Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: 9gbHb7XjHZ0l1tAlhdY1PGe20Jkg6SFERIn786B4r1A=
Subject key identifier: 47:20:1F:48:20:74:99:E1:E9:45:77:4A:2A:62:1A:E0:01:9F:4D:D7
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019D38D372611241FCD595ED2D9A8028EA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: Qk2VLy5UO9LQ7kjp8PvWh/TLMFbsa1dg4wp3zfX8SoM=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:72:61:12:41:fc:d5:95:ed:2d:9a:80:28:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=47201f48207499e1e945774a2a621ae0019f4dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:ae:6c:28:8c:1b:b1:4c:b9:7b:ec:58:2a:
71:56:dc:90:3f:ff:89:8c:06:df:d3:2c:e8:97:92:
85:04:15:09:9e:85:bb:14:09:4a:7f:25:0b:e3:9f:
2a:11:c3:22:92:0d:f7:df:d3:59:bd:b7:09:2b:c5:
c8:fb:9e:6b:ee:c9:2f:9c:6c:66:83:e1:f9:5f:62:
ef:c9:f4:5a:17:10:ff:a2:82:f4:5f:d8:b5:76:ec:
60:e6:23:e3:90:72:b5:5b:f5:15:f3:a0:d9:13:fe:
d2:48:6e:5e:ae:08:9d:a1:68:6c:e8:63:de:1f:f3:
1b:7e:ce:5d:74:b5:b1:6d:9e:cd:8b:cb:96:8c:3f:
c3:c4:1e:d0:fc:d4:51:4d:75:99:12:97:be:69:5e:
71:43:db:49:43:23:6b:e6:ca:f8:44:c3:26:b0:83:
41:98:cb:a5:64:4f:69:94:29:7b:ea:c0:ea:0a:f1:
ee:ec:57:41:76:1c:a4:d9:4d:e0:2a:d0:d0:09:e5:
a8:28:24:d2:4d:15:19:55:95:80:07:f8:7f:b5:ff:
d3:6e:b9:09:14:05:c8:3d:6f:3d:92:f7:1d:fb:37:
68:3e:e9:ec:a3:29:e7:45:61:05:0f:bd:20:49:b9:
1c:5c:0c:98:88:52:ab:8e:cf:60:d9:e0:49:f6:a3:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:1F:48:20:74:99:E1:E9:45:77:4A:2A:62:1A:E0:01:9F:4D:D7
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:f2:59:46:c5:c9:97:eb:24:dd:33:5f:75:88:6b:51:7d:
52:ce:b7:8e:84:f4:d6:66:cb:3f:a7:13:df:34:4b:4d:96:49:
53:bc:aa:71:92:94:60:b0:92:e9:2e:66:6f:81:ce:47:e7:43:
e3:db:94:15:fb:5b:bb:fc:25:c2:5a:34:92:8e:fc:a6:0f:da:
8e:de:2e:d3:9b:05:53:e0:30:13:2d:b2:52:e6:4b:c1:f4:2c:
12:2e:b5:e8:a6:6f:38:6c:df:99:e0:6a:27:fe:6c:ef:67:19:
3d:8e:b1:38:ef:61:74:cc:28:40:4a:26:bb:89:fc:30:f1:8d:
d5:12:ce:1f:b5:07:1b:f0:66:aa:6a:fc:ac:9b:61:70:bc:6f:
46:83:3b:28:de:14:fa:62:85:0f:bb:0a:1c:82:72:da:5b:8a:
97:88:e0:fd:b2:58:d9:4d:fc:ee:4a:53:a7:24:16:73:7d:e5:
96:ab:4a:9b:4e:59:80:cc:14:30:b8:42:be:cb:23:c8:3b:64:
b0:51:5c:af:80:28:bd:a5:b0:8a:0c:b6:dd:81:14:d7:3d:02:
53:2f:82:aa:cd:a6:96:d5:59:65:14:28:61:6d:73:67:3d:4e:
1e:05:1a:60:c3:80:fd:de:fa:b4:4d:8b:25:48:84:ab:a6:28:
ad:e0:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:52 2026 by rpki-client