Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: 5DepHvHzciih5tdLyAmCNWSWYtuFliktqb5i34vFNUY=
Subject key identifier: AD:7E:E7:9C:B6:E9:E4:B1:CA:E9:C5:62:43:CE:D9:3B:E7:57:31:F2
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 019D31F5FD69C90C761EE670A88F4194CD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 84
Signing time: Sat 28 Mar 2026 01:01:37 +0000
Manifest this update: Sat 28 Mar 2026 01:01:37 +0000
Manifest next update: Sun 29 Mar 2026 01:01:37 +0000
Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: +0Wo7orId6bE4yolm4cLhnTA6ZlhiisrAooQRXPZkzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:fd:69:c9:0c:76:1e:e6:70:a8:8f:41:94:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Mar 28 01:01:37 2026 GMT
Not After : Mar 29 01:01:37 2026 GMT
Subject: CN=ad7ee79cb6e9e4b1cae9c56243ced93be75731f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:e5:78:25:97:38:c7:2e:bb:25:df:2d:73:
97:3e:34:02:f8:50:04:ba:55:c8:3a:01:05:ae:b6:
84:27:a2:11:5f:4e:79:30:ff:8e:21:bf:99:5b:08:
e6:39:0e:36:95:a4:dd:ba:34:1a:ee:bf:c5:ab:e6:
c8:fb:a9:c6:32:7e:cb:1b:9d:22:ff:ee:fc:cf:4b:
fc:57:bf:cc:42:9c:a7:29:21:85:6e:bb:95:70:fb:
99:67:96:6d:2b:5f:57:aa:5c:d5:91:54:83:89:cf:
fb:0b:38:93:84:c1:3e:3f:15:23:dc:09:47:cc:b9:
11:05:f8:cf:d4:d7:23:14:02:5b:f3:1b:62:b7:0b:
0b:e6:63:a8:45:bb:5c:dd:a3:7f:e8:4f:1d:4e:72:
c4:5d:c2:ae:da:8b:4c:25:20:01:37:72:6a:4a:87:
23:cb:0c:af:9f:b9:09:c0:bd:c4:63:52:52:ca:5a:
ea:c5:90:cc:54:01:ef:8c:05:b3:44:5b:8d:5e:94:
67:70:04:3c:8f:e9:91:a4:fc:6c:63:8c:c0:07:74:
92:19:d4:52:7a:7a:5d:ae:a7:4c:fb:30:4b:c7:9f:
03:19:52:94:3b:ad:16:8e:51:fd:23:dc:be:10:e1:
5d:99:92:1b:ee:5d:48:9a:50:1e:fd:8a:01:38:f7:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:E7:9C:B6:E9:E4:B1:CA:E9:C5:62:43:CE:D9:3B:E7:57:31:F2
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:96:cf:bd:88:a6:58:fe:97:7d:f4:96:05:44:72:fd:58:
f7:c8:6a:1e:53:a1:72:f1:c8:73:13:3e:95:6f:88:1b:70:3e:
4c:b7:27:6a:b6:1b:77:5a:e0:57:4b:a4:21:b7:16:c3:f5:69:
1f:bd:64:96:dd:d2:69:ce:7d:57:ec:32:9b:7c:b7:7e:88:c4:
2e:14:10:4f:1a:d1:dd:dd:6a:b0:c9:8f:18:67:7a:f0:53:9d:
21:41:07:57:88:32:6c:45:ae:e7:8b:30:64:2d:1f:7c:1b:59:
30:44:c4:2a:ef:1e:6d:3f:48:af:fc:a9:b5:ce:7d:ce:49:35:
67:b4:d6:fe:d7:2c:c1:f4:3a:9d:d0:0b:f8:7f:2e:b1:c4:3d:
48:d5:d5:99:e8:9f:c2:26:ed:1c:58:5b:c0:82:ed:d7:1c:ff:
6b:39:c2:c3:e4:d2:bd:6e:19:0e:29:42:76:c3:07:67:a5:72:
56:2b:a8:ee:92:da:0d:02:9e:b4:43:89:dd:cb:e6:5e:71:1d:
b1:d2:21:d3:ce:dc:7a:0f:46:31:b1:70:0b:6f:b0:a1:9d:5f:
61:d8:85:76:1e:51:07:72:b2:57:f9:91:9a:6f:ca:fe:80:7b:
a3:1b:f3:96:90:d0:8f:c1:b3:fd:cb:01:a1:5b:b1:75:2c:ab:
5b:18:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:01:46 2026 by rpki-client