Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: IToUOph3u3pYzlEj3wsIPxzA4BSdi20+5tz/coj3LMI=
Subject key identifier: 18:1B:C9:2E:E2:24:60:0D:D7:FC:61:26:DD:30:50:E4:FA:9A:F4:E3
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019CE3DA1A8026D546A19B501EC78331CD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 0747
Signing time: Thu 12 Mar 2026 21:00:47 +0000
Manifest this update: Thu 12 Mar 2026 21:00:47 +0000
Manifest next update: Fri 13 Mar 2026 21:00:47 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: ymS1LsoCSL9FmabloNIvqxQ330prLdj4TRfydc8/k/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:1a:80:26:d5:46:a1:9b:50:1e:c7:83:31:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Mar 12 21:00:47 2026 GMT
Not After : Mar 13 21:00:47 2026 GMT
Subject: CN=181bc92ee224600dd7fc6126dd3050e4fa9af4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:2a:68:9c:72:59:41:0f:35:ca:60:c7:85:
61:f6:ea:66:b1:08:52:e1:bc:e3:aa:18:49:72:e3:
c7:27:f0:3e:a4:21:f8:71:93:3c:6b:d5:f8:db:5d:
60:9e:db:1b:5c:26:e3:09:30:3f:09:45:25:83:d6:
41:69:ca:5f:05:06:50:65:c1:59:52:c0:fd:78:a9:
4c:75:74:b2:65:10:05:36:48:0e:dd:dc:9b:21:39:
77:a7:cc:d8:15:64:00:ce:5c:7d:7d:a2:25:54:f2:
4b:dd:21:5d:f8:b3:02:a1:b7:75:12:bd:a1:03:7b:
32:a7:64:e3:69:dd:c5:52:78:91:95:75:00:00:6f:
fb:1a:41:07:d3:68:d1:96:b5:4e:2d:4b:77:f7:93:
52:f7:da:eb:df:70:2c:f8:9d:9d:83:4a:cd:2b:5b:
f5:9c:e6:71:ef:02:a2:f5:e3:32:81:da:50:9a:cf:
f3:21:9d:a4:ba:04:4b:63:bb:03:93:ed:3e:16:f9:
ba:12:67:c7:24:0a:08:55:9b:11:86:9a:30:f1:d5:
5d:e4:32:90:9d:4f:b4:a7:75:95:f2:22:74:a5:97:
96:55:7e:ed:d3:0f:ed:fc:71:58:4f:f6:33:7d:be:
6d:2b:01:92:69:d9:99:fa:55:63:74:16:e1:5e:7b:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:C9:2E:E2:24:60:0D:D7:FC:61:26:DD:30:50:E4:FA:9A:F4:E3
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:f7:91:54:65:3f:2f:a1:16:72:a4:4e:d5:20:89:3a:b2:
de:57:c5:fd:f0:1a:c2:d1:ff:cf:8f:ee:ae:d4:58:3f:e4:b6:
68:01:1d:41:29:4a:b5:27:87:bf:b3:24:be:6c:74:b0:39:e0:
37:26:22:84:a3:44:3d:5e:d0:17:94:52:aa:a1:11:ba:df:12:
a6:b3:99:85:65:eb:60:06:52:99:94:ce:78:01:29:81:7c:58:
99:78:30:62:9c:4b:e0:dc:05:9c:c4:5a:e5:e5:8a:2e:26:1e:
08:55:60:ea:7c:9b:d5:eb:02:23:f0:a4:04:9c:57:0f:54:89:
30:51:24:3c:cc:c6:e2:9e:d6:07:e7:c1:a1:cc:f2:45:70:c3:
50:2f:2b:f3:c1:b3:ef:2f:fb:5a:fe:92:9c:f6:f2:36:68:b9:
69:35:87:d9:83:f7:29:da:d0:48:31:c0:7a:ab:2c:c0:70:6b:
c3:15:21:42:5f:ef:1c:68:9e:96:c0:a4:c3:dd:4f:39:d8:4f:
37:cf:50:c5:28:3e:df:4c:f7:48:9c:7c:06:74:fd:35:8a:9b:
90:41:53:98:02:86:68:e6:1d:57:9d:a2:09:de:7c:50:3a:6c:
59:ae:12:e7:79:3c:7f:63:d4:b1:72:6b:dd:42:81:0f:e7:bc:
31:54:b9:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2hqAJtVGoZtQHseDMc0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjYwMzEyMjEwMDQ3WhcNMjYwMzEzMjEwMDQ3WjAzMTEwLwYDVQQD
EygxODFiYzkyZWUyMjQ2MDBkZDdmYzYxMjZkZDMwNTBlNGZhOWFmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCoqaJxyWUEPNcpgx4Vh9upmsQhS
4bzjqhhJcuPHJ/A+pCH4cZM8a9X4211gntsbXCbjCTA/CUUlg9ZBacpfBQZQZcFZ
UsD9eKlMdXSyZRAFNkgO3dybITl3p8zYFWQAzlx9faIlVPJL3SFd+LMCobd1Er2h
A3syp2Tjad3FUniRlXUAAG/7GkEH02jRlrVOLUt395NS99rr33As+J2dg0rNK1v1
nOZx7wKi9eMygdpQms/zIZ2kugRLY7sDk+0+Fvm6EmfHJAoIVZsRhpow8dVd5DKQ
nU+0p3WV8iJ0pZeWVX7t0w/t/HFYT/Yzfb5tKwGSadmZ+lVjdBbhXnuubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgbyS7iJGAN1/xhJt0wUOT6mvTjMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8r3kVRl
Py+hFnKkTtUgiTqy3lfF/fAawtH/z4/urtRYP+S2aAEdQSlKtSeHv7Mkvmx0sDng
NyYihKNEPV7QF5RSqqERut8SprOZhWXrYAZSmZTOeAEpgXxYmXgwYpxL4NwFnMRa
5eWKLiYeCFVg6nyb1esCI/CkBJxXD1SJMFEkPMzG4p7WB+fBoczyRXDDUC8r88Gz
7y/7Wv6SnPbyNmi5aTWH2YP3KdrQSDHAeqsswHBrwxUhQl/vHGielsCkw91POdhP
N89QxSg+30z3SJx8BnT9NYqbkEFTmAKGaOYdV52iCd58UDpsWa4S53k8f2PUsXJr
3UKBD+e8MVS5ew==
-----END CERTIFICATE-----
Generated at Thu Mar 12 23:56:22 2026 by rpki-client