Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: QjIYRz0t70ZtjDbtiffGjOn/11/4+PCJGDhiPCNIyQA=
Subject key identifier: 5B:22:97:BD:09:86:E9:57:A9:F3:C4:E4:EA:4C:B3:B5:1F:FE:84:A3
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01A1396D66DD20CED86C022D172FE5FF000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 159E
Signing time: Wed 14 Oct 2026 08:00:33 +0000
Manifest this update: Wed 14 Oct 2026 08:00:33 +0000
Manifest next update: Thu 15 Oct 2026 08:00:33 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: NR/hhsVF8Vc3xBhYo+6NbjRkcVWK9/qD99jPHhBxi4k=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:66:dd:20:ce:d8:6c:02:2d:17:2f:e5:ff:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Oct 14 08:00:33 2026 GMT
Not After : Oct 15 08:00:33 2026 GMT
Subject: CN=5b2297bd0986e957a9f3c4e4ea4cb3b51ffe84a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:e2:1c:a4:66:45:63:07:19:a6:95:e9:1e:
56:d5:4c:72:46:ed:26:2a:91:0d:e0:ad:8f:93:37:
9b:45:e6:4b:3b:29:70:f0:2e:5e:46:bd:2e:0a:33:
43:70:78:e4:f5:e6:3e:b2:b5:13:e3:fc:1d:da:de:
96:de:fc:cd:29:d9:32:64:77:5e:b9:e7:63:9b:e4:
9c:c4:ed:27:51:20:52:20:da:b2:b4:03:89:63:2f:
a3:3d:b5:39:75:40:d0:94:6e:3b:cc:01:92:0c:ea:
c6:5a:18:6a:57:fb:4f:76:2f:64:ec:f6:b4:d8:2b:
c3:10:95:16:d4:00:a8:b1:92:b6:4d:11:c6:c2:49:
c0:33:9a:6f:b6:85:b7:ac:cd:ce:23:9f:d8:d2:94:
4a:b8:3b:1a:37:eb:c3:3f:a3:03:96:82:69:ad:b6:
08:47:61:e9:6e:e1:3f:83:8e:75:d3:0a:dd:73:b7:
5f:29:62:ab:9b:ff:3d:5b:00:39:48:0e:a4:20:2f:
01:ab:b0:62:f3:a8:88:6e:24:16:00:ed:e4:23:e3:
95:b6:86:b7:0a:cc:b2:77:18:04:10:71:7a:75:38:
67:3c:34:a6:75:38:e1:ef:2d:76:9e:e9:d5:88:c3:
1b:ef:34:97:68:be:f3:41:95:5b:79:94:3d:f7:0c:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:97:BD:09:86:E9:57:A9:F3:C4:E4:EA:4C:B3:B5:1F:FE:84:A3
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:2c:2a:b0:e0:2a:a1:eb:69:39:38:8a:cd:ee:18:17:4d:
6f:ab:28:d2:40:73:7a:d8:6a:84:1a:dd:bd:9d:74:e1:8e:5a:
f3:17:43:83:11:93:d8:71:5f:21:02:bf:d8:19:f3:34:81:fd:
ac:ef:15:88:00:9f:ac:12:cd:e3:cd:f6:cc:e3:b6:6a:7a:c7:
f7:77:11:dc:fe:49:2e:29:b0:c5:f5:9b:d9:f8:d9:42:72:93:
89:b0:f5:bf:e6:3f:29:79:1c:b3:ff:6e:81:d4:5e:5e:74:9b:
74:57:06:d4:58:ad:96:06:bc:86:42:2d:38:e8:82:66:72:3c:
8d:e6:0c:a2:e3:f7:ee:5e:5c:17:16:2f:0c:f3:c4:ec:69:17:
8e:98:cc:f5:7f:9a:36:a2:25:aa:c4:e3:5c:a4:cf:4b:35:60:
99:af:d0:3d:48:6f:cd:bd:b7:98:a9:56:5b:63:07:3e:23:e2:
18:a5:f1:92:ba:93:31:6e:94:ea:84:a9:4c:c9:5a:5e:13:ac:
f0:d6:33:fa:f0:57:26:88:6b:1a:2c:0d:f6:fd:14:bf:66:c4:
64:d3:a6:4d:3f:0a:7e:7b:9f:4a:d6:14:40:7f:ac:e8:45:27:
33:bc:49:cc:25:2c:28:c3:31:c5:be:f5:20:01:9a:66:1e:9a:
9c:2d:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:55:20 2026 by rpki-client