Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: Ng/u1WVMz6rLqoj6oQl5Z+1vlBkM65sntlXEMJjcfT4=
Subject key identifier: 91:C6:61:30:64:60:D1:B9:84:F4:2B:40:11:D7:37:05:16:20:81:31
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019EC89456511E8E9E5F2D06632A38FA1EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 195D
Signing time: Mon 15 Jun 2026 00:00:24 +0000
Manifest this update: Mon 15 Jun 2026 00:00:24 +0000
Manifest next update: Tue 16 Jun 2026 00:00:24 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: Biy68uUDi8bGWnA4Q2oCa/cRTv6XiRCdHbyek3wzQEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:94:56:51:1e:8e:9e:5f:2d:06:63:2a:38:fa:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jun 15 00:00:24 2026 GMT
Not After : Jun 16 00:00:24 2026 GMT
Subject: CN=91c661306460d1b984f42b4011d7370516208131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:77:c3:3a:17:16:57:37:75:06:86:0e:7c:
9e:bf:f3:a2:ff:28:cf:2d:53:27:13:74:ed:2b:13:
b6:5d:58:a5:05:3d:9e:c5:93:79:01:99:ff:76:64:
9e:23:7e:7a:e7:c0:2e:32:4e:f5:d2:0c:08:6c:97:
ab:aa:ad:1b:0f:bd:01:1c:45:9b:52:54:28:a8:b1:
73:f2:cf:73:d2:4a:66:13:6c:73:76:aa:b2:e4:2d:
b1:fe:73:b9:3e:f9:5d:e1:d5:a8:19:50:a4:06:37:
67:75:f8:09:2a:bf:d7:cd:20:80:31:33:37:98:cc:
7c:41:53:b4:d7:0b:7f:7e:c8:72:44:3b:01:10:a9:
24:da:93:ca:dd:c3:30:62:bb:66:2c:2c:85:bf:2d:
b6:5d:d7:0b:9e:cf:51:73:e5:c6:3d:b9:a2:ec:80:
b6:7c:04:9f:09:f3:47:fc:d3:c0:9a:ac:6f:82:8c:
99:bf:97:fc:43:6d:90:0c:d9:b2:70:1c:39:51:55:
15:6f:0b:6f:3a:87:86:3c:a9:b9:ae:8d:6d:44:35:
b2:d1:6c:b3:a5:4a:32:38:8d:e2:62:13:4e:4e:b2:
81:2c:31:96:14:6f:c1:26:b7:22:3a:cb:b5:ed:dd:
76:f0:6c:3d:40:99:01:56:13:e2:a6:ff:14:42:6a:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:61:30:64:60:D1:B9:84:F4:2B:40:11:D7:37:05:16:20:81:31
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:a1:da:6e:4d:86:12:60:e3:2e:06:6d:22:6a:3a:9e:08:
4e:7b:78:79:97:02:28:7b:8a:a0:f7:80:d5:21:03:97:5b:d2:
5e:5e:00:69:06:f3:97:f2:54:8f:50:ba:cb:9f:55:11:f7:42:
13:e8:5a:ca:3e:d0:f3:0c:e3:10:c6:7a:c2:f8:9f:fb:86:99:
b1:81:2b:40:ee:79:42:c8:88:80:4c:f2:dc:a4:7b:0a:33:5e:
85:2b:c1:2e:7d:a3:4b:2d:3a:8c:27:28:0c:6b:02:10:5a:9d:
e5:8b:ea:df:37:f0:61:1a:9a:ac:0d:ba:58:0f:82:7c:a6:71:
65:69:17:a2:63:8f:2f:ca:8d:39:2c:b5:1e:d8:e1:65:34:e4:
9e:10:bf:c4:d4:a2:ff:8f:14:28:82:54:dd:69:2a:e8:bc:7a:
15:7f:5d:41:9c:6d:e2:a2:54:f8:b6:e6:a4:eb:bf:90:ee:1d:
f1:65:dd:62:49:1a:36:1e:a9:7d:cc:2a:01:43:5f:08:06:1d:
22:62:78:93:9b:a1:d1:40:6a:cc:2e:a7:08:c4:1c:cf:e0:5d:
bd:c1:bb:26:9f:38:9c:5b:f3:57:77:22:74:5d:89:4d:88:4a:
6f:ed:17:a8:06:07:f7:75:ea:ca:69:b4:e9:bc:a2:88:bf:4a:
d7:31:6e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7IlFZRHo6eXy0GYyo4+h7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYwNjE1MDAwMDI0WhcNMjYwNjE2MDAwMDI0WjAzMTEwLwYDVQQD
Eyg5MWM2NjEzMDY0NjBkMWI5ODRmNDJiNDAxMWQ3MzcwNTE2MjA4MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeV3wzoXFlc3dQaGDnyev/Oi/yjP
LVMnE3TtKxO2XVilBT2exZN5AZn/dmSeI35658AuMk710gwIbJerqq0bD70BHEWb
UlQoqLFz8s9z0kpmE2xzdqqy5C2x/nO5Pvld4dWoGVCkBjdndfgJKr/XzSCAMTM3
mMx8QVO01wt/fshyRDsBEKkk2pPK3cMwYrtmLCyFvy22XdcLns9Rc+XGPbmi7IC2
fASfCfNH/NPAmqxvgoyZv5f8Q22QDNmycBw5UVUVbwtvOoeGPKm5ro1tRDWy0Wyz
pUoyOI3iYhNOTrKBLDGWFG/BJrciOsu17d128Gw9QJkBVhPipv8UQmovTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHGYTBkYNG5hPQrQBHXNwUWIIExMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP+h2m5N
hhJg4y4GbSJqOp4ITnt4eZcCKHuKoPeA1SEDl1vSXl4AaQbzl/JUj1C6y59VEfdC
E+hayj7Q8wzjEMZ6wvif+4aZsYErQO55QsiIgEzy3KR7CjNehSvBLn2jSy06jCco
DGsCEFqd5Yvq3zfwYRqarA26WA+CfKZxZWkXomOPL8qNOSy1HtjhZTTknhC/xNSi
/48UKIJU3Wkq6Lx6FX9dQZxt4qJU+LbmpOu/kO4d8WXdYkkaNh6pfcwqAUNfCAYd
ImJ4k5uh0UBqzC6nCMQcz+BdvcG7Jp84nFvzV3cidF2JTYhKb+0XqAYH93Xqymm0
6byiiL9K1zFuUw==
-----END CERTIFICATE-----
Generated at Mon Jun 15 03:46:51 2026 by rpki-client