Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: fivOr9+CHNkhhvffp+D7unlloE4ehUyFofXYCjstRak=
Subject key identifier: 0B:46:3B:AE:79:F8:17:D0:9F:B7:F5:37:BE:7B:26:B4:9D:CD:28:FD
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019F916D1D4B87E97E0711DFD9BF8B9E079C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 08AA
Signing time: Fri 24 Jul 2026 00:01:14 +0000
Manifest this update: Fri 24 Jul 2026 00:01:14 +0000
Manifest next update: Sat 25 Jul 2026 00:01:14 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: DLP/+UHMoxWp9kPOsCv0BoyZbFocxaHYAu+9xsgFRds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:1d:4b:87:e9:7e:07:11:df:d9:bf:8b:9e:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jul 24 00:01:14 2026 GMT
Not After : Jul 25 00:01:14 2026 GMT
Subject: CN=0b463bae79f817d09fb7f537be7b26b49dcd28fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:ce:69:07:dc:20:c9:df:62:ac:4b:35:d7:
c1:1e:ac:45:84:80:f7:fa:a0:f8:21:06:a9:7c:34:
fa:3e:20:86:bf:c7:71:cf:27:0e:45:95:ce:29:3e:
02:83:ac:97:ab:ed:32:05:fa:6f:c0:6b:3a:4b:f8:
87:35:c4:11:8f:84:e8:2b:98:bd:6c:b0:59:9e:7b:
66:4f:c7:c1:03:6f:60:1c:84:97:54:8f:72:cc:e9:
b8:2d:17:87:70:e3:b5:31:07:7a:21:f1:d7:dc:7f:
a4:b4:ae:7d:2c:74:42:b7:98:f9:8d:a0:46:a7:c2:
6c:ca:87:82:e2:e0:7a:fa:54:8f:a4:d8:d4:c1:2a:
85:91:f0:5d:91:4e:64:97:98:39:ab:e0:b8:51:8b:
2b:a4:ae:b7:71:3e:4b:78:56:93:ff:80:5b:36:68:
c2:2d:a1:70:93:d0:df:fe:b0:be:2f:41:8c:b9:e3:
b6:e4:38:51:cd:f3:9e:68:fd:18:d4:99:c3:24:80:
e2:b1:45:30:84:16:9b:87:9b:ec:2e:97:f6:52:ee:
2d:37:0d:2e:22:e5:29:c1:48:e1:7c:23:a4:f8:07:
59:ff:ae:69:40:d5:ee:00:c8:98:ff:d5:5b:0a:3e:
79:51:77:69:c7:8e:c8:1c:75:ad:66:62:dc:f1:07:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:3B:AE:79:F8:17:D0:9F:B7:F5:37:BE:7B:26:B4:9D:CD:28:FD
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:17:30:96:59:c5:a0:c0:6b:19:f2:e1:0e:d9:a1:fd:0b:
96:e6:28:8e:13:0b:3c:e8:fc:1f:19:c1:bf:96:77:0a:6b:97:
3c:7c:ef:3a:82:0e:b2:da:eb:b1:84:16:42:51:80:c4:60:96:
03:b1:43:f7:d4:56:4c:ac:b8:72:49:3e:e4:69:d4:7b:0d:bb:
b1:cc:ce:3c:5b:9d:5c:27:28:61:a8:90:67:70:e6:f6:28:88:
57:0b:b7:77:c1:39:1a:dd:90:6b:58:ec:fe:af:67:2d:f5:62:
27:d7:86:c4:9c:b4:dd:3c:22:0e:55:9a:39:d4:d9:bc:7d:31:
cb:f9:b3:61:56:9f:45:9c:41:a1:48:38:98:2e:b6:6f:c3:32:
d8:fa:91:32:15:7d:b5:12:f4:64:6b:49:a8:e5:78:1f:01:34:
7e:d6:03:33:e2:b0:40:6f:2b:43:b5:f5:d2:45:20:47:cc:32:
74:1f:04:4a:37:ec:47:f7:51:d8:24:dd:28:f4:24:8e:a3:e0:
73:00:b2:d6:71:66:21:34:98:28:a0:aa:14:90:6c:26:7d:e8:
28:cc:90:4b:a6:ee:ce:2a:74:bb:84:c8:ce:fc:78:25:04:44:
1c:5e:6a:ab:52:4a:66:44:c6:2f:23:5c:da:0e:93:9e:79:51:
0c:91:5d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbR1Lh+l+BxHf2b+LngecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjYwNzI0MDAwMTE0WhcNMjYwNzI1MDAwMTE0WjAzMTEwLwYDVQQD
EygwYjQ2M2JhZTc5ZjgxN2QwOWZiN2Y1MzdiZTdiMjZiNDlkY2QyOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KvOaQfcIMnfYqxLNdfBHqxFhID3
+qD4IQapfDT6PiCGv8dxzycORZXOKT4Cg6yXq+0yBfpvwGs6S/iHNcQRj4ToK5i9
bLBZnntmT8fBA29gHISXVI9yzOm4LReHcOO1MQd6IfHX3H+ktK59LHRCt5j5jaBG
p8JsyoeC4uB6+lSPpNjUwSqFkfBdkU5kl5g5q+C4UYsrpK63cT5LeFaT/4BbNmjC
LaFwk9Df/rC+L0GMueO25DhRzfOeaP0Y1JnDJIDisUUwhBabh5vsLpf2Uu4tNw0u
IuUpwUjhfCOk+AdZ/65pQNXuAMiY/9VbCj55UXdpx47IHHWtZmLc8QdjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtGO655+BfQn7f1N757JrSdzSj9MB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEUXMJZZ
xaDAaxny4Q7Zof0LluYojhMLPOj8HxnBv5Z3CmuXPHzvOoIOstrrsYQWQlGAxGCW
A7FD99RWTKy4ckk+5GnUew27sczOPFudXCcoYaiQZ3Dm9iiIVwu3d8E5Gt2Qa1js
/q9nLfViJ9eGxJy03TwiDlWaOdTZvH0xy/mzYVafRZxBoUg4mC62b8My2PqRMhV9
tRL0ZGtJqOV4HwE0ftYDM+KwQG8rQ7X10kUgR8wydB8ESjfsR/dR2CTdKPQkjqPg
cwCy1nFmITSYKKCqFJBsJn3oKMyQS6buzip0u4TIzvx4JQREHF5qq1JKZkTGLyNc
2g6TnnlRDJFdag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:07:40 2026 by rpki-client