Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: 98EzIaORgIsxpfcEZgycz91kTLyg4Y0rSZaJ8EWpUaQ=
Subject key identifier: 8B:C4:30:37:97:18:DF:AE:39:3C:5F:BC:DF:0F:DA:23:F7:4F:1F:51
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019DCB9876AD3DF4A2CAA0FD43853D55CC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 07BF
Signing time: Sun 26 Apr 2026 21:00:59 +0000
Manifest this update: Sun 26 Apr 2026 21:00:59 +0000
Manifest next update: Mon 27 Apr 2026 21:00:59 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: Zatdlvy/zGRbFuwwhrqBGPkYDWQW2vTjU0CMdMrUFFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:98:76:ad:3d:f4:a2:ca:a0:fd:43:85:3d:55:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Apr 26 21:00:59 2026 GMT
Not After : Apr 27 21:00:59 2026 GMT
Subject: CN=8bc430379718dfae393c5fbcdf0fda23f74f1f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:72:3f:13:b6:f1:bd:df:d1:f4:cc:24:55:
dd:4d:36:89:ff:f3:68:8a:31:c0:14:cf:d2:dc:2a:
e0:91:d7:a5:e4:79:63:f5:75:72:ee:02:31:e2:fa:
80:7b:0c:01:08:ff:83:17:a0:59:9f:89:cc:4c:c2:
82:66:c1:4a:eb:25:82:4c:09:76:6d:14:07:e4:28:
d2:7b:26:04:dc:f3:03:0d:cb:97:d7:33:b7:6e:4e:
a4:f8:6f:63:2d:e3:14:6b:03:f5:aa:e8:eb:8d:1f:
66:59:81:fc:1a:63:0b:78:6b:53:8d:4c:ed:d9:ef:
98:29:71:b1:32:23:0e:57:f7:42:c2:7e:6f:21:7a:
66:af:08:29:18:db:96:80:fc:ac:0e:39:43:d1:b8:
39:e0:53:9e:45:7a:0b:1e:71:cd:c5:ee:ef:c0:a4:
a9:2c:68:92:de:31:8a:e1:0b:4c:08:c8:67:c2:a1:
4a:61:21:c5:47:6b:9a:fd:b5:83:28:fc:73:9a:1f:
92:61:28:73:7e:6d:f6:6f:8f:08:98:a3:a7:59:5f:
ef:b0:92:40:6b:13:54:cd:d7:91:d0:85:20:73:d7:
50:cc:a9:56:65:18:14:32:4c:bb:47:ee:5f:10:17:
8b:96:0c:6d:66:4d:79:87:41:6f:48:5f:ec:c8:74:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C4:30:37:97:18:DF:AE:39:3C:5F:BC:DF:0F:DA:23:F7:4F:1F:51
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bd:8c:b4:da:e8:00:58:9a:8a:24:43:ae:a9:55:f3:7a:81:
7f:71:3b:29:10:1e:33:d7:81:94:e7:fc:4e:09:a9:f2:c4:0f:
8e:e3:3e:6e:83:db:ca:04:08:25:18:53:f7:18:6e:a7:e4:24:
18:d2:a3:74:7c:cb:e4:01:3b:36:71:47:ea:0b:76:68:a9:d3:
29:7d:c9:cb:4e:1c:b4:33:35:f1:83:1a:4d:8a:6b:a4:50:4f:
ba:0c:f5:27:22:16:2a:af:74:99:86:63:ec:72:de:26:e9:3d:
a7:97:70:49:96:6a:38:37:08:d3:73:de:a3:51:55:74:e0:92:
28:a2:a5:af:0d:65:ef:81:47:2c:32:7e:45:6c:92:c0:f6:b9:
7f:4e:db:0b:d6:55:db:22:6d:1d:35:44:6f:30:2c:bc:e8:10:
7d:a9:c6:84:92:4f:0c:a7:b6:5a:cf:f3:16:5e:32:90:ed:f7:
f6:33:f4:53:bf:40:17:10:a1:a2:44:a7:b7:9a:66:93:51:a1:
43:e2:a4:92:2c:65:9a:a9:77:69:99:aa:17:9b:b0:38:f8:49:
7f:93:2d:a7:d8:2b:68:e3:74:c4:42:3a:ed:7d:95:28:30:57:
84:55:cb:81:a1:7b:e7:cc:13:93:35:c2:c5:09:75:b1:51:92:
03:92:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:25:27 2026 by rpki-client