Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: sUaOMQScJUZZW0hGKUidLzr80DkTb7Qx8rtDLV4+mf8=
Subject key identifier: 10:F7:3B:7F:1D:8F:58:A8:FA:AD:F7:EC:39:F0:86:E9:40:7F:E2:2C
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019D269610F4D354E793630A831A94DB4B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 20:01:02 +0000
Manifest this update: Wed 25 Mar 2026 20:01:02 +0000
Manifest next update: Thu 26 Mar 2026 20:01:02 +0000
Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: FfliKejVu1wSXm7n7saT8bvNCFCxLzY3y23NSUwgK1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:10:f4:d3:54:e7:93:63:0a:83:1a:94:db:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Mar 25 20:01:02 2026 GMT
Not After : Mar 26 20:01:02 2026 GMT
Subject: CN=10f73b7f1d8f58a8faadf7ec39f086e9407fe22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:a8:14:a1:1e:50:20:fa:90:b0:1c:48:ef:
00:a7:2b:8a:f6:a2:69:e2:a1:76:5e:b9:ba:f4:3d:
9b:67:6c:7c:62:e9:23:77:d6:29:86:0c:a8:d8:25:
1b:59:aa:2a:b1:ca:ce:0e:79:2b:11:ab:bd:2a:f6:
54:88:ef:16:6f:c5:a8:4b:06:9f:dc:1c:99:7e:4c:
e4:78:47:11:88:48:82:3a:5e:07:56:fe:04:08:1c:
4d:a7:5e:b7:84:db:e1:b1:44:69:3b:98:f0:88:94:
c2:22:fe:1c:f6:73:97:aa:99:f5:0f:38:bc:39:a0:
84:43:71:75:ac:e7:54:d1:7c:94:0f:e0:3b:c9:b8:
8f:1a:d3:c7:e7:2d:d0:1e:f7:c3:82:e5:b9:5f:be:
6b:e3:de:cc:7c:13:45:49:ea:52:1b:78:cc:03:1d:
14:eb:bb:ea:2d:a7:8f:f2:78:2c:69:51:79:ee:5a:
6b:b1:8d:57:11:cc:5c:51:eb:2f:f3:3e:12:bf:bd:
21:e1:e8:47:fb:d7:e5:47:2c:b3:08:10:2f:e4:2d:
a8:1c:37:97:23:b1:65:6b:cb:97:81:3e:62:b5:27:
1c:02:c1:7b:37:24:2f:4d:6a:ac:bb:e8:15:9e:22:
c9:42:20:36:c4:aa:a6:16:48:c4:f9:c9:14:7d:7e:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F7:3B:7F:1D:8F:58:A8:FA:AD:F7:EC:39:F0:86:E9:40:7F:E2:2C
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:5e:1f:1e:1c:20:f8:4d:12:72:7c:ee:ae:95:ca:00:99:
e0:14:78:0a:dc:70:10:fe:cf:3a:03:8e:41:cd:c9:3b:06:ab:
fa:8d:6a:f9:92:05:d4:05:88:95:e1:59:e6:45:95:58:00:bf:
c8:5c:5d:6d:e9:b4:91:c3:9b:e1:4c:99:00:23:19:a7:46:bb:
9e:99:1f:34:a0:9f:bd:19:01:1c:da:70:a4:a0:9c:64:cd:3c:
2e:33:34:d5:22:31:72:d6:82:cf:90:58:4e:00:95:ca:30:0c:
3a:c2:3d:1c:1f:81:33:05:48:b0:79:bc:6f:0d:d1:f8:8f:94:
26:0e:f3:87:4a:89:a8:98:09:30:d6:c8:c3:16:55:7c:88:b3:
f8:ca:0b:8b:2b:0d:58:bb:52:e2:d7:51:41:9d:da:e9:87:fa:
08:c5:f7:28:f5:58:7c:97:c8:5b:b2:cb:ea:a3:f9:6d:5b:9b:
c3:f0:77:ae:1a:fe:42:7b:db:4e:71:54:d3:6c:52:0a:c6:d0:
ba:66:96:c0:cd:f9:98:92:20:ce:c9:1a:b1:44:09:7d:7e:3b:
2b:94:12:a7:e1:7b:21:2f:49:37:e9:65:5b:c4:30:e7:0a:09:
a3:83:9f:71:14:cf:fa:06:ae:73:4d:39:40:89:46:ef:80:62:
7b:56:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:11:19 2026 by rpki-client