Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: cGeotpG8mrmH47gYOg5fxjx65wodwtSStzvPtI28bDs=
Subject key identifier: E1:0B:85:25:95:DC:0C:BB:56:5E:5B:A3:D1:B9:B1:22:A3:B1:BE:E2
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 01A00213D1A141A1782287E9C75B72689E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 1587
Signing time: Fri 14 Aug 2026 21:00:48 +0000
Manifest this update: Fri 14 Aug 2026 21:00:48 +0000
Manifest next update: Sat 15 Aug 2026 21:00:48 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: gtVaoAxy4HEAvI44Exg7Ku3U4WUVpzkJPjT1qnXKoP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:d1:a1:41:a1:78:22:87:e9:c7:5b:72:68:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Aug 14 21:00:48 2026 GMT
Not After : Aug 15 21:00:48 2026 GMT
Subject: CN=e10b852595dc0cbb565e5ba3d1b9b122a3b1bee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:71:f7:46:91:bb:4e:de:cf:ea:1a:71:8c:
80:47:48:dd:c0:1d:cc:c5:4f:bb:f0:ed:b6:32:bc:
15:f2:73:d2:19:66:d4:a5:31:47:48:a0:e2:a7:22:
bb:d3:2b:09:82:06:8e:f3:b0:53:3e:fd:b9:e0:33:
fc:a2:bd:74:f7:86:38:f6:4c:0e:12:b9:4b:30:ef:
6b:0a:4c:8c:96:27:5c:5d:47:1f:53:6a:01:b1:56:
b4:35:c4:f9:d2:7b:b9:11:0a:6b:06:30:f5:7c:1b:
23:cb:80:0e:f0:4b:3a:06:73:97:5c:5d:dc:a0:c7:
9d:61:c4:4b:b4:0c:8c:20:30:b2:41:ef:07:1e:8e:
07:27:aa:27:00:da:65:e9:da:75:e2:03:cf:db:e5:
0e:0a:b2:86:ec:81:ed:91:f2:b2:97:b7:71:59:de:
95:d0:e3:56:24:f1:f1:14:a6:1e:6e:f3:ed:f7:05:
e0:ec:ff:5d:69:06:c7:91:9c:a0:0e:e0:c9:b3:83:
4d:df:f0:87:2e:86:e5:e1:49:df:9f:27:2c:13:f7:
6c:90:2e:94:3c:74:fd:e8:23:5d:aa:fd:b3:59:79:
a2:12:9c:c3:3e:d7:e8:f5:97:bf:5b:ef:d4:57:a9:
72:86:51:6e:99:dd:1e:6e:fe:90:48:6c:ef:4d:59:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:85:25:95:DC:0C:BB:56:5E:5B:A3:D1:B9:B1:22:A3:B1:BE:E2
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:69:22:d2:a8:72:00:c2:b9:ee:c3:11:7e:55:2c:08:39:
c0:61:64:46:19:ad:62:6c:dc:92:a5:ee:1f:87:af:2f:31:2e:
be:aa:62:d7:fd:2f:be:ff:1c:50:71:b4:fe:ee:9c:40:13:d3:
2c:97:14:03:44:7b:44:c8:aa:91:12:c1:0c:03:39:0a:29:0d:
ee:82:18:cd:7d:f1:f9:67:89:fb:e2:18:2d:22:53:2a:34:9b:
de:57:7d:70:69:da:1f:a9:9e:f3:8c:1f:1c:5c:f5:4a:84:2d:
53:56:24:4a:4b:db:2c:dc:ea:6e:40:7a:cd:56:87:ab:86:6f:
cf:44:f5:57:5e:0f:03:d0:4a:49:e7:d1:b0:6b:72:03:5e:34:
43:8f:af:4a:59:9c:76:cc:cd:58:4b:99:ea:56:0c:93:57:38:
2c:84:6f:5e:97:17:f1:c1:c5:02:a4:b8:03:b8:11:b9:e3:83:
1e:a1:ff:3b:0b:d6:99:03:10:d7:32:2b:c2:11:3f:29:4c:9f:
16:8d:92:73:08:9c:a6:6f:c1:0b:02:24:54:9d:08:ce:88:e5:
83:10:77:6f:9a:10:f6:7f:03:8f:47:04:93:c9:cc:55:37:e0:
61:4d:b5:57:cd:43:82:91:ed:e8:2e:85:0f:f6:cd:96:d8:85:
73:45:11:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:45:00 2026 by rpki-client