Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: X+kSRd6vEN1Nq6WWpIKNV36Uqw0H9BLLHIY1ePG3XBc=
Subject key identifier: DA:9A:CD:CC:9E:04:23:7D:74:A4:84:FD:48:FD:F8:50:CB:F6:B3:D3
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019E31F2E4AE08833564EE21B91E5D1414E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 18:01:02 +0000
Manifest this update: Sat 16 May 2026 18:01:02 +0000
Manifest next update: Sun 17 May 2026 18:01:02 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: sdNHvcyWHsgRsBz9+/7LzgRTQtREu4ziwX/CBLJd4AM=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:e4:ae:08:83:35:64:ee:21:b9:1e:5d:14:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: May 16 18:01:02 2026 GMT
Not After : May 17 18:01:02 2026 GMT
Subject: CN=da9acdcc9e04237d74a484fd48fdf850cbf6b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:20:e4:91:63:07:bf:3b:f1:00:ff:d0:93:
0f:25:b1:40:b8:6f:0a:32:9c:5e:80:42:6a:7e:c4:
10:de:20:19:27:30:64:5b:31:05:ef:27:a3:bc:0e:
3f:f1:c1:a4:09:b0:86:45:47:b8:e9:3c:55:32:0f:
8d:0c:c6:34:08:5f:95:e3:37:d0:a8:7c:af:73:b0:
e5:b5:a5:2b:e5:c0:62:11:12:2b:ec:55:7f:3a:49:
5d:ab:b9:e1:49:ca:96:f3:94:3a:59:c0:4e:52:5c:
a9:80:31:bb:18:2b:a3:af:04:ca:13:67:ed:a8:46:
e1:7a:a2:e3:d6:96:b0:84:01:a1:82:4d:e3:78:29:
65:6b:f2:f2:59:7f:fc:6b:9f:08:50:6b:41:74:0e:
f7:89:6b:ea:21:c0:46:a9:63:3e:79:6e:4c:c6:bd:
02:53:be:5d:bf:31:7a:a9:c8:82:e9:0e:a5:e9:e6:
c6:bd:a6:eb:87:f8:99:a0:25:f8:c4:72:1a:42:aa:
f6:cf:68:73:23:93:a6:f0:91:7f:46:3d:2e:e1:e3:
98:68:0b:4b:1d:d1:b8:b1:b8:d1:fd:23:b9:3e:b2:
99:4f:9b:b7:af:b2:02:60:73:1b:3f:24:5b:36:70:
a8:5d:39:6d:6e:f1:70:31:2c:66:1c:2d:80:73:51:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:CD:CC:9E:04:23:7D:74:A4:84:FD:48:FD:F8:50:CB:F6:B3:D3
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:6f:a2:f0:c9:a6:d5:b2:1b:48:b6:39:42:67:e3:b8:f4:
4e:e7:cf:33:c2:d7:9a:e9:7d:05:ce:19:37:0a:b6:eb:30:6f:
bd:3a:ec:f3:88:71:0e:0d:2c:97:86:b7:76:a7:88:b3:f6:d7:
4d:7f:1a:f4:a7:30:46:cd:71:53:38:9e:3f:2d:b5:1e:23:59:
27:f1:b2:72:a9:a4:29:53:a1:ed:2a:62:c0:ad:bd:b3:6c:7b:
1b:fd:e6:7a:25:42:96:37:b2:48:9a:ab:c0:d6:a1:d6:fb:36:
5d:f2:fb:a7:df:b6:06:9e:6a:83:50:12:e2:e8:07:11:de:30:
a7:96:b7:55:c1:a9:bf:0d:63:ac:8c:cc:b9:86:58:1a:65:2d:
55:99:99:47:a5:43:16:9b:37:47:1c:c9:6f:94:4c:4b:77:79:
bd:2b:74:bd:df:56:38:88:f2:85:d7:27:b6:1a:83:0f:e1:70:
c2:69:b4:d6:2e:5f:97:08:3c:bf:0c:36:d8:e5:c3:81:df:88:
50:33:9e:ce:34:5a:d2:c9:b9:6b:3f:fa:27:a4:15:2e:fe:43:
70:a5:5d:87:a8:90:d9:f3:8b:28:a6:91:5d:ec:1b:01:97:7e:
c9:ef:eb:62:32:4a:9b:0a:44:04:01:77:63:1f:33:f9:cb:0a:
b2:cf:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:28:08 2026 by rpki-client