Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: jKYkrjEb+rY8nRd3v/t93mzyOC3vr2cwmJff0TyvYFA=
Subject key identifier: A0:72:1F:A8:29:2C:25:8E:E0:6D:C7:2C:A4:8A:CC:74:03:98:C5:35
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019D277239511135E3084BAF22EB86ABF474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 076A
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: xn4Z8CQBeemxcGceHVkpG5FcExVmC70PZkOC3i9sacA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:39:51:11:35:e3:08:4b:af:22:eb:86:ab:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=a0721fa8292c258ee06dc72ca48acc740398c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:e7:74:14:65:78:16:f3:ce:28:39:ff:c9:
b7:06:9c:7c:a7:72:18:d4:46:f4:37:ea:31:af:63:
ea:d4:09:8f:08:76:4e:25:e1:91:aa:09:9a:fe:e5:
30:81:02:16:2b:19:30:40:2b:1c:fe:61:73:4e:cc:
79:4b:83:ef:2a:93:43:74:a2:f5:cd:f2:63:31:62:
43:3f:37:b3:9f:3e:f9:1b:01:17:33:83:7f:56:e8:
ca:89:92:99:42:66:29:bc:4c:0e:81:44:50:0f:f6:
77:da:63:0c:19:59:43:8a:f9:f4:18:af:ff:c5:f5:
d4:f2:41:c1:b1:29:76:a5:6d:04:62:49:4b:c1:7e:
c6:8e:aa:17:5c:cb:f5:71:08:7a:87:4d:ef:11:5c:
e2:94:45:ca:63:2e:b0:58:18:72:a9:3e:4a:7b:15:
e8:e3:44:5a:5b:ef:00:76:54:c2:11:37:a2:87:cf:
30:31:a9:d3:c2:cb:2e:49:5c:a6:c2:25:a8:82:45:
11:2e:4c:4f:e3:fb:1e:77:08:1b:c9:a0:f9:d2:6f:
2b:67:bc:d1:11:3f:85:99:bc:09:d6:c8:36:a9:cd:
1a:79:70:d8:92:c2:de:50:f2:3b:5b:67:bb:75:ea:
c6:d1:95:59:38:ad:66:fd:02:a6:85:8b:e3:bd:f6:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:1F:A8:29:2C:25:8E:E0:6D:C7:2C:A4:8A:CC:74:03:98:C5:35
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:2e:b9:81:8b:fe:07:6e:93:ef:db:9e:da:68:a2:ed:ef:
88:73:73:8b:61:6d:fd:96:f0:f4:11:b0:6d:36:d7:ae:eb:d4:
69:3b:95:29:91:7a:0a:62:71:7c:df:d2:61:50:5d:e5:08:04:
00:ef:c7:e7:74:3c:e9:1d:69:82:dc:1b:06:38:93:a1:7b:46:
66:30:8a:d8:83:82:de:97:ff:39:df:66:e5:ea:17:e3:c1:6a:
d5:08:8e:a2:38:1c:82:aa:d1:b5:37:45:3c:2a:93:85:8b:6d:
5d:62:3a:13:25:9e:cd:a2:76:90:fc:e2:07:c4:96:70:06:7b:
02:00:66:20:74:4b:63:e9:43:50:82:68:38:f3:e4:e4:71:d4:
c3:ae:93:fc:e4:42:00:a7:76:8e:08:da:85:2d:73:4c:50:e8:
71:fd:19:52:a2:54:ab:4d:3d:4a:3f:a5:22:eb:02:5c:af:f6:
fa:fe:05:2e:81:04:8d:d8:12:3a:ae:62:e8:7b:3f:5d:f9:13:
6a:be:cd:4e:7d:9b:02:cf:ea:05:b4:5d:6d:ac:08:29:19:8a:
08:86:92:71:1f:8c:b3:9c:2d:31:73:2c:02:0e:e2:f8:39:b1:
87:08:43:b2:ab:72:af:4f:2a:72:c5:6c:66:7f:b6:9d:6b:0f:
8d:7d:09:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjlRETXjCEuvIuuGq/R0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjYwMzI2MDAwMTMwWhcNMjYwMzI3MDAwMTMwWjAzMTEwLwYDVQQD
EyhhMDcyMWZhODI5MmMyNThlZTA2ZGM3MmNhNDhhY2M3NDAzOThjNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43ndBRleBbzzig5/8m3Bpx8p3IY
1Eb0N+oxr2Pq1AmPCHZOJeGRqgma/uUwgQIWKxkwQCsc/mFzTsx5S4PvKpNDdKL1
zfJjMWJDPzeznz75GwEXM4N/VujKiZKZQmYpvEwOgURQD/Z32mMMGVlDivn0GK//
xfXU8kHBsSl2pW0EYklLwX7GjqoXXMv1cQh6h03vEVzilEXKYy6wWBhyqT5KexXo
40RaW+8AdlTCETeih88wManTwssuSVymwiWogkURLkxP4/sedwgbyaD50m8rZ7zR
ET+FmbwJ1sg2qc0aeXDYksLeUPI7W2e7derG0ZVZOK1m/QKmhYvjvfZKHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKByH6gpLCWO4G3HLKSKzHQDmMU1MB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh4uuYGL
/gduk+/bntpoou3viHNzi2Ft/Zbw9BGwbTbXruvUaTuVKZF6CmJxfN/SYVBd5QgE
AO/H53Q86R1pgtwbBjiToXtGZjCK2IOC3pf/Od9m5eoX48Fq1QiOojgcgqrRtTdF
PCqThYttXWI6EyWezaJ2kPziB8SWcAZ7AgBmIHRLY+lDUIJoOPPk5HHUw66T/ORC
AKd2jgjahS1zTFDocf0ZUqJUq009Sj+lIusCXK/2+v4FLoEEjdgSOq5i6Hs/XfkT
ar7NTn2bAs/qBbRdbawIKRmKCIaScR+Ms5wtMXMsAg7i+DmxhwhDsqtyr08qcsVs
Zn+2nWsPjX0JiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:13 2026 by rpki-client