Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: qaDRW/IZy6fI23I/fUx0JmMsTedaDsGtIc8i/PwkYHQ=
Subject key identifier: C0:92:2E:80:31:1D:5A:A1:33:51:C1:79:63:D6:D0:28:0F:B3:27:0B
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019E1EA357A9AE1DE5233706EDB3F10FC82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 07EA
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:21 +0000
Manifest next update: Thu 14 May 2026 00:01:21 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: MH4uWm82QZLaWBkmbGTSWAwFCn7t57eZ6sRsJ9TpLQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:57:a9:ae:1d:e5:23:37:06:ed:b3:f1:0f:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: May 13 00:01:21 2026 GMT
Not After : May 14 00:01:21 2026 GMT
Subject: CN=c0922e80311d5aa13351c17963d6d0280fb3270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:a0:a4:e7:33:57:c4:c5:14:a0:a4:a7:78:
0d:a2:8a:5d:52:cd:b2:b1:09:4b:76:f3:3b:67:73:
56:fa:7a:d6:4e:d9:e0:db:f6:93:aa:b2:2e:48:32:
92:e7:db:3f:aa:fc:37:9e:8d:1b:ab:45:c9:b3:da:
52:ea:48:7f:7e:66:ff:73:65:d8:e3:ef:3b:98:20:
f6:bf:6b:aa:51:e6:fe:63:33:e3:ce:fa:be:54:d5:
f9:a9:c4:4c:54:9f:6f:93:f3:cb:95:59:f4:77:f0:
57:40:b0:11:e6:10:90:3e:09:67:d3:d7:8e:8c:1c:
bd:46:11:99:a1:e8:f0:23:fa:2e:ea:1d:0c:58:8a:
a8:93:31:5e:e4:e4:ef:d6:8b:01:c5:10:46:c4:21:
58:16:0b:83:49:1a:b2:07:ad:26:50:00:47:e5:16:
20:ff:5e:5a:a8:b6:f2:63:82:2f:db:6d:bb:37:7e:
6c:ae:cf:80:d3:e3:0c:cb:5c:f4:3e:33:ff:d7:05:
b6:4f:0b:ce:de:9c:fb:c4:fb:b1:5a:a4:d9:92:c7:
7d:14:07:9f:2d:13:1a:45:20:83:40:8a:cc:78:a5:
59:c0:33:2e:09:c2:b6:58:47:a0:b7:88:76:f8:65:
4f:35:2e:b3:81:44:03:6a:ba:46:ef:af:75:01:3a:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:2E:80:31:1D:5A:A1:33:51:C1:79:63:D6:D0:28:0F:B3:27:0B
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:7c:81:48:16:a8:4d:c3:e1:1a:77:7e:ed:1b:c3:7b:91:
fb:f0:53:f6:2f:ce:2a:07:0f:da:30:91:35:e0:33:01:8e:6e:
56:76:a2:08:20:5a:3c:f0:86:6d:c1:5f:66:af:18:ff:ea:6f:
1c:00:3a:52:d3:6d:ae:71:8e:4d:b3:1f:33:c7:7f:c4:25:b9:
a2:94:98:be:67:5a:cc:65:2d:79:df:fc:9c:bc:5f:aa:b3:86:
ed:47:3d:34:d0:59:b9:cc:5b:12:00:bd:81:45:3b:8f:83:c1:
a0:08:43:59:31:9c:ac:81:dd:fb:37:58:ac:5d:53:e0:a2:cc:
d0:dc:e1:ac:f6:fd:6c:56:80:68:d0:57:e4:4f:b5:cf:14:c9:
c7:71:a6:6e:30:b7:3e:d4:ef:b4:4e:ca:ba:7f:15:ee:81:bf:
e2:b2:d7:76:8c:0e:e5:4a:4a:2c:4a:53:aa:65:64:8d:e7:fd:
0e:1b:8f:2e:ed:86:fc:dd:0b:6a:a9:42:9d:98:7c:b0:ba:35:
96:a0:25:5b:36:f7:96:34:6b:33:74:75:82:a8:eb:ea:18:f7:
13:da:0a:af:60:4b:ea:32:5b:db:94:45:4c:6d:37:92:12:95:
ef:bd:2d:7c:0e:22:c1:0e:a7:cf:eb:67:f2:2e:39:b6:86:38:
48:bf:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:03 2026 by rpki-client