Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: UtpGcxiZbb8VRdYC6teTRAx+3rXxrQxXDu/K4vFJTMk=
Subject key identifier: BA:D2:12:E4:F0:9E:10:7D:6E:3E:67:21:B5:4B:DC:03:2A:C3:C1:0C
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A0AE2B641C963E4F6D27C2F1B6C6DDD009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1A5E
Signing time: Thu 17 Sep 2026 07:01:14 +0000
Manifest this update: Thu 17 Sep 2026 07:01:14 +0000
Manifest next update: Fri 18 Sep 2026 07:01:14 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: XR3QHPyqzML35pbRO0YS3UJhBJ2KHnTZKxOz0v5KVMM=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:2b:64:1c:96:3e:4f:6d:27:c2:f1:b6:c6:dd:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Sep 17 07:01:14 2026 GMT
Not After : Sep 18 07:01:14 2026 GMT
Subject: CN=bad212e4f09e107d6e3e6721b54bdc032ac3c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:ea:67:54:ad:c1:47:56:43:a3:7a:a6:70:
59:02:d2:ad:f6:58:2c:c5:3f:ea:6f:48:cd:0e:23:
6e:a0:7f:9a:4f:41:e9:b5:4a:1a:c8:a6:00:0a:0a:
c2:ef:20:70:19:8f:b0:c8:94:3b:fc:9a:9a:e2:60:
11:36:4f:92:b1:56:90:4f:f8:f0:07:94:bc:ed:a7:
b6:2c:7d:6f:19:17:dd:76:17:f9:93:c3:14:dc:7a:
56:cb:18:0f:fb:e0:8e:85:0b:64:20:f2:3e:7e:7a:
59:13:6c:4f:07:7c:62:d9:29:0b:30:22:5c:0c:c6:
f2:35:65:ad:1d:92:b8:96:48:fd:50:0f:2b:05:5f:
31:f2:57:5b:85:f7:bc:96:44:e9:42:c5:73:cb:f6:
a7:ae:2d:fc:96:14:7b:38:9f:4c:07:d6:f8:ec:f2:
33:7f:26:72:14:86:5f:19:9d:98:7d:ca:e8:28:3a:
43:ff:44:f7:8c:21:d0:e0:47:9f:31:cf:eb:4f:b8:
23:f8:34:93:8c:46:87:1f:61:fe:32:53:04:a0:aa:
3e:8c:a7:15:74:d3:45:27:60:1c:cc:10:b7:10:f3:
2a:6f:bd:16:13:b6:e2:99:ca:0d:0a:d9:5d:8f:c0:
3d:76:82:db:2e:ce:d3:92:e5:18:c7:81:84:f7:7e:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:12:E4:F0:9E:10:7D:6E:3E:67:21:B5:4B:DC:03:2A:C3:C1:0C
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:95:1b:be:b2:8f:36:5b:e9:72:ed:90:88:86:47:3d:12:07:
2e:43:c0:ef:df:61:c7:b6:09:bd:86:4d:f8:28:71:7d:e6:90:
df:30:a1:14:86:ca:08:31:22:a2:64:fc:21:c4:d6:e3:4e:e4:
7c:eb:0a:e8:61:20:48:61:ab:fd:9f:d2:50:23:3e:a6:82:dd:
05:89:79:c9:55:19:f5:06:1e:7d:28:86:ad:49:aa:e5:d4:a6:
d9:87:ba:fd:e8:31:88:bf:29:ba:5d:a5:19:b9:37:c5:c6:84:
dd:60:1c:d2:a2:4c:f3:35:d8:57:3a:f2:44:36:20:4d:c4:4b:
e7:7f:69:6b:d4:04:8f:c0:7f:4b:f6:a8:51:6c:88:90:74:f7:
20:84:c8:43:b9:58:be:a0:b7:e7:18:2d:21:83:35:12:d8:f7:
08:13:c9:67:0f:2e:01:b0:ab:74:e4:d2:ff:0b:36:83:5c:82:
5d:fe:c8:d2:c8:9a:79:1a:e7:1e:3c:b5:9b:93:a7:03:30:ec:
42:d1:df:6c:5c:1d:fb:b5:bb:41:eb:5d:6a:b1:48:ec:09:c8:
fe:76:61:cd:bd:f1:1f:5c:94:15:cf:95:c0:f3:cb:1f:95:86:
b6:66:32:33:96:d6:07:53:fe:24:34:74:8b:14:ee:d5:e6:bd:
1b:18:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:13:13 2026 by rpki-client