Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: 2+Oq8M+2pc9stMYXpaHF0tVkazCq3/wTEs0sY/8JrEs=
Subject key identifier: 0F:4F:B5:A0:6E:12:18:D7:CA:CC:39:34:63:5F:BD:69:C3:E7:E2:07
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 01A08D8DE260FAB51B9E1DC2DDFE5D3C4159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1545
Signing time: Thu 10 Sep 2026 23:01:20 +0000
Manifest this update: Thu 10 Sep 2026 23:01:20 +0000
Manifest next update: Fri 11 Sep 2026 23:01:20 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: u0Wj15a5ePLr519HqiHiM/CdYhDjTPNDA+N+Y0xEoH8=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:e2:60:fa:b5:1b:9e:1d:c2:dd:fe:5d:3c:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Sep 10 23:01:20 2026 GMT
Not After : Sep 11 23:01:20 2026 GMT
Subject: CN=0f4fb5a06e1218d7cacc3934635fbd69c3e7e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:93:6a:be:32:f5:34:a4:46:3f:93:69:94:
4d:e5:ce:13:d1:8e:76:a2:90:9e:2a:29:b7:60:66:
ab:4a:c2:59:4c:32:99:a9:90:56:f8:4b:a6:68:5f:
ed:ee:f7:7e:15:2d:21:83:4b:ed:ee:1b:7c:99:aa:
8b:ae:16:8b:9c:98:f8:05:84:9d:8c:16:ae:2e:8e:
ae:6b:06:9f:1b:02:45:a8:f8:ac:dd:4b:3c:5f:f9:
4b:05:e7:7a:5a:f9:50:23:8a:30:50:e1:e1:ef:8d:
c6:7c:f1:5a:5f:25:45:9c:8a:fc:8c:14:47:9a:3c:
79:17:bc:8f:6e:75:4f:e2:cb:c6:f7:22:da:0b:87:
dd:ff:8b:66:c7:80:d0:54:92:07:fc:02:e0:b9:5a:
4c:1a:86:62:9f:b0:06:49:56:ff:ef:df:3d:65:88:
66:29:11:c1:f9:ee:b2:0e:b4:dd:fa:4e:73:87:fc:
51:b8:fc:dc:c1:9f:97:94:58:70:7b:5a:dd:a4:20:
b7:20:93:61:33:e7:94:a7:3b:39:fc:fc:e0:71:26:
c6:28:1f:56:36:33:12:54:5a:20:4c:ed:d0:04:9f:
0f:2d:ce:58:08:22:52:63:2d:2e:6e:33:74:66:0e:
39:a7:73:f5:2a:6d:e5:42:69:4d:86:fe:a2:68:3a:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:B5:A0:6E:12:18:D7:CA:CC:39:34:63:5F:BD:69:C3:E7:E2:07
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5f:1f:b0:cd:fe:19:fa:da:00:f2:de:20:75:32:5f:d3:dd:
d7:6c:92:66:ae:7c:ee:00:87:c6:4e:8f:b4:c5:e3:51:ca:c8:
46:50:6e:98:9a:6c:eb:ba:61:fb:ef:fd:bb:34:5b:c6:7b:b9:
d1:9f:cf:74:6e:a7:d8:ef:30:b3:3a:1b:8f:fe:26:d0:e2:3a:
50:22:fe:9e:6d:21:c8:9a:de:0c:c0:da:45:db:12:37:bf:4a:
e1:37:73:f2:c0:7b:d9:c5:c5:7c:9e:38:34:d6:b6:38:72:60:
e2:f3:fb:1e:f9:37:3e:ba:39:4f:27:51:0c:8f:2e:74:a3:39:
72:ed:f8:48:03:de:9a:6f:a4:7a:ea:3c:59:de:01:ca:1b:88:
ef:06:66:2b:49:5a:6a:4d:94:9a:99:53:6c:47:68:b6:0d:4a:
f3:db:d1:52:e0:a2:8f:7a:48:ec:7f:4e:4d:49:21:47:a0:c2:
ed:f2:af:12:e5:26:2e:43:a5:c2:b4:ba:b2:30:39:37:f0:b9:
03:02:11:18:28:d2:dc:c5:c6:b3:33:13:61:06:6b:53:71:9a:
21:d2:de:fd:55:91:4b:54:19:1d:b3:8d:93:cc:18:49:3a:20:
3f:2a:0d:0f:9f:8f:54:0c:be:5c:28:e0:c3:ee:be:dd:01:2e:
07:2c:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:47 2026 by rpki-client