Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 5KUXXvaDXn8RfO85wIFZZ40v7LDoiv0ljs+nPQ2v4Ms=
Subject key identifier: FA:49:45:DE:99:0E:08:56:0E:92:A9:14:8F:69:FC:0E:0A:20:61:60
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019D39E5BA00F8B4A3903ABF688B4B40BB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=)
2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: 08R3NjlXNhuAVX6kPVW+rQAkqkMtSrC+81wZx+Lj4Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ba:00:f8:b4:a3:90:3a:bf:68:8b:4b:40:bb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=fa4945de990e08560e92a9148f69fc0e0a206160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:db:1c:93:50:eb:69:46:47:0a:4c:a9:5d:
35:0b:64:34:91:87:e8:8e:91:52:0c:ca:d2:12:2e:
1c:d0:f3:81:4e:14:84:59:79:71:0a:69:9f:f7:d7:
7e:75:1e:7d:3c:fa:22:f5:60:e3:2d:d0:2f:15:b4:
5f:e3:d7:08:15:dc:cd:d8:f5:34:10:f2:41:97:ec:
4e:13:71:48:56:5e:83:cd:3b:80:e3:cd:21:3c:ae:
bc:a5:cc:f7:21:62:b2:d8:0d:5b:b9:e0:13:f9:b5:
d2:d8:6e:9c:24:5c:14:95:38:05:8f:f6:b1:31:e5:
c1:7c:34:fa:11:84:32:02:de:83:e1:88:4a:1f:9b:
9a:23:f9:17:a4:13:7b:19:e2:bd:26:d3:c5:7f:1f:
e5:23:6f:b4:ce:06:be:5c:4b:f3:d6:f5:39:69:2b:
c5:31:a7:d3:68:cf:23:7d:d1:fd:e7:83:d9:de:91:
ae:8e:19:fc:30:fd:3a:6e:a1:b6:af:df:43:2f:35:
e7:4f:a3:32:06:99:02:0a:6b:79:ee:d6:e8:a4:14:
1f:43:37:17:f6:f6:af:5d:16:f2:45:f4:3c:1a:0b:
f1:bf:42:ba:c7:34:43:17:2f:5d:13:32:0c:73:b2:
e0:4a:01:11:d2:1e:6d:d6:6e:ab:fb:f0:79:3d:8a:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:49:45:DE:99:0E:08:56:0E:92:A9:14:8F:69:FC:0E:0A:20:61:60
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:d9:3e:ae:16:63:b9:56:b3:19:46:ed:fd:1d:f9:b3:fc:
20:cc:f3:ab:dd:b5:58:bb:5e:98:30:82:a1:82:13:e5:55:aa:
68:70:76:d2:81:1c:e8:af:37:36:92:78:05:b3:2c:ed:91:79:
96:a9:bf:f2:bf:80:23:12:d2:bd:a3:25:a5:a9:64:8c:2c:98:
5a:ac:71:38:75:1f:b4:03:18:98:23:80:d7:e1:26:31:df:bc:
62:a6:78:33:2d:3b:34:70:68:db:35:fe:b7:b1:b7:49:2c:36:
f1:1a:22:94:cf:26:fa:93:6f:4a:27:80:0e:88:5f:38:b8:6c:
e0:5f:41:d6:c3:11:25:87:21:a3:77:43:64:42:05:80:2c:3f:
a5:c2:8e:bf:bd:f7:b0:2f:71:29:b2:da:bb:fd:65:89:0f:65:
f3:8a:17:d1:44:ca:b2:3d:6a:07:5f:73:be:90:e7:06:fe:6c:
4a:94:7b:3c:10:19:94:15:db:19:39:35:34:b2:22:96:c8:65:
ee:34:47:69:e1:0e:7f:75:76:b1:6e:bc:01:fd:d1:a6:b1:f6:
d6:f1:6b:1e:16:49:73:c6:8e:59:52:4c:20:58:79:6c:8e:28:
bf:e3:7f:89:82:b6:b1:64:2a:64:cb:83:52:81:5d:af:45:f2:
07:bd:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:21 2026 by rpki-client