Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: 3drIEwZSH/dfv+qbn+Wz/UTTUpDYjvccg0zuHIbOO3w=
Subject key identifier: C9:27:7B:62:42:78:AA:BB:38:10:8E:B9:09:3F:15:B9:30:C6:EE:3D
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 019E216DBE49549BA9DA41BC15CCCD742B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 0100
Signing time: Wed 13 May 2026 13:01:40 +0000
Manifest this update: Wed 13 May 2026 13:01:40 +0000
Manifest next update: Thu 14 May 2026 13:01:40 +0000
Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: 9GHb213mx+nfGTxzDFLJwEg4iVbEK6riinpOR52jXs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:be:49:54:9b:a9:da:41:bc:15:cc:cd:74:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: May 13 13:01:40 2026 GMT
Not After : May 14 13:01:40 2026 GMT
Subject: CN=c9277b624278aabb38108eb9093f15b930c6ee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:22:fe:62:7c:ca:c4:e6:e2:de:e0:59:c5:
05:35:1b:32:f7:db:61:69:c4:21:d4:0c:77:87:80:
54:11:6d:b1:25:21:7a:73:b3:9d:3c:ad:52:2e:70:
6f:ac:1e:20:fb:41:9c:e6:84:cd:c8:13:8a:4b:1c:
be:0f:ee:fa:e4:57:8c:30:e2:69:67:49:a7:ec:5a:
54:84:b7:bc:d6:bf:ee:4e:5d:66:61:51:05:31:12:
31:5f:52:dc:d2:bb:da:bf:96:cf:dd:0e:84:06:21:
20:e3:e1:80:5b:ee:95:e8:cb:06:96:4c:b9:9b:8c:
8b:90:d9:39:a8:3b:0a:51:b1:d0:7b:27:13:e7:e6:
ff:06:f5:3e:5c:8a:b1:e4:35:5e:4d:74:fb:42:67:
76:f7:d3:b3:dc:35:66:e0:5e:37:77:0f:e8:49:0c:
8f:7a:5d:40:a7:06:88:47:ec:cf:fc:13:65:b3:9c:
e4:c6:e5:24:1f:19:58:95:58:35:0d:27:58:ad:af:
43:26:e4:b3:55:ff:d0:68:77:84:8b:42:b9:d8:61:
18:76:68:a2:0f:0f:e8:9b:e5:ae:18:7c:b1:c6:05:
c9:1a:1c:4c:db:6f:38:f4:6b:9e:ba:08:7d:75:05:
45:11:a3:7b:6b:de:e9:d8:44:1d:de:38:99:00:1c:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:7B:62:42:78:AA:BB:38:10:8E:B9:09:3F:15:B9:30:C6:EE:3D
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d9:69:96:2c:07:ed:05:cb:b1:57:21:28:0c:58:52:b1:bf:
27:a9:92:9c:96:8d:8c:dc:e3:96:bf:e7:82:3a:60:ab:07:d7:
a3:a5:1d:09:74:d9:87:88:c9:f3:73:02:d2:5d:26:1c:31:56:
9f:63:fc:7e:ae:6a:72:fb:de:07:ba:ea:83:53:a8:d9:43:ba:
5d:84:ba:be:43:f1:54:25:1e:b5:c0:8f:23:8d:0f:c3:67:a1:
8b:14:cc:38:cb:61:ad:cb:1b:03:3e:79:bf:9d:7d:6b:9b:31:
28:74:ad:ae:d0:ea:c8:52:95:8c:32:15:16:43:4c:49:6e:e5:
99:63:92:20:ce:b7:3f:c0:2f:a3:2f:c0:00:07:98:e0:0d:df:
73:e6:9a:89:fc:bb:70:e3:a7:cb:ea:2b:f9:31:4c:0a:6d:3d:
a5:03:22:f0:0a:96:5f:f0:af:de:01:d5:24:a1:cb:aa:ee:ac:
43:fe:2f:36:db:7f:d6:c1:a9:94:30:88:fc:70:ed:35:df:36:
79:0e:bf:f9:69:0c:70:4a:15:6f:9e:d5:77:f6:f8:cf:62:4d:
5b:be:07:58:3e:de:74:11:c6:44:6b:31:bc:40:88:23:b9:d6:
49:79:89:41:d8:5b:59:94:71:e0:1b:01:db:6c:b9:3b:fb:bd:
5f:e4:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:12:38 2026 by rpki-client