Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: 6cPvRAMpRti6T+lOYgjq8fX5Xn06+1vcoVek+F9ZHHg=
Subject key identifier: E4:D2:06:A9:45:14:F4:39:1C:29:5E:DC:1B:5E:2B:E9:FB:22:2F:5A
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019DE96CD6CA62AF0C94F91490B574EE8E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 18EF
Signing time: Sat 02 May 2026 16:01:57 +0000
Manifest this update: Sat 02 May 2026 16:01:57 +0000
Manifest next update: Sun 03 May 2026 16:01:57 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: lWDQOqaytR9lOblLSDPQXZPzFNbfgR9zi5cMWOWam+c=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e9:6c:d6:ca:62:af:0c:94:f9:14:90:b5:74:ee:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: May 2 16:01:57 2026 GMT
Not After : May 3 16:01:57 2026 GMT
Subject: CN=e4d206a94514f4391c295edc1b5e2be9fb222f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:0f:38:aa:73:22:ef:4e:1b:f6:ec:84:f5:
d7:54:17:69:80:17:b2:0f:4b:e3:88:c7:d0:94:aa:
36:97:95:3c:2c:66:b3:8a:d3:21:68:81:1f:2f:50:
86:10:2f:fd:e8:72:2f:08:5e:4e:0e:ff:b4:50:37:
ce:71:d2:05:32:b5:6b:fb:4d:38:de:bc:cf:ee:ac:
9b:66:08:53:3a:ce:25:4a:b9:60:f5:87:78:54:06:
0f:26:e8:aa:29:d2:16:dc:95:e4:c3:0e:22:51:94:
5b:f8:0a:1a:45:14:f6:4a:63:cc:bd:8d:fd:f2:d3:
4f:b1:6b:52:d8:85:19:98:9d:64:ea:06:33:63:08:
68:ab:59:a2:df:9e:b4:c4:3e:7d:46:15:02:fb:9a:
e0:7f:19:f7:84:46:1a:62:44:a8:6a:cf:10:a8:6a:
7f:08:29:44:a3:22:74:2b:96:d0:ae:13:93:57:1d:
64:c1:da:4b:ea:d5:dd:90:3e:08:84:2f:35:50:de:
46:1d:8d:b5:51:65:01:4b:c7:c8:fd:5e:39:73:cb:
ce:69:6d:c2:fe:0e:10:66:74:02:b8:3d:0b:3f:bd:
00:18:f7:58:8e:6a:a8:10:85:09:c0:4b:56:44:93:
28:66:e7:d9:2b:a1:ea:a6:3e:84:3b:68:9c:29:df:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:06:A9:45:14:F4:39:1C:29:5E:DC:1B:5E:2B:E9:FB:22:2F:5A
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:02:31:00:9c:f5:f7:af:21:eb:3d:2b:e1:ce:87:34:a6:
60:f6:01:af:9f:0c:7c:89:39:ae:a6:91:fa:ff:73:ee:95:ee:
b2:4a:ce:53:9e:32:4f:71:b6:d5:eb:23:84:64:e2:9c:8b:f1:
f9:a0:10:4d:08:6f:9b:42:96:0a:84:62:6c:07:3d:7b:47:aa:
20:cf:90:83:2c:fd:20:62:76:c7:01:20:ff:a9:04:67:92:80:
66:9b:c3:51:eb:69:89:93:0c:a9:e0:1f:78:ff:5a:99:18:94:
20:03:75:f9:65:99:68:8c:8b:d3:3a:19:07:08:46:3e:16:3f:
37:6b:ec:cd:16:4b:9b:b9:50:93:46:6c:db:a1:92:30:f1:1a:
16:d5:cb:f7:c0:b6:80:53:b8:f2:02:6f:8f:5e:ac:d8:50:9e:
b2:8d:d3:29:95:c7:cf:22:38:a4:fe:3e:5d:75:37:e5:05:60:
18:b4:7b:62:4a:44:1b:81:d9:f2:bb:1f:f5:66:87:0e:9e:dd:
28:46:b2:37:af:65:64:38:d1:9b:0b:c6:1f:0e:99:82:19:eb:
7e:7b:37:fb:b9:5f:e4:33:0c:ee:cf:e0:b4:e1:27:5f:6c:e3:
9d:2f:82:41:a1:9e:9c:65:73:08:01:dd:f5:30:85:c4:9a:e5:
0d:6f:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 20:13:56 2026 by rpki-client