Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: SL0TmTpCi8gNj1mHWjju+DrgdrN6MJEP/7P+iCJaIUg=
Subject key identifier: 46:69:03:21:DA:0A:8E:80:97:F4:17:DF:84:CC:6F:1F:F3:4D:A6:1B
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019F9EF1F3764D05E8C44971DFB5B28D4DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 08B1
Signing time: Sun 26 Jul 2026 15:01:23 +0000
Manifest this update: Sun 26 Jul 2026 15:01:23 +0000
Manifest next update: Mon 27 Jul 2026 15:01:23 +0000
Files and hashes: 1: 3wCTKZJQPis0KQk9Utd2SXEOMQo.roa (hash: tAgV9CKvm/cmiM8EtlRfwVodU066LHap/WgiRXzET/w=)
2: C29RUK-qTDoRIZIVb7crIuPreWM.roa (hash: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=)
3: PAKafREmkHGfeg_qAOjMfzNKk8s.roa (hash: 0HHaXCqodqraRNsfrETju1ZWXLWLaPJS1a1DSuGXS3g=)
4: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: UPBinNxHT+t+meNd3gXXC2Hi6m+sOEwXfBDFXb20EE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:f3:76:4d:05:e8:c4:49:71:df:b5:b2:8d:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jul 26 15:01:23 2026 GMT
Not After : Jul 27 15:01:23 2026 GMT
Subject: CN=46690321da0a8e8097f417df84cc6f1ff34da61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:db:b5:d5:72:cb:51:cf:2c:9d:7a:8c:be:
ef:50:bb:20:cb:eb:4e:af:0d:a2:c7:c6:77:1c:2d:
9e:5c:80:19:65:24:64:fa:ab:b8:d6:88:ff:f4:74:
70:62:5d:02:c4:ab:8b:c0:be:f8:b7:3a:0e:2d:90:
00:e2:18:f1:a2:08:37:ed:ab:66:03:bf:fa:5f:25:
74:86:13:7b:2e:43:cd:0a:09:60:86:f9:91:67:26:
cd:b4:dd:7c:61:be:b8:9a:10:bd:34:dc:7e:63:62:
18:b3:45:25:29:4e:08:88:81:f6:0b:d3:9a:92:40:
39:48:78:83:1b:00:dd:52:35:d2:84:b4:68:94:eb:
8e:bd:0f:a0:23:f9:4f:72:2d:05:a5:07:4a:ac:5a:
91:80:5c:71:9e:e6:30:72:7c:8c:69:88:6a:f0:a5:
a0:47:86:f8:65:95:35:bb:e7:9a:6a:d4:4b:68:6b:
02:8a:7e:52:5a:59:e7:80:34:03:33:c4:ce:c9:fe:
29:94:f0:24:a2:67:79:38:59:39:65:97:d0:04:b4:
87:fd:79:8b:01:8f:8e:b7:e9:91:9f:ce:90:2a:86:
16:4b:4a:aa:86:a0:6b:cb:87:90:b4:ab:ee:39:be:
e4:ea:35:5f:dd:fe:22:ce:62:a4:5f:0c:5f:ce:0d:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:03:21:DA:0A:8E:80:97:F4:17:DF:84:CC:6F:1F:F3:4D:A6:1B
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6b:d8:84:d8:e9:d3:af:d2:a0:ec:65:23:d7:c9:6b:7b:9f:
64:d6:e6:7d:99:d4:59:4f:8c:41:75:f6:26:0a:d7:6d:2a:94:
9b:9c:79:11:d5:de:e8:5e:8e:f7:5f:25:e5:21:fb:8b:37:a9:
c4:79:29:a2:4e:2d:62:0b:ea:10:5f:ab:49:c6:bf:b3:59:f7:
98:66:8d:73:62:86:0f:39:26:41:37:e4:4e:6e:88:61:05:b1:
f2:a8:3b:ed:fb:81:8e:06:f4:4c:03:b5:4c:7e:8b:80:10:52:
3d:60:64:70:54:b3:3f:38:1e:55:78:32:25:c7:5e:d7:37:bd:
95:47:ee:83:23:82:64:ce:56:92:29:45:38:99:9e:68:b9:c1:
e0:cd:26:79:a7:a0:e6:b1:0f:c9:9f:e5:7a:f1:7b:1f:31:46:
30:99:51:e7:e5:77:1e:f1:e0:24:ab:51:d7:da:3c:fc:b5:7d:
64:48:b6:5f:64:1e:51:67:d3:b7:3e:c9:15:bf:31:de:3f:c5:
86:d7:90:b3:55:f5:aa:a5:6d:ca:a7:fc:55:7e:90:11:f8:43:
99:c5:6e:c9:be:b1:74:ea:8a:d9:35:56:e0:c1:65:e1:11:79:
32:6e:1e:e1:b7:68:57:43:05:cd:4f:c7:4b:0b:24:a1:cc:b7:
18:06:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:09:17 2026 by rpki-client