Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: FyTaBxkiGLdS2JLlgH14ExGwhXSnUrXJwfWUWIvBaoE=
Subject key identifier: EF:81:1C:87:57:F7:04:DC:BE:09:5C:45:12:A6:EB:22:EA:F5:DE:78
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 01A10324F2815FDF1388D8B32D4019E583ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0D89
Signing time: Sat 03 Oct 2026 19:01:55 +0000
Manifest this update: Sat 03 Oct 2026 19:01:55 +0000
Manifest next update: Sun 04 Oct 2026 19:01:55 +0000
Files and hashes: 1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: +UYcDn2rsJqcrMbeCpoSDUhEan5A9gNmwK0NdQfnZUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:f2:81:5f:df:13:88:d8:b3:2d:40:19:e5:83:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Oct 3 19:01:55 2026 GMT
Not After : Oct 4 19:01:55 2026 GMT
Subject: CN=ef811c8757f704dcbe095c4512a6eb22eaf5de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:1e:5a:54:d5:11:05:2d:33:7f:be:86:5d:
a4:c2:44:56:99:51:dc:56:e0:95:ff:a4:79:13:6e:
60:0d:2d:89:da:02:f6:0a:fb:66:fc:e4:d7:2b:e8:
b8:ea:f8:4c:ff:f1:a7:cc:a1:f8:65:ce:f6:0e:df:
b3:1d:6f:f4:d2:02:32:64:0a:d1:b4:3b:76:bc:a5:
98:42:d6:2d:ce:3b:e3:a8:1b:a8:67:99:b4:97:c7:
21:4c:b1:e8:fe:1a:b6:de:78:54:4a:8a:e5:25:32:
a4:2a:de:58:84:8e:78:76:94:8d:cb:67:91:f5:25:
5e:c1:d9:e6:bc:da:6d:06:ac:b8:95:e5:00:0a:0b:
60:ec:83:6a:86:9c:d4:cf:b6:2e:ad:41:d7:1c:7d:
12:ec:96:2c:9c:b7:0d:45:72:76:b6:8e:9e:06:b2:
7a:d1:84:bd:fa:b3:d0:0d:c8:35:92:9c:ec:f5:2a:
ac:1d:89:3d:e2:da:86:3a:73:ec:29:20:43:26:4a:
da:20:3f:81:d0:9d:36:7c:1e:af:f0:59:90:01:3e:
9d:8d:0b:e1:33:ec:e9:5a:77:02:20:da:c7:28:9f:
da:1d:21:4b:fd:31:f6:ff:8e:44:5f:42:b3:29:42:
18:e0:7d:c2:51:b1:ad:8b:41:0b:ac:9f:73:f5:f2:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:1C:87:57:F7:04:DC:BE:09:5C:45:12:A6:EB:22:EA:F5:DE:78
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:63:63:11:32:da:cd:c6:5c:c4:33:81:ee:d7:b8:c9:35:
09:cb:c7:46:f3:fc:d0:ca:c4:9a:19:7d:0a:67:0d:a7:27:d9:
01:bd:4f:4e:20:4e:29:8b:47:c9:f4:5d:5e:0b:f7:f3:42:5a:
10:d7:4b:46:2e:84:d5:d5:af:b8:95:f1:9c:d8:89:6a:c3:dc:
5c:9d:3c:a5:7b:1a:9b:78:7c:21:a9:1a:92:8a:37:7c:79:f3:
03:17:47:78:16:7a:49:fc:84:a5:f8:f4:ad:fb:28:fd:4a:42:
f5:32:8b:4d:f1:75:8c:d7:1d:90:d1:2a:b4:e7:26:85:52:53:
08:fb:62:d9:4b:c2:e0:fc:ef:a6:31:03:1d:d4:3e:b3:0c:68:
50:e6:9c:17:4d:10:23:20:ae:9e:63:d5:c6:db:f2:fd:4e:47:
8a:18:5f:f4:81:72:42:c0:5c:fe:80:1c:74:5d:3b:31:46:86:
96:83:2a:7c:62:8b:00:ed:ca:fd:8f:f2:66:5e:3c:e1:08:a5:
41:f4:be:7b:b3:44:46:22:71:e0:b0:5d:3d:a5:c0:0f:7f:fe:
0b:8a:e8:b4:2a:72:58:c7:25:c2:ae:68:fc:8c:5a:06:0a:e0:
31:0f:39:fd:57:5b:f6:fc:02:12:7f:76:43:be:3f:81:d8:8c:
60:52:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:48:17 2026 by rpki-client