Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: R7xgSE2YwCox2P6jV0k4UIE5YxGdp3bWLVkSYWJm6d4=
Subject key identifier: FA:85:5A:3C:56:B9:06:E1:17:D7:C2:CD:CD:FD:FA:0E:7D:A4:E3:9B
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 01A104A55D605D1B28588BBEA9464D451D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 0280
Signing time: Sun 04 Oct 2026 02:01:48 +0000
Manifest this update: Sun 04 Oct 2026 02:01:48 +0000
Manifest next update: Mon 05 Oct 2026 02:01:48 +0000
Files and hashes: 1: ReF7sbHY1B07QZVzgRIRapYeTB8.asa (hash: CQtda0ci+sDMyX7f9klbApj5ykJisXrQDZEktVCqEUI=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: tD32yEPniXLAZZjvNJonDYqehmknCaE79JuDLw/lS48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:5d:60:5d:1b:28:58:8b:be:a9:46:4d:45:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Oct 4 02:01:48 2026 GMT
Not After : Oct 5 02:01:48 2026 GMT
Subject: CN=fa855a3c56b906e117d7c2cdcdfdfa0e7da4e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:ce:b4:e5:ec:82:85:bd:a9:62:00:dd:46:
94:89:cc:3f:13:0c:6b:ed:d0:d1:29:0a:c8:3f:c0:
9c:3c:80:a7:fb:27:04:8c:a0:2f:5b:85:b6:35:a7:
cc:fe:a9:f1:99:c0:78:c4:41:24:30:e3:3f:c0:5d:
94:f3:66:e5:dd:2f:8b:f2:28:b3:99:40:09:66:13:
1e:59:34:84:b7:67:a5:79:eb:26:58:ae:d8:be:95:
53:07:74:78:99:99:c9:82:3f:e9:2f:e2:29:f9:d8:
cf:de:47:57:b6:df:08:bc:56:17:2b:cf:55:1a:b7:
cd:a0:4a:7c:e4:72:39:a6:0b:5f:2a:c8:4e:c8:91:
3c:3f:44:c1:2e:0c:d9:ad:17:88:63:25:66:9f:b8:
be:14:1f:9c:32:89:b1:19:43:83:2a:a2:cf:ad:e1:
bb:42:5d:6b:e2:92:c3:05:04:ff:85:d5:77:65:5d:
13:c1:5d:9b:51:59:fd:19:9e:14:c6:35:ee:6d:18:
d9:cc:56:b1:49:3f:0d:ea:0c:28:c9:1f:1e:92:4a:
50:59:72:20:89:88:6b:ae:7f:81:b3:48:6d:5d:54:
50:75:04:34:f4:20:8a:08:84:f2:4c:9c:77:d5:74:
35:7f:f2:5d:fc:9c:24:23:25:02:db:1b:d5:7e:8a:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:5A:3C:56:B9:06:E1:17:D7:C2:CD:CD:FD:FA:0E:7D:A4:E3:9B
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4a:59:1a:e0:55:71:a4:91:8c:0d:c0:bf:96:af:00:b5:79:
f2:d2:15:fc:f0:52:87:30:60:ae:43:bf:a2:52:50:8b:0f:0b:
fb:43:e4:1a:32:af:22:5b:4e:32:27:12:b2:a4:52:09:c2:5f:
d1:f4:c6:f0:ff:90:65:f4:45:fe:30:ff:f9:2c:f1:22:b7:33:
6a:38:92:36:8f:01:73:79:93:63:da:97:5b:27:8c:6f:89:3b:
d8:c4:af:28:78:4c:30:84:f5:f8:75:25:0c:b6:b0:ac:e7:1a:
71:61:27:89:d6:c5:24:4e:86:b4:5a:e7:dd:7e:2b:a1:11:13:
17:f8:97:98:5a:6d:8c:9d:7e:ca:98:e6:43:d8:e7:73:74:8d:
27:b8:a9:78:c1:80:a9:dd:5d:a4:8a:98:e5:97:e1:24:50:a6:
4c:80:4a:a3:e6:94:58:ac:b5:40:4f:d1:4a:e3:49:b4:74:8a:
a8:02:1c:6a:db:ce:86:46:6c:45:a7:7d:f9:ad:ff:d6:9b:14:
b6:8d:1d:a0:db:e8:bc:3b:8e:5c:44:25:74:26:b8:d4:18:a2:
b8:01:ec:a2:37:92:c6:b6:56:b8:04:4a:db:ff:b1:c8:3b:96:
18:02:4b:05:54:2b:26:5e:18:4b:91:f6:36:fb:54:a3:6b:1c:
c5:00:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:44:50 2026 by rpki-client