Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: eaQXlxmIYL0YPZnIL3xmRPKaneIjFJyo3UoZedV5QGY=
Subject key identifier: 94:7B:6D:61:4E:5B:8C:B0:18:A0:CB:57:90:EC:2F:44:1B:6F:DF:FC
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019FF9B5BB6FEBCD8CB5046672E5450C960E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 19FB
Signing time: Thu 13 Aug 2026 06:01:04 +0000
Manifest this update: Thu 13 Aug 2026 06:01:04 +0000
Manifest next update: Fri 14 Aug 2026 06:01:04 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: 4YJHyHZWhbwa41SHSavzJZ2A2PybIRcjamdwFKfHFqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b5:bb:6f:eb:cd:8c:b5:04:66:72:e5:45:0c:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Aug 13 06:01:04 2026 GMT
Not After : Aug 14 06:01:04 2026 GMT
Subject: CN=947b6d614e5b8cb018a0cb5790ec2f441b6fdffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:c8:2c:ee:72:7d:ab:32:35:86:1d:d3:13:
c8:d3:0f:a8:9c:26:81:e0:a6:67:86:c9:0c:de:9f:
93:6a:b9:91:fb:19:db:63:67:dd:a6:19:e1:6e:9b:
9b:37:10:b1:89:00:22:c6:b0:9d:aa:3a:d3:7b:fb:
ec:49:3d:35:60:c4:ec:02:a7:df:25:ba:f4:aa:31:
89:b7:7c:fc:3b:90:fc:a9:3b:cf:2e:f2:b2:50:63:
df:72:0d:2b:a2:37:8c:79:04:45:e8:09:3b:38:84:
db:de:0b:6a:db:b6:45:3a:6d:a8:10:8b:9e:bc:78:
89:10:33:8a:bf:5a:5a:43:f8:77:be:2d:e4:bf:54:
84:a8:31:7f:74:2d:7a:05:e9:41:32:4f:c1:a0:22:
a7:dc:8a:5b:79:8f:9b:f1:a9:8e:f8:f8:73:f8:36:
86:11:8d:77:c2:d7:73:7c:78:ac:4f:8d:cd:22:30:
38:25:94:84:36:d7:c9:ff:76:b2:35:db:2f:4e:c3:
f1:75:bc:ef:5b:9a:12:fa:7f:2e:94:4f:67:8f:8c:
db:4b:a2:86:f0:76:00:43:a8:be:0d:29:a2:93:e1:
5c:c6:64:5c:dd:b3:c3:90:2e:aa:85:a1:95:b2:d7:
e9:d3:50:63:22:69:e2:36:98:32:e3:6f:e8:02:cc:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:6D:61:4E:5B:8C:B0:18:A0:CB:57:90:EC:2F:44:1B:6F:DF:FC
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:78:5d:1b:92:ba:d0:0f:6e:87:90:7a:31:cd:4f:6c:7f:d5:
a3:4d:45:1e:d5:dc:31:57:85:81:91:0a:4a:65:8f:62:02:bd:
c6:db:71:17:6c:e9:9f:55:fe:8a:84:ee:00:73:fc:6e:ce:c1:
ef:fe:b2:55:b9:18:10:fc:75:04:ca:92:8c:b4:9f:b4:1c:e8:
c6:00:5f:7d:4c:23:c9:86:d9:a8:36:f7:61:ba:23:64:bf:3a:
d2:96:3e:7c:d6:27:57:fd:25:8e:2b:25:d7:c6:b8:7a:03:63:
17:d9:1b:ea:74:47:3c:1f:e4:b0:24:c3:4a:64:2b:bc:c5:9a:
b8:22:79:9a:05:48:b5:10:9a:5b:ad:bd:17:40:61:40:41:02:
c1:a3:d4:67:05:ec:6b:34:54:be:27:f3:60:c0:55:4f:15:12:
6a:f2:7d:83:29:1b:d5:03:95:72:c0:02:84:cb:88:ab:eb:49:
12:ca:92:8b:90:28:44:97:03:a4:63:12:db:5b:c8:14:e5:d4:
e6:33:da:41:54:9a:ec:c4:9d:37:61:fb:2d:1c:bb:b7:8a:44:
e3:79:44:10:8c:92:e5:76:6c:de:61:8d:a3:4f:af:55:59:13:
de:96:fa:fa:8b:ee:80:be:a1:4b:3a:4f:c2:bd:6d:de:11:27:
71:e8:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:55:19 2026 by rpki-client