Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: lnuBYtJIM4yvpAtKIIne8ExhKRb37fQvv91FpMNC+h8=
Subject key identifier: 76:22:3E:E7:33:DA:D2:B1:17:5C:21:A4:13:0E:29:F4:A1:62:B2:F0
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019CF9F42A742251A0F75F487C2D5373A9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1873
Signing time: Tue 17 Mar 2026 04:00:54 +0000
Manifest this update: Tue 17 Mar 2026 04:00:54 +0000
Manifest next update: Wed 18 Mar 2026 04:00:54 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: BXOdy/+1ZHcz+21HJ2gxJ5PCvJ3Gh3OJECvd0+/BQhw=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:f4:2a:74:22:51:a0:f7:5f:48:7c:2d:53:73:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 17 04:00:54 2026 GMT
Not After : Mar 18 04:00:54 2026 GMT
Subject: CN=76223ee733dad2b1175c21a4130e29f4a162b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:06:33:b5:17:ac:38:4b:d2:6e:0e:61:27:
93:04:b8:3d:83:82:c9:77:28:fb:82:c0:d5:90:83:
83:6f:eb:74:3a:ec:75:3c:7d:74:fc:56:a1:36:b9:
a1:9f:d9:ab:ad:f5:9b:fc:07:fe:05:1c:60:83:91:
be:81:aa:60:a8:aa:f0:be:61:17:ea:a9:8b:ba:4b:
8e:2b:f5:6b:99:f8:6f:9a:43:ac:7e:be:14:0f:79:
e1:4e:2d:12:ab:30:26:49:cd:72:82:63:1b:4b:be:
51:5b:18:43:06:33:f9:cd:d1:7e:50:34:52:60:b8:
af:b1:2b:98:b4:6d:df:e9:13:b8:3b:f5:4b:85:d0:
c8:4a:ce:4f:aa:73:85:86:28:dd:d7:9b:e8:a1:f2:
4c:1f:06:9e:0d:c8:74:e1:c8:2a:a0:52:90:c6:10:
d3:b1:ba:60:c7:a2:34:27:31:e0:a4:b8:59:67:99:
ac:36:9c:5c:33:c1:f1:3d:7d:28:2b:2f:1c:23:ec:
49:f1:a3:6a:52:54:49:c9:59:0a:54:3f:a1:29:6c:
42:aa:7c:ad:51:f3:18:e3:9c:3d:cb:0a:97:68:0d:
17:76:ad:9b:6f:1d:b1:bd:dc:04:73:38:7e:6c:8c:
87:65:f9:2c:cb:53:a9:6d:57:aa:6e:48:7a:d4:c9:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:3E:E7:33:DA:D2:B1:17:5C:21:A4:13:0E:29:F4:A1:62:B2:F0
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:ef:df:47:53:51:a4:89:88:43:70:45:a5:29:b7:90:1e:
29:85:c2:f7:bf:53:62:9b:9b:f9:de:8e:3c:f4:a7:c2:f9:fc:
41:5c:35:d1:57:b2:15:d1:77:4a:c7:66:00:9d:34:bf:6b:e4:
8b:75:b4:ab:7d:cf:63:13:8e:a7:d1:7a:3a:69:59:27:6b:f2:
23:00:d8:a3:0e:6f:f8:f9:fc:0c:f6:91:e6:87:17:dd:12:1d:
bb:f7:03:87:85:c4:eb:9b:21:ca:db:1a:0b:73:ca:cd:4e:c9:
e0:66:26:1d:3c:1a:21:70:cc:f6:53:85:9b:51:55:45:76:72:
7e:4e:e0:3c:64:27:58:3e:e7:df:28:ab:7e:b7:6f:96:c7:fc:
91:b2:f3:a0:1a:15:db:d6:fb:f3:52:e7:e9:3e:b8:c1:96:57:
43:2b:18:b1:05:8b:00:0c:08:68:61:a7:f4:97:ab:e0:0b:0c:
36:32:5f:9f:29:58:5e:58:25:45:6e:b3:96:c9:2a:98:f9:b5:
27:f7:7c:55:f4:78:c4:3d:27:07:68:92:d8:4c:9f:a1:a9:52:
e6:c0:18:cf:55:96:df:e3:44:ff:38:28:3f:0a:e5:d4:38:76:
69:7c:7e:2c:ea:2f:24:4d:c8:80:1c:f6:9c:08:07:36:79:af:
98:7f:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 12:21:38 2026 by rpki-client