Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: JJf4N1p1Y//xbQATxcKXWr0PR+9/CHDS3q2UWH1G56U=
Subject key identifier: 41:F7:BF:BB:AF:00:DB:65:4E:7C:27:DA:80:D8:D1:4E:75:87:F0:64
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019E1EA3A364C26FECC6CDE4C5ABE0B55EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 00:01:41 +0000
Manifest this update: Wed 13 May 2026 00:01:41 +0000
Manifest next update: Thu 14 May 2026 00:01:41 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: ZUgboHw/zmHcTVZtqaIFoaCCMjnT40CVlDN59q+mtlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a3:64:c2:6f:ec:c6:cd:e4:c5:ab:e0:b5:5e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: May 13 00:01:41 2026 GMT
Not After : May 14 00:01:41 2026 GMT
Subject: CN=41f7bfbbaf00db654e7c27da80d8d14e7587f064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:1c:0c:b6:c4:53:71:a7:ce:63:16:68:dc:
88:15:7d:3d:50:62:e3:77:8f:05:ed:92:df:9d:85:
61:6b:67:5a:7e:f1:56:c6:7d:d6:47:ca:4c:c3:95:
9a:ae:9d:23:e7:83:82:f0:88:56:ad:c2:f4:de:a8:
6d:81:79:64:4d:ac:15:31:f0:59:16:f0:5b:84:0c:
a2:f0:92:7a:ce:8b:63:84:1b:80:70:de:77:55:bd:
f6:8f:35:7c:3d:72:63:5d:17:e2:c1:89:43:23:a1:
7f:9b:d4:f1:f2:2b:66:c9:aa:35:40:e4:cf:ce:61:
60:f5:09:f7:e1:73:e4:e6:9b:cb:57:fe:3b:c5:48:
48:59:96:2a:e6:77:20:af:63:ff:db:26:95:50:95:
f7:8f:9b:c4:a9:ff:24:2a:24:e3:ef:2c:f9:5c:07:
cf:b6:2f:9f:e1:f2:06:5a:bc:13:5e:92:ed:9a:8a:
0d:c7:f6:38:aa:29:d7:50:50:32:ea:db:f5:ab:d5:
fc:d6:6b:3b:95:27:1e:84:87:d0:27:d2:80:e6:6d:
f4:d5:9d:d3:21:a4:97:35:7b:3f:dc:3b:74:e9:72:
52:15:5e:fb:8f:52:4a:95:a5:af:71:1a:01:69:68:
3c:9f:96:05:ff:68:83:0a:e2:81:31:2e:c0:60:ce:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:BF:BB:AF:00:DB:65:4E:7C:27:DA:80:D8:D1:4E:75:87:F0:64
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5c:f6:01:bb:8a:56:ac:d4:bc:5f:32:b0:35:5c:12:09:60:
a6:d5:e9:33:7a:24:a2:33:99:1f:48:10:b2:42:5a:18:af:f4:
4b:1a:25:54:95:34:9a:e5:0d:72:0c:32:c2:e6:08:74:83:95:
cf:06:b1:7e:79:22:9f:9f:f1:ce:8b:df:93:f9:9f:b6:7e:2f:
79:62:ee:02:ff:e6:57:29:b1:70:60:be:85:1c:31:94:f4:b5:
3f:a3:50:f2:b8:36:8c:23:e3:2f:5d:3d:d3:59:b4:8f:98:37:
23:15:05:34:b7:cc:31:27:7c:2c:3c:d5:54:d0:09:44:92:89:
3b:66:c7:f9:93:7d:87:6a:c7:6f:ef:84:d1:4a:0f:47:15:4b:
31:24:31:2d:bd:63:ae:c0:61:30:9e:f2:03:53:f3:fc:76:63:
7f:f7:cf:2c:6d:8e:20:8a:81:31:48:8e:9c:78:4b:15:6d:28:
03:a7:9a:7f:59:1c:bc:c5:1e:b9:96:6c:73:b2:10:b8:f3:ab:
d1:1c:1b:bc:ad:0f:f4:ab:02:ce:3d:8f:67:c5:ba:9a:ee:0e:
00:59:2c:44:4d:a7:81:b1:17:2e:8a:8d:90:66:60:95:af:10:
82:17:6a:9d:d6:03:bc:60:f3:46:6c:d0:a6:50:93:7f:ca:7b:
bd:b3:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:50 2026 by rpki-client