Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: SvbOtbj60vW/M/KK/Ftk5fc8G2bLkI6hIQw174xRr6A=
Subject key identifier: 95:0C:19:1E:0A:C6:6E:76:FE:01:F4:8F:E7:CC:D6:D6:DB:27:77:7E
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019D2A7278CD5C8D65F2E1372C3A70E9CD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:38 +0000
Manifest this update: Thu 26 Mar 2026 14:00:38 +0000
Manifest next update: Fri 27 Mar 2026 14:00:38 +0000
Files and hashes: 1: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (hash: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: 39mdcMqxyZ4ik6f8BYRUzFLtpWlrMkWelzmIfLsb85s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:78:cd:5c:8d:65:f2:e1:37:2c:3a:70:e9:cd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Mar 26 14:00:38 2026 GMT
Not After : Mar 27 14:00:38 2026 GMT
Subject: CN=950c191e0ac66e76fe01f48fe7ccd6d6db27777e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:1b:38:6c:d3:37:2c:cc:62:47:20:24:ba:
33:04:50:3e:b0:cd:52:7c:ff:a6:15:b1:0f:a7:a9:
45:f1:4c:0e:7f:4b:c2:fa:64:b5:87:bd:dd:53:78:
77:14:04:e8:ce:50:ad:94:77:27:67:22:75:3c:f4:
bf:2f:41:16:f6:d5:ed:f8:f7:a1:8c:9a:04:bc:39:
33:1c:16:00:e3:3d:f5:d1:3c:66:32:9d:c5:e1:56:
b1:b9:30:12:ff:2f:12:63:6b:44:11:9e:27:a9:a6:
eb:2d:6d:b4:86:00:79:ec:14:7b:12:32:2e:4c:74:
46:c0:39:26:62:71:04:74:29:03:d9:07:b0:4f:87:
da:b2:a1:b5:a9:97:ef:75:e4:e9:26:70:d2:6f:29:
a1:15:f3:ef:9d:ca:ef:10:72:3f:f3:79:df:e6:10:
8b:be:87:69:43:54:1e:73:6f:ed:71:38:e2:6b:b2:
a8:12:e8:5e:4a:8a:23:6f:cf:69:ae:07:4e:14:bb:
46:98:72:ab:0a:1b:30:d2:ba:ab:63:46:4e:ab:d6:
ea:e2:5d:9c:8f:c0:e9:8b:54:09:e8:56:05:86:92:
84:e9:9f:ac:52:6e:0f:fe:c9:cc:0d:49:0b:e1:7a:
0c:fa:b0:1b:3e:c7:79:45:02:ca:11:ab:5b:3f:7d:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:19:1E:0A:C6:6E:76:FE:01:F4:8F:E7:CC:D6:D6:DB:27:77:7E
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:94:7b:32:45:73:dc:09:bf:59:7e:b2:79:af:22:cd:3a:44:
0f:b4:00:4d:38:6b:84:52:3f:e5:5d:d3:66:28:5b:ce:e9:7d:
81:39:e1:a0:1f:c2:6d:67:d5:72:52:e1:19:b0:cd:90:c3:af:
23:af:6f:35:03:cf:a8:38:49:fc:3c:90:22:a5:44:ce:9a:15:
d3:de:da:8f:f3:0e:dd:8a:87:e0:9e:72:8a:cd:9b:3f:98:da:
b3:f6:8e:e5:4d:dc:e2:91:53:5d:67:7c:d1:85:7c:5a:51:c1:
73:34:41:0e:7f:dd:e2:73:88:f1:0f:4f:1f:78:c5:ed:b7:57:
a0:b1:65:e8:29:6d:82:4e:49:29:36:46:35:b3:ff:b0:1a:da:
52:2d:75:a7:6e:e7:e6:7b:66:a3:a5:65:a0:48:dc:13:aa:bc:
7e:3b:68:db:15:c1:1f:7c:e4:63:73:f4:87:38:fe:bf:8e:14:
3a:41:e9:8d:8e:eb:23:18:28:14:d2:74:3e:fd:4e:66:d7:e0:
54:ee:74:6f:7b:ba:d0:e7:f7:e8:9b:df:7c:a4:ee:ef:28:d0:
54:77:4f:4b:c3:2f:f1:cf:02:ca:93:e2:a7:87:67:96:56:d8:
17:74:37:90:46:f8:68:86:91:0e:73:b5:e6:5e:95:4f:42:b1:
3a:94:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:12 2026 by rpki-client