Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: V4pxtUfOxOxiYzl28KcUsj+Z9dSfhIpwDPdSua3RHB8=
Subject key identifier: 05:E4:13:B1:15:D1:3E:10:AA:CE:08:03:6A:67:65:51:FB:7D:78:77
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019F905A01A3A178BA968885AA10FE041764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 146A
Signing time: Thu 23 Jul 2026 19:00:45 +0000
Manifest this update: Thu 23 Jul 2026 19:00:45 +0000
Manifest next update: Fri 24 Jul 2026 19:00:45 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: Kzgw60NL5YodTO0w+a01HjvACb6tD0CNOb0w+f4N/Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:01:a3:a1:78:ba:96:88:85:aa:10:fe:04:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jul 23 19:00:45 2026 GMT
Not After : Jul 24 19:00:45 2026 GMT
Subject: CN=05e413b115d13e10aace08036a676551fb7d7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:98:c2:b3:c2:a1:80:30:90:85:e5:bb:86:
19:e9:d6:70:6f:c3:c7:bd:f5:8c:52:1f:d3:94:31:
1a:f5:2d:db:94:0f:d3:a5:ea:ee:94:26:6c:32:b5:
71:04:fe:58:4e:40:80:f6:e9:93:5a:2d:bd:68:96:
7b:d8:1a:12:19:fe:83:10:c5:e2:c2:d5:04:d6:a6:
ec:39:75:ae:5c:9f:66:92:c7:9f:c6:b7:10:f2:9a:
1e:41:a9:1a:51:ec:d7:50:43:95:39:ee:f1:af:89:
af:f4:b4:59:ec:f4:8c:52:63:a0:7e:08:73:2d:cc:
90:90:e8:c1:f6:6a:67:05:5c:84:8c:d2:f0:bd:fa:
50:ff:2d:7a:f2:2d:7e:9a:e5:29:65:13:59:68:e1:
5f:8c:c9:d7:ae:ca:42:95:ea:29:b0:96:dc:93:35:
97:96:14:14:9a:d3:56:ff:8e:e9:06:50:9f:8c:fa:
c1:94:7b:b5:42:4d:51:4d:10:91:fe:8b:65:8e:07:
cc:f9:43:07:54:c9:2e:ef:e2:ad:ef:28:20:e7:89:
97:88:86:9b:8f:32:fb:c6:2f:ff:05:74:28:b9:b1:
41:d7:20:90:83:24:ec:ac:2c:06:a6:87:f2:60:49:
d0:a5:b7:ae:21:a3:d9:e6:ce:88:56:e8:ef:a6:a8:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:13:B1:15:D1:3E:10:AA:CE:08:03:6A:67:65:51:FB:7D:78:77
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:7f:d3:a1:33:11:dd:76:f0:fc:c1:32:bf:f1:77:6b:ca:
8f:60:89:4d:56:87:fd:79:b8:d7:1b:b5:ba:71:1b:16:cc:f6:
f6:c2:99:68:64:cf:27:07:16:70:d2:d7:d7:6f:e6:be:ca:6e:
3c:76:19:bf:3d:d2:64:ae:8e:36:3c:fa:4b:b0:23:cb:6c:b4:
7a:ec:a9:90:88:99:2f:2e:95:f3:1c:fc:ef:0c:6f:c5:a8:7d:
1b:47:32:4a:13:87:29:cf:e5:fa:d4:a3:e9:ef:96:ff:46:26:
eb:fb:81:79:c5:17:da:f3:23:be:f9:11:a1:09:24:e0:76:11:
ea:c9:a6:5c:ad:b2:cc:ec:b0:86:31:10:42:08:52:73:ed:5d:
63:5d:9f:f4:95:2f:2e:66:81:39:a2:17:66:ff:4f:d8:22:b8:
7d:3b:2b:4d:cf:e3:e3:62:49:03:a8:70:89:0b:70:22:ed:5d:
ba:55:aa:b5:28:fa:45:a7:d2:06:3f:e3:b4:7e:9b:e8:39:95:
27:ac:a8:ea:e7:24:54:28:a4:8b:d0:08:2e:a3:13:e4:c0:c6:
f5:c0:44:36:57:55:67:55:99:c0:11:85:00:12:79:f2:20:e1:
dd:21:82:3f:c5:3e:e0:cd:9a:7c:09:3d:a5:59:6b:05:80:7e:
e7:78:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:39 2026 by rpki-client