Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: PB9KHJC7PN8PCf/ZAt9GHhsI9GJNLQwkTOO8V5qKJWQ=
Subject key identifier: 06:E5:CC:BB:6C:42:46:80:31:E5:AA:45:58:15:22:92:81:D4:CB:D5
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 01A0EE1D3D4A5A779A77AC324DCB8E3FAF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1A79
Signing time: Tue 29 Sep 2026 17:01:28 +0000
Manifest this update: Tue 29 Sep 2026 17:01:28 +0000
Manifest next update: Wed 30 Sep 2026 17:01:28 +0000
Files and hashes: 1: BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa (hash: Vh7lrvSAUjPIHB6bGQC1IFBTrjCNtjxlb9V3hEBQfKM=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: rX6T33hIBuxiWR8uW0wT/5SCc6ab9HCZP5qHVO3UboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:3d:4a:5a:77:9a:77:ac:32:4d:cb:8e:3f:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Sep 29 17:01:28 2026 GMT
Not After : Sep 30 17:01:28 2026 GMT
Subject: CN=06e5ccbb6c42468031e5aa455815229281d4cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:1a:5c:b3:a5:8e:9a:ab:ad:af:d4:f9:57:
c4:dd:36:5d:eb:e1:e7:0c:65:b6:d7:40:85:0b:98:
08:57:37:b7:e4:e7:2f:4d:f7:e2:36:24:9a:e8:e7:
1d:4f:ad:9e:55:1f:12:f1:81:76:04:95:3b:1a:39:
8e:82:d2:3f:72:36:76:dd:af:92:2c:ed:6f:89:84:
38:2e:43:0e:0b:2a:a9:67:19:ee:6a:14:85:d3:1e:
18:f7:e7:06:ad:f5:7f:49:d1:a1:02:2d:b3:39:23:
23:26:72:e3:8e:db:ff:b5:37:68:80:67:f7:1d:4e:
1d:43:a6:c4:ce:fd:73:38:2a:5d:1b:3d:5e:6e:c0:
89:bd:70:00:f8:24:c3:3a:11:b0:b5:6d:e8:74:a3:
7f:e5:02:86:f9:e4:11:e3:53:08:87:8a:6e:94:09:
f9:02:a9:e6:32:6c:70:3a:05:0b:d2:92:a9:74:69:
ee:4a:5e:08:f1:84:9c:34:7f:d4:77:b5:4d:de:7a:
83:95:dd:72:ec:c9:a1:5e:3c:67:ea:91:51:4f:f4:
2e:a6:72:b0:79:55:82:82:ba:ea:c9:1c:55:16:bf:
f4:2a:f1:21:2a:4c:d3:25:57:69:1e:8d:a8:35:ad:
5a:d3:f0:ec:d6:34:81:74:06:2d:2c:64:11:3b:88:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:CC:BB:6C:42:46:80:31:E5:AA:45:58:15:22:92:81:D4:CB:D5
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c3:2c:23:a3:c0:e2:f7:8d:8e:14:9d:e5:a5:91:63:14:f8:
19:d5:b3:2c:cb:c3:d7:58:41:8f:74:81:33:ee:33:a3:a5:31:
88:1d:34:b4:64:d5:72:41:b2:9b:8e:31:93:e8:0f:35:ee:a9:
6d:14:c4:cd:f1:1d:87:b9:64:1e:fd:05:ba:d3:f3:4e:78:49:
83:f3:ff:be:1e:35:32:77:0e:01:bb:59:7f:75:ee:db:c2:21:
60:ad:13:91:74:60:bb:a2:2e:cc:9d:e5:59:ed:4a:67:12:07:
2d:55:71:ed:1b:d1:6a:37:cd:e7:1e:c8:b3:e9:9f:06:cd:75:
ea:d4:39:e2:a7:a3:cc:28:52:9e:54:14:0e:3f:8f:24:fa:b0:
c8:6b:69:60:2b:ba:93:40:32:68:c4:9e:0c:3f:76:71:cd:75:
f8:1f:4a:53:ae:d6:6d:da:7c:f3:f3:58:18:03:b4:d0:74:5d:
64:81:8c:26:c5:fc:19:e1:8f:53:02:4a:ee:f3:cd:26:4a:f3:
41:53:ac:16:83:70:6d:35:6b:3a:5b:94:aa:1e:45:16:36:2e:
ec:43:35:f2:59:7f:f4:a8:f7:f9:6c:93:a9:7c:90:ea:6d:25:
8f:34:bc:7b:fc:c1:76:df:e2:0c:0c:7a:8d:63:58:50:50:c9:
3e:86:36:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuHT1KWnead6wyTcuOP6+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz
YTA1N2EwHhcNMjYwOTI5MTcwMTI4WhcNMjYwOTMwMTcwMTI4WjAzMTEwLwYDVQQD
EygwNmU1Y2NiYjZjNDI0NjgwMzFlNWFhNDU1ODE1MjI5MjgxZDRjYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFcaXLOljpqrra/U+VfE3TZd6+Hn
DGW210CFC5gIVze35OcvTffiNiSa6OcdT62eVR8S8YF2BJU7GjmOgtI/cjZ23a+S
LO1viYQ4LkMOCyqpZxnuahSF0x4Y9+cGrfV/SdGhAi2zOSMjJnLjjtv/tTdogGf3
HU4dQ6bEzv1zOCpdGz1ebsCJvXAA+CTDOhGwtW3odKN/5QKG+eQR41MIh4pulAn5
AqnmMmxwOgUL0pKpdGnuSl4I8YScNH/Ud7VN3nqDld1y7MmhXjxn6pFRT/QupnKw
eVWCgrrqyRxVFr/0KvEhKkzTJVdpHo2oNa1a0/Ds1jSBdAYtLGQRO4hkfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAblzLtsQkaAMeWqRVgVIpKB1MvVMB8GA1UdIwQY
MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt
NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk
LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8MsI6PA
4veNjhSd5aWRYxT4GdWzLMvD11hBj3SBM+4zo6UxiB00tGTVckGym44xk+gPNe6p
bRTEzfEdh7lkHv0FutPzTnhJg/P/vh41MncOAbtZf3Xu28IhYK0TkXRgu6IuzJ3l
We1KZxIHLVVx7RvRajfN5x7Is+mfBs116tQ54qejzChSnlQUDj+PJPqwyGtpYCu6
k0AyaMSeDD92cc11+B9KU67Wbdp88/NYGAO00HRdZIGMJsX8GeGPUwJK7vPNJkrz
QVOsFoNwbTVrOluUqh5FFjYu7EM18ll/9Kj3+WyTqXyQ6m0ljzS8e/zBdt/iDAx6
jWNYUFDJPoY2QA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:57:11 2026 by rpki-client