Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: 5gzHz0PHl/uNWnqr5xMUZ8j0Iilt6FlNtqk2fYx+aVc=
Subject key identifier: D1:BB:E1:2B:58:90:4E:DF:FC:F3:30:B6:57:49:65:D8:A5:C3:6B:5B
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019FC290FE5F41CD6CCAD91796B2D6A2D2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 19E4
Signing time: Sun 02 Aug 2026 13:01:49 +0000
Manifest this update: Sun 02 Aug 2026 13:01:49 +0000
Manifest next update: Mon 03 Aug 2026 13:01:49 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: D5Z7ueugAG+VFzpTaoY7EL5tzaF06BwwMWZiTYgjuYg=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:90:fe:5f:41:cd:6c:ca:d9:17:96:b2:d6:a2:d2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Aug 2 13:01:49 2026 GMT
Not After : Aug 3 13:01:49 2026 GMT
Subject: CN=d1bbe12b58904edffcf330b6574965d8a5c36b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:92:25:87:02:63:10:ca:93:9a:9d:e7:cd:
53:61:f7:86:1a:21:11:4e:b4:f5:e9:76:81:51:fe:
aa:23:a4:91:20:cd:3b:67:5a:7f:f3:aa:d2:df:bb:
5e:7e:df:3e:9b:bc:ea:bb:02:81:7b:fe:11:8d:9a:
e6:1c:a6:0a:23:7b:49:3b:d2:58:60:3d:ca:24:34:
66:a0:00:1b:e7:5f:f6:1c:f8:b3:b6:ad:4e:8a:75:
fc:45:c1:36:ee:a3:46:bf:7e:f4:33:7f:e9:62:54:
b7:b5:9d:34:f9:58:77:df:da:df:1c:cf:17:3f:ab:
64:a8:bd:5c:cb:50:9a:02:0b:8a:6b:b0:9d:1f:78:
d3:c8:f6:69:07:48:82:29:ba:ad:cc:cb:4a:c4:b8:
98:ed:e4:34:19:f3:88:7e:26:79:92:90:de:e0:ff:
60:f4:a0:fd:21:04:cb:ba:1a:5b:75:f3:b8:2e:de:
51:7b:b1:a6:55:9c:f4:44:c6:5c:a8:e4:0c:94:e3:
1c:44:20:45:89:e0:dd:45:78:ba:71:7e:41:46:65:
32:86:3f:8a:09:e9:cd:0b:4f:f5:69:b8:96:45:fa:
89:f4:2d:e0:9e:d4:be:7f:e9:34:a1:a8:13:12:1a:
17:5b:4b:b4:ea:38:db:27:0f:a6:59:70:b2:93:d1:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:E1:2B:58:90:4E:DF:FC:F3:30:B6:57:49:65:D8:A5:C3:6B:5B
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:12:d2:85:06:01:33:27:3d:0f:64:5f:39:0f:9a:c4:35:e6:
97:fd:0e:c7:10:8e:d4:4f:6a:c5:34:50:81:fa:ee:ca:3d:ad:
4a:06:ec:42:e2:e2:85:fa:1b:1b:0a:c0:e7:86:0c:fb:7f:b5:
92:2d:40:fa:f1:e6:69:48:56:f7:b7:0d:34:3a:28:77:44:8d:
52:ce:c2:b5:e6:ff:84:01:d1:99:32:4c:77:d6:a6:1e:78:96:
36:b0:93:98:49:37:a3:fc:8e:49:98:92:0f:4a:44:15:84:17:
f8:9c:5a:25:e7:fe:30:f6:5f:94:f3:bc:1d:c6:7c:ee:df:a8:
e5:89:f3:fc:c2:d1:d1:fc:b0:b5:d7:ab:9d:e8:58:97:d6:cd:
c0:b0:58:82:35:10:44:d6:b4:ef:ba:4d:d7:8d:89:4e:a0:16:
db:db:01:a8:33:55:bb:4e:56:c6:c8:77:a1:71:54:ba:c1:80:
78:60:b8:69:17:39:47:e3:58:67:f0:ab:f3:5b:54:0d:5b:55:
be:30:4f:87:b7:b6:57:d0:0d:8d:fa:7d:e4:b8:96:0b:fd:79:
fc:4e:2f:cd:6b:2a:07:bf:5d:da:88:21:3b:22:0e:4d:90:8b:
fc:c1:c8:1a:86:c8:8a:6c:92:41:30:e9:7b:93:22:dc:99:6d:
a8:6a:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:44:57 2026 by rpki-client