Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: CZnL+sDeCuevvQPE/ydHhB+ar4S2OLckasqiuCa5btI=
Subject key identifier: 3F:98:91:DA:3F:BB:92:82:1D:FF:14:AE:54:62:1C:10:93:60:CD:07
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 019FF6B4BB8CB9A8D4AFD5CCA359F8C447A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 01F3
Signing time: Wed 12 Aug 2026 16:01:07 +0000
Manifest this update: Wed 12 Aug 2026 16:01:07 +0000
Manifest next update: Thu 13 Aug 2026 16:01:07 +0000
Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: G/ZKmzEiONVWKZt5yN8SP+3k9cfTbyfRW0HM7xEUzs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b4:bb:8c:b9:a8:d4:af:d5:cc:a3:59:f8:c4:47:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Aug 12 16:01:07 2026 GMT
Not After : Aug 13 16:01:07 2026 GMT
Subject: CN=3f9891da3fbb92821dff14ae54621c109360cd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:93:fb:a8:17:58:22:4b:a8:7b:00:3e:5d:
e1:64:3f:25:df:dc:2c:36:a8:b9:9e:3c:09:45:4b:
9a:82:da:cb:29:35:93:e3:b5:b7:54:59:60:d1:81:
4d:dd:76:64:22:0f:3f:4d:a2:73:a4:0e:30:74:60:
f4:78:8d:86:ad:1a:0a:4c:0f:40:de:82:9d:63:fc:
15:1e:de:33:63:bc:78:25:fa:69:ed:e8:47:7b:5e:
82:55:73:f6:f6:0e:26:f8:a9:e8:61:2b:84:2c:3a:
21:23:c4:8f:ce:84:33:21:de:e2:13:3a:42:5e:34:
f1:58:1f:a0:07:c1:51:5a:b1:8b:a8:cb:a9:86:c4:
14:e5:32:67:63:36:60:bd:9a:d2:fc:18:7b:40:d5:
2a:21:5f:8b:a2:46:e2:69:ed:e4:63:18:19:fb:1e:
1c:a4:4e:07:9e:4f:60:a9:42:82:77:1a:c0:9d:a5:
ad:1a:31:c3:fb:ea:e6:be:27:20:ee:19:33:3b:6a:
ec:09:0e:73:da:42:54:90:06:2b:07:ee:12:a0:c2:
d9:7e:3d:ed:ef:51:4c:11:b1:be:19:de:f4:e1:45:
c5:e3:83:f7:c9:9f:c2:f5:36:93:20:2f:65:c4:d5:
d1:ff:54:cc:a1:b4:ff:ed:d3:35:78:68:ca:50:0c:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:91:DA:3F:BB:92:82:1D:FF:14:AE:54:62:1C:10:93:60:CD:07
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:3c:01:99:0a:2f:b6:52:d8:9a:f6:93:28:2c:de:e2:26:
c9:73:8f:20:bb:8b:80:2d:96:c3:99:2a:25:80:3c:05:ed:ca:
69:09:ff:cf:28:1e:dd:a9:48:cb:79:21:7d:4b:c7:11:ac:99:
fa:e1:dc:0c:8e:5b:b6:7f:b2:97:c7:5a:17:ba:be:c5:27:5d:
b4:37:65:16:f0:7b:3e:fa:da:77:69:87:4e:a5:4a:10:6f:c3:
76:eb:26:1f:52:ab:f5:a5:f9:58:97:9d:d9:76:5a:68:fe:7d:
62:b5:02:f5:cb:b9:96:8e:1c:ef:e9:bf:03:e2:cb:10:f7:59:
1d:08:73:15:7f:c8:3c:21:9d:b0:22:61:61:60:1d:ab:71:44:
35:fb:7f:f9:bd:80:24:cc:bb:cf:37:fd:75:68:81:c7:01:5c:
c5:8f:4f:d1:88:b1:6c:24:51:55:3d:a2:e8:e8:51:0f:c7:64:
33:7d:f6:38:31:84:76:0d:fe:c9:ca:bc:82:7c:b4:00:c9:19:
ca:c4:8b:a9:0c:24:6d:69:ee:11:43:32:79:23:57:b5:a5:b2:
b0:af:00:5b:95:51:3b:93:c8:3e:7d:44:81:42:1f:3a:f0:7d:
2b:7a:43:8f:68:c3:10:9f:bd:da:49:bf:10:0f:0f:cd:b9:48:
6f:61:0d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:36:37 2026 by rpki-client