Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: mlHwfWWJogTnL9Nc4yUPXLQLwNVsjJ0RvwBjx2V/1iM=
Subject key identifier: 96:9F:85:E6:E0:5D:B3:A3:5D:65:8D:49:4F:61:5A:6A:29:96:3E:2B
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 01A0EF67291E5AA0FC0C741A1A10C91BDB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 0275
Signing time: Tue 29 Sep 2026 23:01:50 +0000
Manifest this update: Tue 29 Sep 2026 23:01:50 +0000
Manifest next update: Wed 30 Sep 2026 23:01:50 +0000
Files and hashes: 1: ReF7sbHY1B07QZVzgRIRapYeTB8.asa (hash: CQtda0ci+sDMyX7f9klbApj5ykJisXrQDZEktVCqEUI=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: 3YVkpq9JB37m8XufooqqOyKvymtHoW7j6outXJOqlyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:67:29:1e:5a:a0:fc:0c:74:1a:1a:10:c9:1b:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Sep 29 23:01:50 2026 GMT
Not After : Sep 30 23:01:50 2026 GMT
Subject: CN=969f85e6e05db3a35d658d494f615a6a29963e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:7a:69:0f:61:03:f5:49:c7:08:10:e4:98:
69:1e:3f:44:2a:6e:06:a7:44:38:6d:a9:e9:d4:8d:
82:71:19:8b:89:a0:71:0d:56:1b:65:8a:27:e2:59:
5a:4e:57:70:ca:5e:2e:6b:e3:17:aa:27:f2:f1:aa:
b2:eb:9e:b0:ab:77:fa:ae:94:53:b5:25:4f:dc:96:
ca:15:4c:c4:7c:f0:c0:47:d7:e7:9b:76:88:bd:02:
0b:4e:f1:39:81:cb:64:7b:41:a5:83:79:3a:c3:cf:
aa:2a:ee:e0:44:79:0a:21:b3:34:4b:32:b3:13:fd:
e4:7d:8d:b8:d0:37:21:39:51:9b:92:4b:6f:79:57:
ba:bb:0a:13:cc:04:d0:93:6d:28:df:48:bc:34:c8:
ad:0f:2c:f1:f5:a2:f7:95:c2:fb:90:86:bb:a7:73:
e6:61:71:20:43:88:d3:66:37:72:1b:a6:a9:78:bb:
b7:50:77:33:34:fc:4b:49:86:57:b2:41:20:35:df:
d9:ec:ab:a2:0d:67:4f:03:81:8a:f7:d8:b7:c6:e9:
9a:8a:e5:2e:10:75:32:25:f8:da:13:3f:65:93:58:
83:58:d9:61:79:93:95:dc:61:57:8b:70:1e:40:78:
d1:b2:d9:fb:70:0b:01:65:c4:26:a5:2f:f7:6b:f1:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:85:E6:E0:5D:B3:A3:5D:65:8D:49:4F:61:5A:6A:29:96:3E:2B
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2c:e7:a1:44:15:8b:a3:52:d6:cc:89:73:fc:49:f4:6d:f3:
ef:40:10:85:fe:44:89:db:1d:80:42:5e:a9:0c:60:d8:2a:86:
d9:38:87:c2:ed:bf:dc:b7:65:c3:c1:e7:55:2d:bd:27:00:af:
09:c1:32:90:a1:74:59:2e:1b:a9:75:26:89:63:0e:e1:97:b3:
1c:47:37:5c:ba:60:48:72:ac:4f:7d:69:bc:74:b9:4a:a3:31:
a0:e5:ee:cd:88:a8:5c:cc:a4:3a:b8:58:23:b4:72:8b:ce:3e:
84:e6:0a:0b:74:68:af:0a:3a:16:f7:3e:a3:a3:08:36:03:ef:
10:47:9c:13:4c:ff:8e:ab:7d:de:92:70:9f:0f:6a:29:28:95:
84:1c:f8:65:35:e0:2a:b4:3e:9a:a0:8f:d3:09:38:8b:66:6b:
98:fb:60:4d:a6:37:a4:c0:2d:1f:a1:2a:ba:97:a2:1d:9c:b0:
62:ff:6c:49:13:aa:40:2d:e9:f9:0f:58:48:1a:a4:cc:d5:a0:
46:1d:c4:48:94:f0:e8:22:d3:d2:1a:2e:28:cf:bb:2f:bb:e2:
b7:d4:0d:20:e1:a4:05:85:cd:60:3e:88:ba:44:c1:01:78:44:
d9:68:3b:59:f6:be:49:23:d8:db:20:c6:46:3a:f7:69:ba:9d:
87:16:6a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDvZykeWqD8DHQaGhDJG9s8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzkwZDRmN2RjNjVhYWM2M2U1M2QyMWUxYjYwYjE0Nzcw
NzhkYzMwHhcNMjYwOTI5MjMwMTUwWhcNMjYwOTMwMjMwMTUwWjAzMTEwLwYDVQQD
Eyg5NjlmODVlNmUwNWRiM2EzNWQ2NThkNDk0ZjYxNWE2YTI5OTYzZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3t6aQ9hA/VJxwgQ5JhpHj9EKm4G
p0Q4banp1I2CcRmLiaBxDVYbZYon4llaTldwyl4ua+MXqify8aqy656wq3f6rpRT
tSVP3JbKFUzEfPDAR9fnm3aIvQILTvE5gctke0Glg3k6w8+qKu7gRHkKIbM0SzKz
E/3kfY240DchOVGbkktveVe6uwoTzATQk20o30i8NMitDyzx9aL3lcL7kIa7p3Pm
YXEgQ4jTZjdyG6apeLu3UHczNPxLSYZXskEgNd/Z7KuiDWdPA4GK99i3xumaiuUu
EHUyJfjaEz9lk1iDWNlheZOV3GFXi3AeQHjRstn7cAsBZcQmpS/3a/ERSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJafhebgXbOjXWWNSU9hWmoplj4rMB8GA1UdIwQY
MBaAFJ7JDU99xlqsY+U9IeG2CxR3B43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUt
YzM3NDFlNGQzZTc0LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUtYzM3NDFlNGQzZTc0
LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCznoUQV
i6NS1syJc/xJ9G3z70AQhf5EidsdgEJeqQxg2CqG2TiHwu2/3Ldlw8HnVS29JwCv
CcEykKF0WS4bqXUmiWMO4ZezHEc3XLpgSHKsT31pvHS5SqMxoOXuzYioXMykOrhY
I7Ryi84+hOYKC3Rorwo6Fvc+o6MINgPvEEecE0z/jqt93pJwnw9qKSiVhBz4ZTXg
KrQ+mqCP0wk4i2ZrmPtgTaY3pMAtH6EqupeiHZywYv9sSROqQC3p+Q9YSBqkzNWg
Rh3ESJTw6CLT0houKM+7L7vit9QNIOGkBYXNYD6IukTBAXhE2Wg7Wfa+SSPY2yDG
Rjr3abqdhxZq3A==
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:01:13 2026 by rpki-client