Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: eNLWmqQacWb39aRyVxZWAYfrI54Ujdhv5TTTt/eGwAE=
Subject key identifier: B0:58:A8:5B:09:3B:DA:86:21:5F:7A:50:1D:5F:90:15:D4:22:49:D3
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019D265F6078EA06B9C1BDCE1AD47803E9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 132A
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: EHScBu0DtfNN7XuW2NbtkqUh6LY.roa (hash: XTAL9pZrhDOSGcWcBZT8tlB7wZsz4Qittp7Yw5e9EHk=)
2: InJPJ1ltdDmmNb26X47efT5owog.roa (hash: roW4rWFh4v6ZLGndowGGN8SF2HPPme5DrUmgwwcOBrc=)
3: Usp7Cq9yEBn4Ro61mUJFM6lZCmQ.roa (hash: Q8czcZicRwqawMLCHXgEajjrnDJKLDPALwwosSnt964=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: emDG34kGPk5J/uewURjjOpqNrzm8mcaT0aV2uWPXV3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:60:78:ea:06:b9:c1:bd:ce:1a:d4:78:03:e9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=b058a85b093bda86215f7a501d5f9015d42249d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:6e:17:84:14:ab:4e:dc:b7:7e:3b:3e:a9:
34:2c:42:97:bd:7a:fe:48:0b:ac:06:8d:b3:1a:f0:
43:e3:9c:97:e0:60:50:bd:52:64:42:83:9f:6a:52:
7f:81:e5:b2:f4:ed:90:d6:b4:07:17:db:e7:a7:85:
08:d1:fc:d4:46:ac:e7:89:73:d9:e4:b7:b4:a3:6c:
db:be:91:da:30:c5:63:42:8c:83:a4:15:a3:4a:e7:
ae:d0:ac:55:6e:45:6b:ab:74:1e:17:cb:8b:6e:e6:
4c:a5:80:0c:91:87:04:0d:29:b8:cc:81:bb:32:3c:
b6:c2:9a:be:40:c6:07:33:72:8e:49:08:de:88:ff:
57:30:0e:53:44:41:2c:2f:ea:12:bc:39:8c:4f:21:
2d:64:9b:a9:8d:19:c1:0e:73:f3:d1:66:2f:5b:aa:
3e:cc:f8:77:8b:6d:5e:b1:f7:1a:f2:7a:0b:78:7f:
27:5c:05:1f:cb:cc:47:44:05:b6:ee:be:4b:70:0b:
04:ec:b4:93:f3:1f:6d:1c:ae:73:18:b9:6f:91:ec:
52:01:ff:b0:48:83:42:03:48:63:45:d2:60:58:01:
91:60:82:c9:1a:b7:f0:80:c4:0d:24:0d:75:d3:c0:
a2:c6:59:56:79:b3:43:d6:f5:fd:6c:36:3d:7e:82:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:A8:5B:09:3B:DA:86:21:5F:7A:50:1D:5F:90:15:D4:22:49:D3
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:ee:35:70:81:fd:b2:95:a9:c4:0c:c3:98:f5:35:b7:f3:
0c:ab:01:c0:aa:12:c6:62:13:f6:f7:97:6b:a3:bc:e7:64:2d:
f2:50:7c:6e:c5:ca:af:97:63:5c:41:b7:28:80:64:34:45:15:
01:f9:02:c6:59:1e:54:d1:20:26:d4:b7:93:ac:83:45:91:c1:
54:56:26:be:08:0a:00:30:b8:1a:18:c1:29:9b:c4:e0:6c:ea:
30:33:ed:25:fc:c5:67:ea:4a:f8:aa:cf:6b:0d:58:07:f7:6a:
7f:46:93:9f:0e:96:f0:72:df:7f:aa:04:cc:e8:89:14:22:e5:
72:e5:05:0d:8a:49:89:d2:81:d0:76:b5:18:09:20:a3:8f:c8:
ba:4c:de:81:7b:d0:9b:f2:c6:d8:92:b5:13:1d:d4:03:93:e6:
05:e4:2f:12:62:e4:1d:bb:bc:76:ca:c8:87:8f:cf:0b:c8:31:
30:17:21:5e:69:ad:37:90:e2:89:14:87:1c:83:e8:b6:95:83:
b6:1d:ee:d4:4c:4a:39:5f:a4:27:92:f2:93:a9:7f:45:6e:b5:
bf:ae:be:5d:b8:8f:4f:3a:ae:be:06:9c:e9:6f:e1:a6:09:fc:
1f:32:75:8e:c6:9b:bd:cb:e5:d7:5c:87:fd:10:7a:b9:08:5f:
52:ad:40:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2B46ga5wb3OGtR4A+m3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk
NmMyMDQwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EyhiMDU4YTg1YjA5M2JkYTg2MjE1ZjdhNTAxZDVmOTAxNWQ0MjI0OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZluF4QUq07ct347Pqk0LEKXvXr+
SAusBo2zGvBD45yX4GBQvVJkQoOfalJ/geWy9O2Q1rQHF9vnp4UI0fzURqzniXPZ
5Le0o2zbvpHaMMVjQoyDpBWjSueu0KxVbkVrq3QeF8uLbuZMpYAMkYcEDSm4zIG7
Mjy2wpq+QMYHM3KOSQjeiP9XMA5TREEsL+oSvDmMTyEtZJupjRnBDnPz0WYvW6o+
zPh3i21esfca8noLeH8nXAUfy8xHRAW27r5LcAsE7LST8x9tHK5zGLlvkexSAf+w
SINCA0hjRdJgWAGRYILJGrfwgMQNJA1108CixllWebND1vX9bDY9foKMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBYqFsJO9qGIV96UB1fkBXUIknTMB8GA1UdIwQY
MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt
MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm
LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhODuNXCB
/bKVqcQMw5j1NbfzDKsBwKoSxmIT9veXa6O852Qt8lB8bsXKr5djXEG3KIBkNEUV
AfkCxlkeVNEgJtS3k6yDRZHBVFYmvggKADC4GhjBKZvE4GzqMDPtJfzFZ+pK+KrP
aw1YB/dqf0aTnw6W8HLff6oEzOiJFCLlcuUFDYpJidKB0Ha1GAkgo4/IukzegXvQ
m/LG2JK1Ex3UA5PmBeQvEmLkHbu8dsrIh4/PC8gxMBchXmmtN5DiiRSHHIPotpWD
th3u1ExKOV+kJ5Lyk6l/RW61v66+XbiPTzquvgac6W/hpgn8HzJ1jsabvcvl11yH
/RB6uQhfUq1AwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:28 2026 by rpki-client