Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 5uQ5YzTIwO+pPXlkTUq6x6hsSTxfKRI10P4ZtD2Avms=
Subject key identifier: 31:10:37:60:66:6E:8E:69:6E:7D:BE:B9:B6:35:1D:B6:2D:25:1A:A3
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019F8EA2E42ABF1D8F576C2FD2ED100719C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 11:01:07 +0000
Manifest this update: Thu 23 Jul 2026 11:01:07 +0000
Manifest next update: Fri 24 Jul 2026 11:01:07 +0000
Files and hashes: 1: BSkYqkwzQD5kV2G9GWrA_h01s2Y.asa (hash: Vh7lrvSAUjPIHB6bGQC1IFBTrjCNtjxlb9V3hEBQfKM=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: Yg/noqisq0wGwrx8xaz1kJxxu0O2e+kXJMlMLaOIcG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e4:2a:bf:1d:8f:57:6c:2f:d2:ed:10:07:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Jul 23 11:01:07 2026 GMT
Not After : Jul 24 11:01:07 2026 GMT
Subject: CN=31103760666e8e696e7dbeb9b6351db62d251aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:d9:93:24:13:9f:f0:94:28:7c:5b:d5:61:
57:8d:8c:9e:cb:b6:ec:ed:4a:cb:ed:6e:fe:22:57:
c6:34:92:b9:a4:ae:70:32:44:ed:62:91:c1:d4:d0:
1f:fc:f7:0b:68:bd:fc:32:52:b1:ea:02:55:1a:a6:
63:ae:df:9d:a4:94:b2:cb:5b:00:33:37:65:6d:5f:
70:55:60:88:ee:c8:74:c9:91:50:3b:47:46:32:48:
25:c0:07:36:31:90:27:b5:9d:95:51:97:e6:a4:27:
71:aa:36:35:d9:19:d6:d4:6e:57:00:71:1a:6f:bb:
50:dd:d1:95:9d:ba:7f:d6:07:f2:1e:65:ed:07:70:
f5:38:9a:3a:2f:07:54:89:2d:99:03:e2:0d:5c:3b:
74:c3:36:a2:a3:62:0c:8f:9d:ac:cd:90:c5:52:d1:
60:ac:a0:25:fa:b9:3b:c0:05:71:45:d2:2e:9b:eb:
d5:e4:8c:38:ff:3a:22:43:ef:eb:da:bc:c0:a7:20:
0a:a1:f6:c7:48:06:99:ef:6f:9c:99:cc:b1:d8:7a:
59:12:46:a1:a3:61:67:bf:59:35:8a:25:c3:b7:9a:
e2:bd:a4:ba:64:17:fb:5f:c9:6e:1b:04:28:21:1b:
52:b3:e4:80:14:8c:35:24:a9:fd:e9:c8:c0:6c:8c:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:37:60:66:6E:8E:69:6E:7D:BE:B9:B6:35:1D:B6:2D:25:1A:A3
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ad:fe:de:6c:91:2a:3c:f6:bf:d7:60:95:aa:f3:7d:64:a7:
80:2e:7f:67:2c:e3:9d:ee:e3:a1:cd:dc:b6:3c:12:01:10:49:
6e:d4:7d:a1:87:c5:5a:51:81:68:61:8e:39:3d:0b:4a:e1:c8:
5a:3e:70:88:69:71:ed:94:58:0e:bf:f8:6c:b6:69:a5:a0:8f:
3a:7d:f3:27:57:ba:f7:19:ef:25:77:57:3c:34:36:d9:1b:91:
9b:06:87:07:1d:63:9f:9b:d2:d8:7e:6f:7e:96:44:11:1f:30:
95:fd:b4:1d:b1:df:ac:eb:ec:f3:8e:88:7a:94:34:26:be:12:
a3:40:f8:28:05:85:50:50:fe:39:51:2b:45:ae:c7:c2:9a:ce:
48:dd:0f:90:fe:e1:cf:e0:f3:d4:ce:74:b4:bc:01:ec:0e:d5:
a2:12:af:1d:cc:a6:eb:44:a5:03:9e:e7:c8:02:4f:fa:5c:aa:
b5:01:6f:a9:72:cd:0b:cc:49:a0:c2:e9:5c:dc:ce:eb:33:cf:
10:81:fa:af:a8:70:bd:de:58:cd:67:da:26:bc:1a:59:5c:dd:
5c:30:aa:b1:fe:13:4e:85:30:a3:5b:e6:e2:a9:81:84:42:3a:
fe:75:72:cf:f0:5d:58:0e:65:ba:a3:f4:c9:d7:2e:d1:f2:a0:
16:e3:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:53 2026 by rpki-client