Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: KhPI10KMIZzX9X2twnBXlsAO2ULWiSrajY2gv//Ru1Y=
Subject key identifier: 7B:77:67:03:65:99:67:13:B3:0C:E2:5F:15:C1:4E:8C:EE:57:7F:C3
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019D9A072E4708C5B4B004CB2B433005DF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 1448
Signing time: Fri 17 Apr 2026 06:00:55 +0000
Manifest this update: Fri 17 Apr 2026 06:00:55 +0000
Manifest next update: Sat 18 Apr 2026 06:00:55 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: GgOcsg+0o2WXHI6FP1ur0vGMBNJXr4PYZVGgNchkEZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:2e:47:08:c5:b4:b0:04:cb:2b:43:30:05:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Apr 17 06:00:55 2026 GMT
Not After : Apr 18 06:00:55 2026 GMT
Subject: CN=7b77670365996713b30ce25f15c14e8cee577fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:f3:df:65:50:1a:98:c0:cf:a6:36:7a:3c:
ac:1f:90:ad:1c:e7:3c:45:21:01:ba:57:b4:06:5c:
dd:50:26:1f:67:06:65:93:99:81:31:4b:d7:01:84:
3d:b3:51:d5:aa:5a:72:82:19:41:4a:bf:78:0c:14:
1a:17:59:f8:8f:e9:30:22:09:54:5f:35:69:d1:66:
28:66:1d:ea:d9:5a:06:83:4d:63:63:73:fc:5b:b8:
92:e1:92:0a:b8:e8:8e:e0:a6:06:58:b1:8c:bd:61:
88:73:ad:6e:9f:78:33:2b:68:92:3f:3c:b7:db:20:
18:5d:88:71:9c:f8:5c:f3:87:24:09:d4:e3:ad:2b:
22:14:09:7f:cb:c1:49:db:1e:ca:0c:0b:9f:78:0a:
6c:10:18:e2:92:4d:49:b9:c5:21:9e:ba:fd:3d:d8:
94:ae:9a:11:3e:79:26:e7:6f:e0:fa:9d:31:bf:a5:
68:df:43:68:86:2a:5e:37:6f:7b:76:6a:3d:ea:63:
69:2e:26:71:6e:d0:8b:7a:fd:68:ca:2b:3c:1b:ef:
c0:62:d5:a6:d8:b1:be:df:4e:a7:e2:e4:34:7c:bb:
e4:14:2e:78:ec:1f:13:f7:34:7b:42:3d:bb:35:23:
e2:4c:76:7b:9d:57:8b:b9:f8:ca:8d:ed:27:43:09:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:67:03:65:99:67:13:B3:0C:E2:5F:15:C1:4E:8C:EE:57:7F:C3
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6c:8e:fa:9a:90:18:6f:6c:4e:aa:7e:f7:b7:86:e5:57:0e:
ff:ea:a1:be:63:b8:b0:81:ab:3c:0d:4f:cc:d0:89:87:3a:cf:
d5:13:50:71:1a:b3:43:fa:83:e5:db:34:14:07:11:3d:66:f0:
39:ae:b7:07:01:56:db:1f:a5:aa:a7:53:88:c6:04:90:28:6b:
b9:09:7d:88:78:64:12:fd:9d:75:89:bc:3c:b0:d0:dc:f9:d5:
29:1e:ca:e4:68:d6:20:30:ee:9b:fa:22:4c:5d:87:2a:7f:bc:
4a:19:b5:71:b1:3f:2c:1f:2e:df:08:7c:d6:67:44:83:69:63:
68:79:fb:1f:a2:fa:c0:33:36:b3:4d:29:b8:ff:a0:f7:e6:c0:
9d:7c:d4:a4:51:d8:37:12:dd:02:53:cc:98:cd:ff:b1:45:46:
7b:b4:1f:20:71:4b:e0:dd:c1:a0:13:c2:79:6a:e4:f0:2a:5d:
ed:ac:f5:3e:b9:6d:7c:14:d3:42:bf:19:97:29:cb:a0:4b:c4:
e6:95:c4:e4:30:58:58:c9:af:f5:00:b8:62:fe:4b:36:67:99:
66:8e:47:bf:a2:0b:93:1b:ea:fe:c9:c3:71:03:98:7f:ac:c5:
c9:ea:fb:d2:3d:c0:d7:ee:01:32:62:ff:a6:cf:48:94:3e:a1:
05:78:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:48 2026 by rpki-client