Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: a+qtur/w4qaaRg4ZOUKYQ8mm7RHVe0ID0jBtUxr+tBk=
Subject key identifier: 11:9C:7F:16:3F:E9:1B:1C:1A:BC:A7:47:36:6C:15:68:7E:8C:08:F7
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019D29609AD69184FF12E60729C5976F9657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:01:30 +0000
Manifest this update: Thu 26 Mar 2026 09:01:30 +0000
Manifest next update: Fri 27 Mar 2026 09:01:30 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: W55rPOR3i5cbIf1BShyplQ3MsAX+Yq96VELdAN89oEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9a:d6:91:84:ff:12:e6:07:29:c5:97:6f:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Mar 26 09:01:30 2026 GMT
Not After : Mar 27 09:01:30 2026 GMT
Subject: CN=119c7f163fe91b1c1abca747366c15687e8c08f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:19:5c:9b:3e:f0:2a:f0:1f:94:ad:88:62:
e1:e4:1f:75:7c:c8:15:f0:8c:46:69:5f:6c:dd:2d:
0f:42:02:01:75:c1:a2:a5:c0:8e:9d:2c:a3:ac:5e:
79:bf:85:82:57:38:eb:24:fb:ba:46:58:95:14:69:
f1:ca:b8:c2:c9:f2:3a:fe:56:c3:22:58:da:7a:1c:
be:08:15:68:50:30:18:2a:45:d8:47:1d:40:c1:0c:
1f:27:94:ce:21:35:6e:c5:1b:1e:00:18:25:e2:3f:
19:fb:6e:22:5a:0b:ed:69:b8:31:e8:fd:04:01:14:
73:f1:64:27:4f:dd:49:bb:9e:48:93:d0:ad:47:96:
c9:79:3c:38:2e:54:a6:0b:4c:d1:5b:e9:b8:85:1e:
0a:4f:fc:0a:bc:0b:b0:21:c5:bd:66:c2:f8:b9:39:
45:0c:05:30:56:05:cb:50:41:4b:d1:69:4d:d8:cc:
c2:23:41:4f:e2:fe:6a:c4:eb:a4:27:14:b3:55:b6:
d0:86:ad:b8:e8:08:ef:2e:60:01:4b:b3:55:2c:f3:
95:76:d4:27:e7:eb:a3:8e:9a:8b:ec:be:e8:aa:93:
76:50:21:a2:60:8a:ad:58:91:d2:69:4a:13:2d:83:
2b:b3:88:ec:5d:44:ee:bc:a6:d7:74:5b:2b:64:97:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:7F:16:3F:E9:1B:1C:1A:BC:A7:47:36:6C:15:68:7E:8C:08:F7
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:a0:22:90:68:3c:26:85:53:65:33:a2:6c:3c:9c:35:60:
32:34:65:c9:0d:ad:1b:11:5d:7a:2c:1b:fc:ce:85:94:48:3e:
68:55:8d:37:36:d9:ee:84:18:bc:c9:f4:d3:cd:3f:40:28:d9:
e1:23:47:74:a6:b9:9d:48:7a:5f:4f:50:8b:45:62:50:2b:48:
63:b5:00:79:8e:5a:f5:46:77:24:83:e5:d6:d4:3e:3e:e3:ae:
be:d4:0e:bb:48:06:28:b9:70:3c:fd:a1:0c:3f:90:64:55:8e:
c6:bc:c3:e2:de:58:bc:6d:36:83:e3:35:f7:62:0c:91:dc:8f:
a0:e6:f1:34:0f:66:d7:97:11:c3:9b:e6:d3:7d:00:a1:50:90:
ef:3c:84:78:32:ad:27:75:e8:9f:d5:6c:b8:e9:0f:8b:d5:2d:
f8:13:67:b7:a0:f7:9c:6d:b0:eb:be:89:ac:25:f7:43:37:f1:
76:c0:0c:e6:89:2f:b1:4e:7f:8a:e7:14:53:3a:7a:b1:a3:ca:
ba:1a:21:31:2a:24:0b:ab:77:8e:82:fc:ff:5c:80:45:2e:a9:
39:58:5f:f3:a9:d1:c3:97:21:1f:e6:38:46:4a:78:75:f3:a7:
ac:5a:33:0f:e6:f2:f8:06:c4:ec:f1:72:ed:a2:c4:cd:a7:59:
83:9e:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:46 2026 by rpki-client