
Manifest
$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier: RBQm8MUpapUr0dMzz1gCnbwFjdzuVq2DbSKYiiYXzsI=
Subject key identifier: 9D:47:EF:35:93:E8:2E:00:62:A6:C5:0D:E7:31:A9:D8:01:A4:FA:01
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial: 7F7A9C0C878C3D05F52DBCD4F880AB2A196D8EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number: 037C
Signing time: Sun 27 Sep 2026 20:28:17 +0000
Manifest this update: Sun 27 Sep 2026 20:23:17 +0000
Manifest next update: Tue 29 Sep 2026 00:25:17 +0000
Files and hashes: 1: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (hash: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=)
2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: 47Q3pqjCMliajAPMi1u06ISo5HkFEnEYrhF6wtZ9j3A=)
3: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
4: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (hash: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=)
5: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (hash: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 00:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7a:9c:0c:87:8c:3d:05:f5:2d:bc:d4:f8:80:ab:2a:19:6d:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Validity
Not Before: Sep 27 20:23:17 2026 GMT
Not After : Sep 29 00:25:17 2026 GMT
Subject: CN=9D47EF3593E82E0062A6C50DE731A9D801A4FA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:09:00:99:08:b8:fd:30:ef:67:4f:ea:9d:
a1:9c:ec:6f:ef:16:f1:1c:c8:38:68:2c:2d:61:fc:
a6:98:89:cf:d0:24:37:1c:f4:90:6c:2e:be:7f:26:
bd:d9:ee:94:a8:5f:2b:95:d5:0a:5e:c9:8e:85:2c:
be:7a:8a:ea:83:83:fc:e7:1e:a2:34:26:74:ff:15:
2c:07:30:3c:10:a0:a1:60:d9:21:b7:fb:e3:ad:72:
df:cd:ae:ee:d2:ee:20:6a:5b:61:06:b1:ca:e7:60:
6d:5b:f1:b5:ff:f1:74:7d:e6:3d:95:b6:20:bc:24:
fa:5a:bb:ed:c7:1b:be:d7:ef:a4:ec:61:8e:3c:62:
96:34:fd:56:4f:1f:a5:f6:46:c4:b7:a6:74:94:47:
66:d2:ef:dc:54:de:10:5e:a5:22:10:82:0c:53:47:
9e:a0:fc:07:1f:d1:ab:19:e3:f1:38:c7:3a:97:98:
9e:f7:b1:3d:83:5c:cf:15:ef:ce:f9:b5:ec:8f:45:
8d:50:f8:01:38:43:f9:e5:d5:37:64:62:7f:f3:f2:
36:ca:73:b6:15:95:2c:8d:9b:8b:93:c0:fa:59:4f:
0e:23:08:04:51:a1:5c:a9:8f:c5:7a:f3:c2:d0:f2:
ac:36:45:80:85:3b:73:6a:19:aa:f3:7d:f4:e3:8e:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:EF:35:93:E8:2E:00:62:A6:C5:0D:E7:31:A9:D8:01:A4:FA:01
X509v3 Authority Key Identifier:
keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:ec:c9:18:ab:82:02:63:22:4b:9b:98:34:3a:fb:45:d5:
53:1a:aa:21:a4:f9:fe:68:02:8a:ec:ba:ef:64:88:d0:85:63:
41:41:9e:b5:21:81:41:97:99:31:a6:f5:25:1b:d9:01:69:68:
a3:67:8d:9a:21:8e:0b:4b:56:ec:a3:c6:77:27:2c:d3:78:a1:
ae:38:0d:c4:24:f1:4b:e3:69:f6:66:a1:09:f4:7b:ed:24:fd:
bd:5c:10:68:bc:53:22:cc:7d:89:60:89:32:f9:61:5e:e9:9f:
e3:01:1c:f2:e0:6c:81:15:8b:e7:a0:44:ba:9d:6b:b3:9a:58:
1a:16:0d:9a:b5:e6:8a:bb:36:6a:8c:59:18:df:81:0f:cc:22:
aa:50:a6:78:27:e4:b0:e7:f7:16:ce:24:3d:86:fe:22:5d:46:
c7:7a:d0:d6:cc:de:94:99:c4:2b:f9:5a:7e:d8:db:dd:f2:8e:
82:1f:b9:92:50:69:f4:51:f9:a1:80:0a:53:96:b7:56:53:f1:
29:d5:d1:13:cb:e5:b9:f5:f7:1f:e7:0c:78:da:0b:b4:16:6a:
6d:17:36:54:e7:19:5d:af:3a:cd:9f:38:14:dd:4f:bd:34:5b:
5f:e4:5f:04:cf:e2:77:a3:b4:09:83:ff:5a:d6:79:74:ca:58:
b7:33:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:28:05 2026 by rpki-client