Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: jCzF4Q3x3cK1bq4XljlKYJDfRamWmExEdxy0bZUXi8I=
Subject key identifier: 42:7B:01:64:C1:99:AF:1B:1F:8C:F0:1A:2B:DF:01:8E:EB:6D:5C:09
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019DD91DC43A3E0A10DF9BB8882FAC56F4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 18E1
Signing time: Wed 29 Apr 2026 12:01:39 +0000
Manifest this update: Wed 29 Apr 2026 12:01:39 +0000
Manifest next update: Thu 30 Apr 2026 12:01:39 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: rMBFtr3EKuNseGIqaGiQE5rGOmj8If02HayGbfwc7wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1d:c4:3a:3e:0a:10:df:9b:b8:88:2f:ac:56:f4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Apr 29 12:01:39 2026 GMT
Not After : Apr 30 12:01:39 2026 GMT
Subject: CN=427b0164c199af1b1f8cf01a2bdf018eeb6d5c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:26:9d:23:44:d0:99:8a:25:12:37:17:4c:
e8:59:22:eb:50:7d:75:ae:41:4b:ca:0a:be:cf:ab:
04:5e:0c:4d:d2:66:48:da:cc:58:b6:4c:d1:f0:b5:
9a:9a:cf:18:98:71:40:cf:8d:c4:6f:6f:36:8c:75:
13:66:76:67:d2:83:5f:68:ea:57:82:a4:20:69:1e:
d4:e6:c6:c3:17:85:1b:3b:28:31:22:24:cb:8d:c9:
f8:3c:6f:d0:4b:d8:3c:75:cd:8f:2d:f3:b4:51:8e:
5c:34:db:25:1c:2b:49:2d:3b:ca:ff:56:f6:73:91:
10:77:82:9a:6b:2d:28:ac:2f:c2:64:8c:38:e6:98:
59:14:71:08:d9:74:71:10:b5:30:ea:be:13:5e:a0:
e4:c8:53:98:f1:4b:3c:36:07:7a:07:b5:5c:b9:24:
ac:6e:e1:30:c5:a7:3a:dd:0a:74:34:7b:31:8d:d8:
b5:d3:57:46:ac:53:f5:50:02:4e:0e:42:7f:1f:0d:
a0:1b:d6:e6:03:52:fc:83:87:3f:8f:a1:97:75:3b:
2d:ac:a0:1c:75:3f:77:e8:41:e1:3c:c4:90:34:dd:
7c:92:11:36:40:32:9a:89:b4:af:8f:cf:a9:19:0f:
44:9b:1b:ec:6e:5a:29:0a:38:92:2a:95:02:c0:40:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:01:64:C1:99:AF:1B:1F:8C:F0:1A:2B:DF:01:8E:EB:6D:5C:09
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:71:51:00:04:67:26:d7:51:3e:1f:76:ee:6b:37:a7:94:fe:
33:0e:5c:1d:84:65:dc:c9:0d:b5:0a:a3:f3:5a:b2:6e:68:0b:
08:5f:d8:95:02:0c:1c:3e:7d:ac:8d:fc:f7:2d:66:c0:0e:92:
d8:5f:7d:78:89:54:a5:68:c3:5e:49:45:d3:4d:eb:e0:db:f7:
ba:64:c0:af:c7:26:9a:71:21:6c:fb:03:84:15:c9:20:51:b6:
4a:4e:d3:7a:ee:c9:06:94:4b:d8:8f:b3:65:b3:b1:1d:e0:86:
74:0c:f3:a4:e6:26:16:e6:7d:70:6f:1c:9f:16:4b:5a:c7:00:
63:64:5b:1c:d1:46:3b:b0:05:8a:27:ed:fb:6b:b5:73:ff:97:
f3:e8:4a:ac:08:e7:25:a6:fc:56:25:c9:1a:c2:5e:63:44:d0:
de:ef:db:d0:99:ca:90:4f:ef:44:58:05:08:aa:2d:00:1e:97:
48:88:68:9e:30:ad:98:f1:85:24:2d:56:54:29:73:67:71:94:
31:6a:fc:d3:6e:09:37:2a:5b:3e:77:83:a2:99:0f:cf:b1:77:
1d:f3:10:77:e8:9e:62:93:4f:35:71:f0:b6:40:53:c6:62:0d:
2b:52:51:c0:73:a2:aa:96:d0:82:d5:ca:e8:8d:dc:55:09:8d:
a0:fe:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 21:16:44 2026 by rpki-client