Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: IHPErUoueZLeknPH/kgLA5kA6jyWIHO6tMObqkcTyYk=
Subject key identifier: C1:71:06:07:84:4E:CA:A6:A9:27:77:2B:A8:AB:41:BE:9C:97:23:D7
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01A186AD343057E658310D3C60C47FC289BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 15C6
Signing time: Thu 29 Oct 2026 08:01:00 +0000
Manifest this update: Thu 29 Oct 2026 08:01:00 +0000
Manifest next update: Fri 30 Oct 2026 08:01:00 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: jfC+ZL0c1/sOoM1668wyWqYpSTJ1AFMEILzLvTtfdXQ=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:34:30:57:e6:58:31:0d:3c:60:c4:7f:c2:89:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Oct 29 08:01:00 2026 GMT
Not After : Oct 30 08:01:00 2026 GMT
Subject: CN=c1710607844ecaa6a927772ba8ab41be9c9723d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:5a:36:9b:0a:2d:5a:f6:10:71:f8:ae:ea:
6a:15:3e:94:2d:90:7b:1e:9f:38:82:2a:2c:2f:e2:
be:da:40:1b:9d:3b:92:b3:5c:95:9d:dc:55:93:02:
63:19:e5:e9:10:33:15:d0:9f:8f:06:b2:4b:24:c5:
c4:08:2c:1c:42:0f:43:77:21:b4:9d:28:3a:cc:fb:
87:7a:b6:97:31:c6:82:3d:a4:27:70:27:81:a2:bb:
16:d6:bf:f0:cf:ce:2f:d4:25:85:8f:39:e9:38:81:
42:e4:66:bd:c5:36:6d:ea:c6:e4:04:ef:b3:18:96:
7b:4b:4a:8a:5f:af:40:14:d8:b6:eb:61:9b:01:e6:
cc:5e:f3:09:a0:e7:e1:6e:aa:ce:28:76:ed:12:69:
9d:a1:a7:f8:f6:6b:d6:9c:6c:05:93:90:d3:22:34:
60:f1:89:f8:f4:ea:1a:42:d2:b4:f4:7e:fe:ca:cb:
68:13:2f:b2:81:fd:2c:1f:d9:07:9b:59:4d:92:ff:
69:e8:16:e1:84:d2:f1:af:4f:c0:18:d3:81:34:ed:
9d:c4:b1:a8:5a:33:4d:60:1b:32:09:74:2f:82:16:
f2:39:09:83:22:ce:4f:61:c9:f4:6f:dd:2d:d2:96:
f0:32:fc:0e:b3:78:00:db:4c:c7:83:4a:ef:fa:2c:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:71:06:07:84:4E:CA:A6:A9:27:77:2B:A8:AB:41:BE:9C:97:23:D7
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:b8:73:05:2c:85:03:cf:84:bb:12:5f:84:51:29:a3:3c:
76:65:7c:67:4c:1e:2d:28:b5:c3:12:e7:ef:79:52:7a:fa:ab:
35:63:43:77:0c:9b:9f:63:9e:c9:09:86:34:5d:84:be:89:49:
e7:f5:92:d1:10:78:41:66:ff:84:6f:d0:b6:57:e1:0f:8a:54:
c0:8a:19:44:c8:d0:64:d2:f8:16:43:57:ee:41:e2:05:48:61:
3a:c9:0e:13:e2:8d:ae:a8:a8:a2:f5:2a:4d:a5:87:ce:33:c7:
ef:4d:16:c9:a0:2e:e8:c5:31:74:6d:da:c2:d6:05:79:af:7b:
b0:fd:fe:1b:d8:7e:ad:0e:c2:a8:5e:fb:fa:cd:a5:4e:90:b3:
72:34:c1:67:c8:f0:6b:d8:a5:a7:52:49:43:74:22:00:7b:40:
be:8f:e6:42:ad:d5:ad:89:1d:20:a2:4b:a1:19:94:be:af:d3:
fc:26:bd:b8:5a:d2:12:88:57:2c:29:ba:90:5d:d3:31:1e:cc:
db:16:5f:80:08:ab:4b:c3:a3:33:f0:5c:a6:de:cd:c2:d3:82:
e9:38:ef:d9:f9:b7:ad:ba:ae:6b:25:a4:6c:79:1a:e3:c0:9d:
5b:14:63:f5:9d:31:8a:63:5c:1c:6a:6d:e7:17:2a:9c:6e:e3:
cd:96:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:16:41 2026 by rpki-client