Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: wsKmlQL5VoSxFyRRZwFedeIG1eML6jPWOSMBXFeBXRM=
Subject key identifier: 24:C8:23:65:F2:79:8A:B7:D2:7D:66:9F:B6:37:11:CF:F0:D9:A5:08
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 01A08B68D2E3AD5975914401B75E0D1652A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 13:01:37 +0000
Manifest this update: Thu 10 Sep 2026 13:01:37 +0000
Manifest next update: Fri 11 Sep 2026 13:01:37 +0000
Files and hashes: 1: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: raDV4qVhJ1m/J6lsLAcjwuq4tsVdw5vFFbJkcbzfi+0=)
2: uLLFp64r_qzwrNEtRWF1A8b4cJ4.roa (hash: idAi5lENeYOmxdgwqoVm14upbbAaO6tEHHR7ePoDLJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:d2:e3:ad:59:75:91:44:01:b7:5e:0d:16:52:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Sep 10 13:01:37 2026 GMT
Not After : Sep 11 13:01:37 2026 GMT
Subject: CN=24c82365f2798ab7d27d669fb63711cff0d9a508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:e0:5e:e8:82:a4:ed:a8:f8:14:45:f2:66:
74:5b:67:0e:40:14:67:b5:96:27:a8:53:78:bc:01:
10:c8:15:38:0e:a2:f2:42:2e:03:ee:78:3c:b4:d6:
66:99:a4:de:0f:fa:e1:d4:8a:18:d6:39:15:e3:ad:
46:4b:f3:98:db:5a:32:b8:2c:a5:69:df:1d:80:70:
ac:cd:3d:d7:84:69:32:ae:e8:79:06:d6:fe:32:33:
84:12:a8:4c:34:b5:60:15:19:ac:af:b6:c5:b8:de:
ce:b0:54:f2:00:ba:dd:b9:c4:9e:99:34:40:6b:93:
05:56:ce:46:cd:84:b7:f8:9d:ba:3d:9e:82:e0:e1:
e9:df:07:43:77:f0:d5:7f:05:ad:14:b1:12:21:2b:
d1:d3:0c:85:ba:ed:7e:a7:0e:51:e2:bd:e8:7a:e4:
cb:14:af:f0:dd:e8:ba:49:a7:c4:5c:dd:39:08:d2:
cb:24:de:ee:3f:6a:63:d6:66:c1:f7:06:00:a7:1f:
b7:76:d0:ac:c9:d8:40:b5:9e:1f:af:7b:28:92:70:
26:31:e2:03:93:bd:47:1b:58:59:0e:40:3a:17:30:
28:d0:7f:20:f5:83:ba:a4:3c:66:93:9c:1c:6f:03:
d1:0f:fd:2a:fa:8e:01:f0:0d:58:ec:5d:ab:84:ed:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:23:65:F2:79:8A:B7:D2:7D:66:9F:B6:37:11:CF:F0:D9:A5:08
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:b2:8a:bc:4b:81:6e:65:ea:77:ad:3f:3a:5d:52:e5:61:
87:0c:b5:64:45:78:6a:8f:a8:18:f7:eb:5f:07:a7:27:24:41:
a3:21:79:96:32:2a:7b:c4:f3:39:31:37:c0:fc:bb:5b:a5:ea:
c2:ee:c1:fe:49:57:08:8f:3c:f7:2e:b8:76:58:c1:a4:91:b0:
1f:fd:d0:07:e7:e2:45:11:e8:45:66:24:b3:fb:f5:69:bc:0e:
77:ec:6a:16:a3:56:74:e0:e9:bd:33:6e:f4:f5:72:d0:45:b9:
8e:81:a3:55:29:7f:f4:74:40:0a:96:ac:89:30:1b:8a:b9:1c:
d3:3c:be:2e:79:6d:41:22:1c:95:80:2a:2a:6e:27:cc:3f:33:
2d:5a:27:59:4f:4d:3b:63:2e:e4:08:a6:04:25:e1:bc:92:ee:
3a:6a:80:66:e6:91:fa:dc:0a:59:47:c4:c7:d1:b4:15:93:53:
1c:bd:49:04:8e:ae:18:fa:dc:84:d3:49:03:5e:0c:66:96:53:
06:5b:05:59:e2:86:00:1c:28:9a:0f:f9:3a:1f:1c:17:3f:af:
3e:01:2c:89:0b:06:3c:e1:d2:c4:dd:5b:c7:53:0b:c8:45:a3:
24:9f:aa:a3:f2:b6:5a:0e:85:69:4f:3e:31:ef:97:bf:29:ea:
99:f1:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:59 2026 by rpki-client