
b1:a6:7f:cf:f6:e5:8f:66:f6:49:44:83:61:8a:71:
4a:03:33:1f:78:63:14:d1:0b:4e:55:f4:81:a0:a7:
44:18:13:62:5b:a6:59:c7:21:4c:97:b7:3d:57:1a:
47:1e:0b:9e:94:bd:e5:88:54:35:4a:c8:13:87:5c:
b0:95:32:88:1c:7c:07:0a:bd:04:e3:c6:e8:d6:05:
db:e2:a0:5e:f0:7c:38:80:40:a1:da:bc:b0:b4:cc:
f2:93:1d:43:15:33:33:c0:d9:84:b7:b7:3b:ec:1f:
73:74:46:02:a2:94:16:18:a4:3b:05:b4:cf:b9:bf:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:64:82:70:09:2F:BD:82:6B:E5:DF:01:B1:FA:02:96:9D:CE:26
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:65:9d:30:9e:b8:f1:9f:8a:03:f8:e2:1d:c9:70:e6:bd:
c6:ae:86:1a:d8:31:1e:f1:85:3e:27:d6:ce:46:a8:1b:c3:5b:
37:b4:bc:5e:c3:76:97:2a:fd:39:e2:a9:1b:58:ff:44:ef:44:
c9:94:e1:5a:94:e1:91:ea:91:8d:2a:ec:a7:b9:b8:bf:13:33:
c3:59:04:19:d3:3e:fc:86:cb:4d:8f:f8:9e:85:7d:3c:f4:86:
cf:03:f8:76:da:62:1e:a6:ed:86:c1:17:16:be:dc:81:84:cd:
e5:02:12:4f:14:f9:04:82:67:48:ae:18:77:09:ce:a6:7f:a8:
07:b3:29:4b:a3:0c:b1:e5:70:1c:d1:51:65:23:4b:36:97:83:
2d:f4:f8:7a:56:a0:2e:1c:45:69:43:3a:b7:3e:aa:fc:4a:22:
d8:7b:74:27:4b:31:22:09:3a:36:bc:ef:22:28:31:13:b4:37:
86:f9:aa:ae:f3:e7:e6:68:c3:03:d9:ad:bf:c8:2b:12:72:6d:
8a:7f:c8:89:37:39:5b:cf:cf:75:39:eb:38:69:79:50:4d:2a:
07:5f:bd:81:4f:d0:e9:60:c1:ad:ea:48:30:11:25:2d:70:ef:
6b:ed:b5:1c:a8:08:fd:a8:26:66:6f:94:77:38:49:75:e1:4c:
84:29:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:45 2026 by rpki-client