Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: eERn+c492k8z9JFjs/abesZIlTHEgwCfwl5HE3MYWXc=
Subject key identifier: A0:23:6B:37:D9:BA:72:CE:C8:F6:7D:17:8D:62:CE:FA:2A:F0:29:B8
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 01A1920CA4ACCA3659B863537DF74033A906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0DD3
Signing time: Sat 31 Oct 2026 13:01:04 +0000
Manifest this update: Sat 31 Oct 2026 13:01:04 +0000
Manifest next update: Sun 01 Nov 2026 13:01:04 +0000
Files and hashes: 1: L4IJqQQf0QdLdsBFi-HlCxlOJ8U.roa (hash: q9X5zVcAK6o2xHWxt+CsUrNsfroyrYFaqF4Uc91Atpk=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: QFbfcTi5OlU4+pcNOqj01iwBgk+BhiG91nVzO4c/mvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:a4:ac:ca:36:59:b8:63:53:7d:f7:40:33:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Oct 31 13:01:04 2026 GMT
Not After : Nov 1 13:01:04 2026 GMT
Subject: CN=a0236b37d9ba72cec8f67d178d62cefa2af029b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:b5:1c:4a:c1:9d:45:e2:18:84:eb:8c:e9:
38:17:13:24:00:c9:ea:9e:38:5b:37:f7:9c:12:a0:
d9:31:e3:ce:a3:6a:a5:d5:6f:2e:ab:41:51:09:7b:
ac:f5:11:e4:54:f7:f0:ba:65:d5:c1:c4:1a:8e:f5:
1a:85:99:7b:ff:53:b5:df:a2:ec:b0:9b:c6:c8:ea:
78:6a:9b:b9:b5:9b:f0:ee:b3:44:35:fc:c4:02:e7:
ec:83:6b:3c:b4:41:87:4e:50:b6:fe:c4:42:57:ca:
57:f2:78:fc:14:cf:b2:76:ee:ab:cd:12:89:5d:80:
66:c6:74:82:7b:c7:b1:e1:49:5d:28:ec:ed:31:68:
e0:dc:0f:be:c1:d3:d4:d1:52:c1:0d:73:b5:9b:12:
58:0f:0f:8c:96:7a:fb:6d:1b:76:79:ea:75:23:d4:
b1:73:c9:cd:1b:19:13:58:81:50:1b:1d:ef:ac:24:
b6:4b:d3:5f:81:a2:e5:a8:6f:31:52:1e:60:e4:a2:
b0:46:94:04:5a:1d:cd:cd:fb:2e:a7:87:68:2b:39:
68:78:c5:63:4b:51:c0:7e:57:89:09:a2:bb:80:5e:
b3:a1:18:05:da:70:29:92:1b:b3:c8:44:72:4d:05:
b7:52:6d:65:39:26:50:ea:81:a7:42:12:42:0e:c4:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:6B:37:D9:BA:72:CE:C8:F6:7D:17:8D:62:CE:FA:2A:F0:29:B8
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:30:29:56:3f:60:29:4d:50:bf:8a:fe:b3:70:7e:5f:ab:80:
c0:8b:86:b1:4a:be:0f:7f:ba:dd:b7:cc:ce:6f:15:9a:0c:9f:
d1:08:53:fd:24:27:2f:91:46:58:56:9d:b1:06:38:6c:e9:da:
22:e4:48:4a:cb:a4:bd:46:13:69:c8:6b:8a:d2:da:95:e1:45:
5c:55:95:37:22:e4:37:90:0d:dd:42:66:ea:8a:ee:51:e0:d1:
a4:14:68:e5:91:71:86:b3:d1:81:c4:90:b5:d5:7d:a4:63:63:
07:a7:2a:1b:00:9a:65:16:83:90:15:55:94:80:69:41:01:52:
b8:1c:2b:52:2e:bf:67:29:d5:7d:c4:46:76:30:f0:bb:73:5e:
58:fe:2a:2d:c4:22:5d:cb:b1:1d:41:bf:61:25:d5:1b:5a:46:
90:9c:8a:f4:9a:f4:03:8c:de:cb:6f:c8:b7:6d:eb:85:9f:2f:
4c:d2:c5:8e:c9:5a:ec:7d:38:ab:c3:ec:cc:f2:05:ad:64:6a:
98:13:29:bd:28:30:ce:31:b7:3e:f0:17:9e:be:bc:42:a9:1d:
89:08:12:81:62:f0:98:43:11:d6:2d:c4:2c:68:08:50:05:df:
92:cc:63:a6:08:12:2b:f0:c5:40:70:94:3f:3d:60:ca:66:d1:
ec:14:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:49:49 2026 by rpki-client