Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: eS6mJNOXYHuyHs3487/dqqxUJHAhTy+N2vC5oRJD9ek=
Subject key identifier: 58:F4:7B:C9:7C:B0:4E:C8:6D:CD:6D:BA:8F:03:64:F2:25:6B:A7:88
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019CF15FA66644ABB9A9635252963C58C2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1869
Signing time: Sun 15 Mar 2026 12:01:43 +0000
Manifest this update: Sun 15 Mar 2026 12:01:43 +0000
Manifest next update: Mon 16 Mar 2026 12:01:43 +0000
Files and hashes: 1: WUA-8043AhVJq3-rCBC1_Z6ym2Q.roa (hash: uFmweGUa9mThJ5dM41jk0vxxDTuGE59oPYV9R1R2bgQ=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: b0fqtSR7XlBQamXwCGIOrOOScR3LEKqVDNRutH+gWlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:5f:a6:66:44:ab:b9:a9:63:52:52:96:3c:58:c2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Mar 15 12:01:43 2026 GMT
Not After : Mar 16 12:01:43 2026 GMT
Subject: CN=58f47bc97cb04ec86dcd6dba8f0364f2256ba788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:ed:d0:98:7e:21:6e:76:93:47:4a:30:ba:
75:89:d9:19:cd:3a:f3:e0:58:f6:49:70:c1:55:2d:
5e:76:1b:54:ce:41:8c:3d:54:42:55:c9:66:b2:cf:
61:a8:15:4a:fc:da:ba:4f:82:7a:93:ca:e2:30:e1:
5b:24:11:27:06:e8:a4:bd:5b:54:d9:b6:45:78:46:
80:f9:8f:1f:14:ff:bf:8c:60:43:af:e1:39:96:18:
f4:44:bc:9f:ca:73:da:7b:89:01:1f:75:7c:a5:f5:
bf:3f:66:a1:ee:ca:43:6c:56:ba:cc:67:ba:8f:c1:
30:9a:19:23:1c:43:91:07:97:41:7d:3b:f9:af:60:
a1:bd:b2:4f:fb:95:83:a8:ab:c0:f1:09:55:5f:74:
aa:28:28:cd:64:11:46:1c:22:a7:d1:a0:58:e2:7d:
d3:dc:41:22:b8:7e:74:b7:1b:85:29:83:d4:b6:a5:
f7:e5:13:f9:79:29:ab:a6:58:f1:a4:3c:df:8b:bb:
30:76:5b:30:e1:60:62:4b:47:90:fd:b8:1a:dc:f1:
46:22:b3:90:e3:ed:51:28:cb:e9:3b:6a:b5:61:de:
35:66:a6:42:d8:b6:05:e5:62:e8:13:27:88:f1:f7:
39:76:95:53:ea:f0:42:93:a9:62:1f:98:bb:cc:47:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:7B:C9:7C:B0:4E:C8:6D:CD:6D:BA:8F:03:64:F2:25:6B:A7:88
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f6:f9:52:7a:c3:da:da:eb:6d:7d:34:0c:aa:ec:ea:34:9a:
0e:7b:9f:13:35:63:6c:35:8e:e8:0f:29:a0:3b:ec:90:b0:85:
88:8d:8d:a0:e5:a0:70:61:07:79:77:fa:01:66:75:ca:61:7a:
42:4b:c3:76:56:b1:ca:e9:01:c7:9a:c6:f6:6d:54:25:82:68:
78:59:7a:49:1d:a2:4f:c6:af:9f:71:75:fc:df:1f:cb:8d:93:
60:ba:c0:72:b5:b6:4f:70:cf:88:96:fe:44:b9:0f:b1:b1:d7:
50:fb:1a:9e:13:d8:3d:af:eb:bd:6d:b6:b0:a2:06:12:72:72:
09:f8:3b:63:81:c4:e9:76:b7:cf:16:5f:2d:56:c1:72:40:53:
d4:6b:08:95:f5:e3:c2:3c:41:b6:d2:8d:1d:87:c8:47:b6:b2:
d3:95:86:30:e2:78:37:ad:e7:82:c8:b7:51:71:12:4f:b2:fb:
02:17:b4:31:df:0d:3c:34:27:5c:79:21:76:74:f2:b8:9d:6e:
1a:00:6c:c2:98:09:e2:87:96:53:d4:a4:43:5f:51:3a:76:21:
95:75:c1:b9:51:b3:7f:a4:2a:55:6e:1d:a2:35:61:d4:14:8d:
d5:d4:19:d5:a6:e6:51:e1:25:e0:f1:81:81:35:20:26:1f:74:
f2:6e:13:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzxX6ZmRKu5qWNSUpY8WMLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGNmNTEyNDdhYjU3ZjUyNmYzODA3MjU5YTc4ZDJiMDI1
OTA2MDMwHhcNMjYwMzE1MTIwMTQzWhcNMjYwMzE2MTIwMTQzWjAzMTEwLwYDVQQD
Eyg1OGY0N2JjOTdjYjA0ZWM4NmRjZDZkYmE4ZjAzNjRmMjI1NmJhNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WLt0Jh+IW52k0dKMLp1idkZzTrz
4Fj2SXDBVS1edhtUzkGMPVRCVclmss9hqBVK/Nq6T4J6k8riMOFbJBEnBuikvVtU
2bZFeEaA+Y8fFP+/jGBDr+E5lhj0RLyfynPae4kBH3V8pfW/P2ah7spDbFa6zGe6
j8EwmhkjHEORB5dBfTv5r2ChvbJP+5WDqKvA8QlVX3SqKCjNZBFGHCKn0aBY4n3T
3EEiuH50txuFKYPUtqX35RP5eSmrpljxpDzfi7swdlsw4WBiS0eQ/bga3PFGIrOQ
4+1RKMvpO2q1Yd41ZqZC2LYF5WLoEyeI8fc5dpVT6vBCk6liH5i7zEcuPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj0e8l8sE7Ibc1tuo8DZPIla6eIMB8GA1UdIwQY
MBaAFJ5M9RJHq1f1JvOAclmnjSsCWQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMt
M2NmMzA2ODA3YTdlLzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNjc2OGYtZDM5NS00NjgxLWEzZjMtM2NmMzA2ODA3YTdl
LzEvbmt6MUVrZXJWX1VtODRCeVdhZU5Ld0paQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/b5UnrD
2trrbX00DKrs6jSaDnufEzVjbDWO6A8poDvskLCFiI2NoOWgcGEHeXf6AWZ1ymF6
QkvDdlaxyukBx5rG9m1UJYJoeFl6SR2iT8avn3F1/N8fy42TYLrAcrW2T3DPiJb+
RLkPsbHXUPsanhPYPa/rvW22sKIGEnJyCfg7Y4HE6Xa3zxZfLVbBckBT1GsIlfXj
wjxBttKNHYfIR7ay05WGMOJ4N63ngsi3UXEST7L7Ahe0Md8NPDQnXHkhdnTyuJ1u
GgBswpgJ4oeWU9SkQ19ROnYhlXXBuVGzf6QqVW4dojVh1BSN1dQZ1abmUeEl4PGB
gTUgJh908m4TSg==
-----END CERTIFICATE-----
Generated at Sun Mar 15 13:52:51 2026 by rpki-client