Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
File: NSf7SXnPwqLOJmsE-Re9toESV04.mft (raw, json)
Hash identifier: AN79Cp4QVYRMe2zN9W3ypZHdtX2C3oNKchE7VvLnA7A=
Subject key identifier: 06:FF:CC:98:89:96:53:AB:99:47:68:CF:54:BC:CE:35:CC:4B:71:74
Authority key identifier: 35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
Certificate issuer: /CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Certificate serial: 01A0B12BCEDC5FF9A6042376BA232652B724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
Manifest number: D5
Signing time: Thu 17 Sep 2026 21:00:33 +0000
Manifest this update: Thu 17 Sep 2026 21:00:33 +0000
Manifest next update: Fri 18 Sep 2026 21:00:33 +0000
Files and hashes: 1: NSf7SXnPwqLOJmsE-Re9toESV04.crl (hash: LigAyIe4043M3NRzdcsLIZKJBm/uQBEZVwCx8gavpEQ=)
2: aBgCcG9RRforIkCARYIT340f4l8.roa (hash: N6x6dHF8Z4yQ497xX2jNu6IEX/saBW0DxfsXtmg1DwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:2b:ce:dc:5f:f9:a6:04:23:76:ba:23:26:52:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Validity
Not Before: Sep 17 21:00:33 2026 GMT
Not After : Sep 18 21:00:33 2026 GMT
Subject: CN=06ffcc98899653ab994768cf54bcce35cc4b7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:3f:52:9c:04:ee:5b:2a:44:46:8a:85:e3:
1c:cf:46:04:43:17:00:9d:0d:9e:5f:bb:63:32:09:
41:6c:66:30:7b:9b:7f:03:1b:5e:be:e2:7c:98:e2:
aa:31:ed:3b:c8:c3:80:58:38:f6:a0:f1:58:cf:13:
e3:b2:93:b1:d2:82:80:f4:b1:c1:8b:e4:8d:a9:02:
ab:85:d4:54:47:92:82:45:be:1a:5e:31:35:41:61:
57:b1:f9:c3:67:18:b3:5f:25:4a:5d:d9:a4:11:c8:
ca:43:16:ad:f1:3f:e0:4f:a7:5a:6e:0f:a2:2b:1e:
18:97:d6:bc:ea:e0:67:18:1b:06:92:1d:d2:45:09:
36:8e:a1:7b:cb:16:79:49:00:4a:8f:5b:2c:97:1b:
a0:62:b8:36:71:c4:22:0c:d0:6f:48:dc:eb:b7:85:
42:d0:0c:01:01:22:89:94:ab:cf:63:df:c0:0f:04:
f7:28:d8:ac:29:4b:1b:4d:4c:06:b9:54:dc:8d:ac:
86:45:cb:06:0f:10:1c:71:70:17:50:c1:29:2e:60:
9c:49:15:36:99:6c:aa:a0:40:79:1c:5b:c1:d4:4f:
aa:f3:06:9b:c6:dd:65:98:f6:86:c0:a9:3a:25:d3:
35:ac:cf:82:12:6b:51:92:2a:e2:46:7d:b5:c7:02:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:CC:98:89:96:53:AB:99:47:68:CF:54:BC:CE:35:CC:4B:71:74
X509v3 Authority Key Identifier:
keyid:35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:88:a4:70:48:0e:51:23:2f:38:49:50:ce:9e:96:58:88:
c4:c0:a6:28:21:e5:ac:fa:79:42:f4:a5:9a:3a:32:0c:33:91:
b4:64:6e:f3:2a:57:9c:6f:55:30:47:b7:e0:e3:7b:c9:93:fc:
9c:c1:85:2b:e2:84:7e:c6:58:9a:e3:13:44:72:fc:98:02:6b:
28:53:5a:27:d3:69:72:76:e8:78:a0:55:37:2b:8d:f1:12:17:
26:0f:1d:05:35:70:93:b5:ed:54:5e:a6:f5:87:f0:a5:eb:09:
fe:8c:88:03:87:32:e3:c9:94:cb:1b:66:7e:f0:f6:29:16:bf:
8d:63:8a:6f:f5:8a:4d:fb:4a:1c:29:fa:6b:08:8c:01:6e:e7:
9f:7f:1d:cc:82:14:eb:69:a4:fa:42:f9:3c:3b:5c:fe:3d:98:
99:73:e7:85:5a:fb:7a:3d:71:2e:c9:cc:66:38:dc:93:7e:d5:
64:6d:a8:c5:fa:7e:8a:21:c4:ad:5f:c0:a4:8b:81:a4:b4:35:
89:bb:fa:2e:95:9f:9e:cc:08:ce:2b:3c:11:9e:c9:db:85:5f:
c1:61:99:ec:d7:96:cf:b8:b1:96:a1:16:2c:f7:ab:2a:9e:b0:
77:07:62:16:ab:43:60:86:f4:5e:4e:c8:2a:cd:26:a0:9a:4c:
ea:af:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:59:04 2026 by rpki-client