Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: mqhsBf8BO2wyOUVhSzh33SPVoizu7CYcylcckdyf5vU=
Subject key identifier: 4D:4E:D7:61:26:B7:C3:FC:C5:42:34:72:59:87:A1:7D:FC:BD:F4:92
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019D371BAAD48C591AF33B711C953A6EC933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0B88
Signing time: Sun 29 Mar 2026 01:00:53 +0000
Manifest this update: Sun 29 Mar 2026 01:00:53 +0000
Manifest next update: Mon 30 Mar 2026 01:00:53 +0000
Files and hashes: 1: 65XPpJ8B0UDLjo_rBH8QftmyqVA.roa (hash: /nCe4ab35wvdZ2ZW1RceiPXC/RgtUn+BuxAA3UpZf4o=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: ZI3jzL1nSO21dRGuHQSPIiib3d0hMKZfmrk5zA7iToM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:aa:d4:8c:59:1a:f3:3b:71:1c:95:3a:6e:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Mar 29 01:00:53 2026 GMT
Not After : Mar 30 01:00:53 2026 GMT
Subject: CN=4d4ed76126b7c3fcc54234725987a17dfcbdf492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:93:83:59:f0:85:cf:7b:50:c5:5a:c9:57:
3d:5a:20:cb:81:85:e4:b3:e5:e9:e7:a6:b0:0f:78:
39:dd:8f:f7:b5:9b:95:31:83:a6:14:f5:c6:a0:96:
bd:0c:56:4d:15:8c:b4:94:39:96:31:a1:fc:93:57:
6d:6e:6c:74:38:d3:12:95:91:62:a2:d4:03:11:6d:
aa:92:35:94:c8:9d:5d:38:7b:17:4d:b0:8b:8b:f6:
a3:c6:85:84:d6:f5:49:c0:f2:16:14:33:82:84:ac:
ab:b3:40:0c:17:b0:02:31:f1:c4:3b:8a:67:16:ed:
54:38:41:b3:e1:72:70:5f:8a:ac:8b:a1:d4:ea:4f:
45:75:72:3d:c2:be:cb:f3:b0:7d:ec:48:93:8d:18:
a2:df:d2:05:7f:6c:07:f3:78:0a:02:8d:63:f7:53:
d7:46:94:de:87:14:dd:8a:e8:1c:37:73:b1:41:0d:
43:d6:a6:d5:e8:83:9f:ac:f2:1f:04:13:aa:7b:3f:
e5:21:31:e8:e2:f6:aa:10:c1:d6:6a:2d:96:7a:8a:
66:52:9e:13:82:54:3d:d1:b0:fd:2a:18:f4:43:c2:
ee:6d:a4:cd:09:05:05:63:35:23:98:9a:ab:49:b3:
98:e3:ee:6c:48:f3:a2:5c:ad:6c:11:67:47:e2:ad:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:D7:61:26:B7:C3:FC:C5:42:34:72:59:87:A1:7D:FC:BD:F4:92
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:71:02:18:c3:40:f8:90:98:90:ae:22:c7:ad:e1:91:ab:
74:28:0c:46:41:ec:68:99:43:b9:43:dd:79:90:9e:b6:9b:44:
4e:c3:25:1d:6a:e9:df:d1:0f:09:77:fa:b3:66:d4:6d:ea:8d:
a9:7c:f3:f9:db:a9:8b:d6:3a:43:6f:cc:30:3d:83:e7:43:9e:
d8:b5:46:b2:ff:9a:7e:05:cb:83:dc:ce:3d:bd:88:f0:e7:00:
71:12:81:59:1b:46:5a:9b:34:22:24:67:c5:80:16:00:33:bf:
00:65:49:af:34:60:21:c9:a0:01:c1:eb:0e:7f:7d:3c:08:6f:
d2:27:f3:1e:b0:06:36:0b:af:07:3a:77:da:e1:5f:15:9c:cb:
ba:11:38:bb:52:e1:5f:d6:2f:76:6a:dc:46:8d:ff:5f:1e:67:
c1:26:01:c9:71:65:9c:c7:d6:4b:ef:e0:9a:38:54:ed:1e:51:
b2:c2:c1:1a:6f:49:5d:b5:29:ed:68:81:00:c8:3d:0a:33:ac:
ae:56:f3:b0:33:ee:c6:42:45:c0:9a:c2:a8:53:fb:19:25:f8:
e1:15:b0:43:fe:86:6c:8d:57:07:d2:d7:dd:6a:b1:3d:49:bf:
6e:08:0a:18:16:75:70:66:72:c3:7f:d2:21:5f:f6:51:86:31:
b9:c9:a2:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G6rUjFka8ztxHJU6bskzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh
MGZjOGMwHhcNMjYwMzI5MDEwMDUzWhcNMjYwMzMwMDEwMDUzWjAzMTEwLwYDVQQD
Eyg0ZDRlZDc2MTI2YjdjM2ZjYzU0MjM0NzI1OTg3YTE3ZGZjYmRmNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGGTg1nwhc97UMVayVc9WiDLgYXk
s+Xp56awD3g53Y/3tZuVMYOmFPXGoJa9DFZNFYy0lDmWMaH8k1dtbmx0ONMSlZFi
otQDEW2qkjWUyJ1dOHsXTbCLi/ajxoWE1vVJwPIWFDOChKyrs0AMF7ACMfHEO4pn
Fu1UOEGz4XJwX4qsi6HU6k9FdXI9wr7L87B97EiTjRii39IFf2wH83gKAo1j91PX
RpTehxTdiugcN3OxQQ1D1qbV6IOfrPIfBBOqez/lITHo4vaqEMHWai2WeopmUp4T
glQ90bD9Khj0Q8LubaTNCQUFYzUjmJqrSbOY4+5sSPOiXK1sEWdH4q3sUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1O12Emt8P8xUI0clmHoX38vfSSMB8GA1UdIwQY
MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt
ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh
LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1ZxAhjD
QPiQmJCuIset4ZGrdCgMRkHsaJlDuUPdeZCetptETsMlHWrp39EPCXf6s2bUbeqN
qXzz+dupi9Y6Q2/MMD2D50Oe2LVGsv+afgXLg9zOPb2I8OcAcRKBWRtGWps0IiRn
xYAWADO/AGVJrzRgIcmgAcHrDn99PAhv0ifzHrAGNguvBzp32uFfFZzLuhE4u1Lh
X9YvdmrcRo3/Xx5nwSYByXFlnMfWS+/gmjhU7R5RssLBGm9JXbUp7WiBAMg9CjOs
rlbzsDPuxkJFwJrCqFP7GSX44RWwQ/6GbI1XB9LX3WqxPUm/bggKGBZ1cGZyw3/S
IV/2UYYxucmijA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client