Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: 19MWSHNeLEx3Gd1Fe8VP0DrOQ+dq26CVk+LZ63BmxHQ=
Subject key identifier: BE:DD:00:EC:99:20:CC:49:E4:C3:C2:B5:35:65:BC:1F:CE:B9:46:F9
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01A1889B3370C096F5EF55D1FF793EE5B336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 15C7
Signing time: Thu 29 Oct 2026 17:00:34 +0000
Manifest this update: Thu 29 Oct 2026 17:00:34 +0000
Manifest next update: Fri 30 Oct 2026 17:00:34 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: PSKkqroxcKzHuOuB9PR+nhiQmuXxaWv1Ed3tJLvKZu8=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:33:70:c0:96:f5:ef:55:d1:ff:79:3e:e5:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Oct 29 17:00:34 2026 GMT
Not After : Oct 30 17:00:34 2026 GMT
Subject: CN=bedd00ec9920cc49e4c3c2b53565bc1fceb946f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:5a:e6:c8:8a:1d:24:40:5c:83:7e:5b:79:
d2:f3:b4:b9:58:c3:a9:4f:7d:55:48:af:b9:0e:bf:
52:ef:78:ea:2f:8d:3d:f7:2f:ab:f7:23:d9:03:b6:
4a:81:b4:3c:7f:a4:96:11:8f:66:49:07:1e:46:9a:
4a:18:07:30:07:a1:e4:10:17:d0:4d:24:3e:58:ce:
d4:6d:c4:f5:95:9d:5b:f2:71:ec:08:7b:84:ab:c8:
fd:03:c6:c6:c7:f5:74:c8:ec:40:95:1a:59:cd:a2:
a4:0a:5f:41:20:dc:cd:62:13:d8:69:ee:52:05:2c:
f3:e2:8f:77:4e:18:cc:bc:8d:ca:2b:49:0f:75:83:
ad:22:46:e9:7a:82:81:9e:2a:47:cb:57:11:12:8a:
9c:52:9c:50:b2:6a:01:9d:df:08:0c:b7:7f:d3:ce:
fa:c5:a4:21:fc:2a:41:38:5f:26:d5:aa:e2:97:85:
6f:f0:bf:0c:87:07:67:58:9a:f2:8c:3f:88:eb:eb:
e5:d3:d0:a9:fa:8f:df:f5:9e:6e:d4:c8:88:22:88:
73:4a:b4:6d:26:ff:53:07:0b:d1:85:2e:66:c7:f1:
30:2b:1c:3a:e9:99:f0:87:37:53:63:13:fb:32:be:
80:cb:07:c7:8a:59:af:ba:26:0c:94:42:87:cb:1e:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DD:00:EC:99:20:CC:49:E4:C3:C2:B5:35:65:BC:1F:CE:B9:46:F9
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:b8:7e:ee:42:d2:8e:09:3d:11:77:46:b0:fb:eb:ce:dc:
7f:bb:3d:11:35:37:7a:c2:8c:4e:5b:91:cb:02:1e:a4:81:e3:
40:d5:15:93:86:25:e7:dd:f3:d3:de:19:18:82:f2:86:a2:83:
45:25:32:39:86:51:62:69:db:63:87:89:91:ac:17:79:a7:86:
5b:00:a5:8f:fa:73:d7:6c:7f:25:59:b0:c4:f4:8f:e0:21:99:
be:43:ca:33:5b:d1:a1:c8:33:41:90:82:dc:68:29:76:64:32:
f3:ca:e0:bf:cd:b4:2a:b4:fb:5f:b7:77:31:f1:fd:67:eb:65:
e4:ce:81:cc:f1:db:71:d6:e1:0f:f1:0a:04:0a:28:c8:32:1f:
6e:0c:0e:14:ae:83:11:0d:05:28:57:41:6d:82:7b:89:72:7f:
4d:a6:38:ac:58:c9:47:c8:4f:36:93:bd:bc:20:93:9d:f1:f2:
a5:f3:1f:e7:f1:ae:b8:64:41:32:74:be:be:13:99:b2:19:fc:
42:45:7b:c7:65:fb:5e:11:0e:cc:86:7e:37:db:b2:99:08:ee:
cb:03:48:5c:14:9d:26:b2:d5:d2:b0:f7:b3:fe:87:17:e2:0e:
88:59:cb:73:15:fa:44:2e:95:c6:1a:6e:07:4b:fb:3b:3b:e9:
86:0e:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:38 2026 by rpki-client