Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: JbjByNPJAkwLFFCJmOica1rrNQ4pk+EdA8dNVuduFlM=
Subject key identifier: 34:8E:34:F8:01:4E:03:25:DF:C3:68:13:77:B8:26:4E:98:95:CC:53
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01A0DBA9BADC488D5F3472AC2A5FA4FC7A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 0955
Signing time: Sat 26 Sep 2026 03:02:08 +0000
Manifest this update: Sat 26 Sep 2026 03:02:08 +0000
Manifest next update: Sun 27 Sep 2026 03:02:08 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: 4O3C+pXrlEhxchSTpXdsWY48d5iz9GUwBt4LWPRP0gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:ba:dc:48:8d:5f:34:72:ac:2a:5f:a4:fc:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Sep 26 03:02:08 2026 GMT
Not After : Sep 27 03:02:08 2026 GMT
Subject: CN=348e34f8014e0325dfc3681377b8264e9895cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1f:15:b3:1a:69:c4:d9:33:20:c6:38:fe:06:
94:68:cc:de:92:c5:b2:43:04:14:92:87:d1:fa:8b:
b7:51:66:6e:ab:20:0a:8e:4d:76:57:ba:68:15:a7:
39:03:f1:b4:b5:f4:e4:c1:2c:b5:aa:f2:b8:db:d7:
c9:e6:a4:09:47:11:6a:4a:29:bc:3c:09:e0:1c:c6:
0a:74:47:d8:2d:18:a5:16:eb:09:cd:3a:20:7c:ee:
e9:37:27:5b:63:91:a1:3c:e4:6d:47:07:0c:82:75:
02:97:0a:64:e4:55:0b:49:55:4d:1a:a8:34:db:29:
7d:f7:5f:a1:97:f1:c3:bc:31:bc:3b:e8:c1:58:c8:
96:74:a5:27:8c:c2:39:ea:2b:22:22:81:a5:a2:4b:
33:0c:16:bc:f4:df:6d:cc:92:8b:9d:dc:55:af:ee:
16:52:ca:4d:16:df:d6:c4:83:11:f8:ea:97:75:e9:
16:38:7d:51:cd:2a:f5:59:b5:c3:1d:97:be:87:f1:
4d:ef:7f:b4:25:49:cf:77:77:de:78:d0:3c:aa:31:
c5:98:53:6f:5f:75:f0:92:5a:6a:5a:c9:48:8a:85:
45:4a:45:c3:89:72:82:71:e4:32:1e:32:1e:97:7f:
97:e0:a3:3c:a4:0f:1d:42:c1:fb:3f:a0:37:5c:62:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8E:34:F8:01:4E:03:25:DF:C3:68:13:77:B8:26:4E:98:95:CC:53
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cf:c9:69:47:de:c4:57:1e:7c:f5:47:bc:bd:af:84:26:6b:
aa:8b:fd:76:77:22:31:0b:9e:6b:66:a9:76:f2:27:2e:00:77:
03:00:f9:1d:dd:69:45:36:73:90:e6:e1:be:26:9e:65:04:a2:
68:cf:6c:47:a3:c9:77:b3:dd:05:cb:11:d2:25:73:38:d1:16:
46:d8:19:60:52:fb:36:8a:f9:04:03:b4:55:a0:bf:c7:99:0f:
44:65:c6:1a:f5:f1:10:1f:be:66:f6:1a:5a:5e:f3:db:6c:23:
4d:64:b8:da:df:12:e5:bb:e3:ff:b0:25:2c:2c:64:de:70:3b:
3b:0c:ce:26:da:c6:cc:dc:e5:1c:37:eb:0c:5c:91:c5:dd:67:
62:c3:25:69:a4:36:b2:5e:26:dd:13:6d:46:3f:c8:6a:e1:8b:
3a:06:ac:9c:f3:17:b2:b3:40:07:36:cc:11:ff:ca:76:74:43:
d5:e3:e2:c8:cc:6c:3e:3b:92:e1:91:d8:40:5a:43:43:9b:d8:
e9:57:b6:d0:29:21:9e:51:eb:bf:09:86:25:37:aa:5e:c1:05:
6f:df:ab:86:52:2a:49:2d:22:9f:d1:69:53:0e:64:0b:7b:6a:
fb:74:e2:72:a1:23:18:8b:fd:1c:4c:db:a0:1b:92:ea:19:20:
c9:ba:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:43:53 2026 by rpki-client