Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: PHXKS5i+ljNijinCX/GOa1dr5sWbZ8sQ4jVudFPDeO0=
Subject key identifier: E1:1C:24:CC:22:59:13:70:CC:C5:D2:BF:BE:88:21:27:8A:E1:5F:4D
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 01A0E92E0049C3C5C222B917AF22002DF283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 18:01:41 +0000
Manifest this update: Mon 28 Sep 2026 18:01:41 +0000
Manifest next update: Tue 29 Sep 2026 18:01:41 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: CQwT0A0rGRcJsMKVKjp5uQIv4qcGClk1oeCCfI7exxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:00:49:c3:c5:c2:22:b9:17:af:22:00:2d:f2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Sep 28 18:01:41 2026 GMT
Not After : Sep 29 18:01:41 2026 GMT
Subject: CN=e11c24cc22591370ccc5d2bfbe8821278ae15f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:88:48:85:8b:c7:c2:8c:1c:9c:cb:4b:76:
41:b4:ec:08:fb:e3:ac:cb:6b:5d:14:1f:07:52:72:
69:b0:79:73:d0:d7:76:f8:7e:5d:82:cc:aa:b4:da:
42:e2:e8:cf:7e:49:f7:d4:f9:0c:4a:d8:81:9a:f1:
0a:c7:dd:b1:15:40:39:7a:d0:55:a9:08:ed:ff:ac:
c3:de:ee:c4:26:41:2c:4d:a9:4c:14:61:72:67:40:
93:3c:bd:25:5d:98:b9:3f:24:ec:b5:6e:62:e8:ff:
29:97:27:94:2d:48:6b:f1:13:38:88:6f:de:18:4d:
20:77:72:8a:93:06:7d:94:b3:3a:58:fe:12:7e:f6:
9c:9b:95:c8:40:3c:6a:45:53:7c:d3:dc:00:67:c1:
49:3f:cc:ad:f6:41:db:ed:28:bc:07:c4:39:18:9c:
e8:31:d9:57:61:97:1d:26:d4:43:f2:a8:64:5a:4d:
07:cf:ff:2b:c9:b0:2a:f2:bb:9e:86:e1:f8:be:df:
e4:1d:a1:db:ca:6a:db:98:33:e7:e3:74:eb:c6:44:
ca:1a:58:9b:0e:83:57:4d:cf:e3:58:22:3e:86:4a:
d9:6e:05:ab:0d:48:46:b6:c4:02:00:a7:86:33:6c:
51:c5:83:fe:4b:58:ee:08:54:f2:f6:9d:62:e0:53:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1C:24:CC:22:59:13:70:CC:C5:D2:BF:BE:88:21:27:8A:E1:5F:4D
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ee:ff:c4:6c:c2:68:e1:b8:c0:3b:ba:00:27:6f:7d:64:c3:
d7:51:b2:11:b3:29:d9:14:7e:d9:be:26:ba:5d:cc:cc:f1:23:
56:cd:2d:c5:07:7c:a2:66:70:a5:ce:64:2c:d4:3b:d6:4a:14:
41:b2:3a:7a:f5:ee:3f:e1:05:6a:0e:95:1c:2f:3c:d2:28:4a:
c7:d5:83:38:8e:11:f8:7f:94:9d:f2:42:12:25:f6:36:c5:6f:
d8:88:c2:f4:21:8b:12:fc:7d:5c:04:96:1e:d6:d5:0e:69:9e:
13:b6:0b:10:f6:58:89:76:73:f9:c8:12:65:a3:a5:f0:04:b7:
fa:fc:1a:d4:47:3a:c5:e0:27:6a:17:de:0e:f0:48:67:b3:cf:
fc:34:e8:46:74:74:56:c5:91:aa:f6:02:e2:ef:6b:8a:f5:83:
11:66:69:02:f8:b5:42:a0:b2:c0:78:23:81:94:82:4b:69:e3:
b1:ff:d3:73:dd:b6:1d:d2:14:7b:e2:91:28:63:76:26:b6:3d:
a3:cb:54:dc:06:e3:43:1c:43:0b:0b:20:89:35:7f:59:06:f2:
b3:61:10:46:ad:6b:ad:57:97:b1:7d:be:1a:a1:77:6c:4a:42:
a4:d7:ba:0b:8b:1a:5b:16:78:a6:60:44:c1:bf:b1:1f:34:60:
65:c4:1b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLgBJw8XCIrkXryIALfKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYwOTI4MTgwMTQxWhcNMjYwOTI5MTgwMTQxWjAzMTEwLwYDVQQD
EyhlMTFjMjRjYzIyNTkxMzcwY2NjNWQyYmZiZTg4MjEyNzhhZTE1ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiyISIWLx8KMHJzLS3ZBtOwI++Os
y2tdFB8HUnJpsHlz0Nd2+H5dgsyqtNpC4ujPfkn31PkMStiBmvEKx92xFUA5etBV
qQjt/6zD3u7EJkEsTalMFGFyZ0CTPL0lXZi5PyTstW5i6P8plyeULUhr8RM4iG/e
GE0gd3KKkwZ9lLM6WP4Sfvacm5XIQDxqRVN809wAZ8FJP8yt9kHb7Si8B8Q5GJzo
MdlXYZcdJtRD8qhkWk0Hz/8rybAq8ruehuH4vt/kHaHbymrbmDPn43TrxkTKGlib
DoNXTc/jWCI+hkrZbgWrDUhGtsQCAKeGM2xRxYP+S1juCFTy9p1i4FPCPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEcJMwiWRNwzMXSv76IISeK4V9NMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyO7/xGzC
aOG4wDu6ACdvfWTD11GyEbMp2RR+2b4mul3MzPEjVs0txQd8omZwpc5kLNQ71koU
QbI6evXuP+EFag6VHC880ihKx9WDOI4R+H+UnfJCEiX2NsVv2IjC9CGLEvx9XASW
HtbVDmmeE7YLEPZYiXZz+cgSZaOl8AS3+vwa1Ec6xeAnahfeDvBIZ7PP/DToRnR0
VsWRqvYC4u9rivWDEWZpAvi1QqCywHgjgZSCS2njsf/Tc922HdIUe+KRKGN2JrY9
o8tU3AbjQxxDCwsgiTV/WQbys2EQRq1rrVeXsX2+GqF3bEpCpNe6C4saWxZ4pmBE
wb+xHzRgZcQbEg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:39:24 2026 by rpki-client