Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: NHkclEqxRQLdtlwXhujovrgQg1DqVAwwQD+otYlJPms=
Subject key identifier: 4F:29:61:7B:AA:27:79:C2:C8:93:84:EE:48:68:E0:AA:93:56:91:0D
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 019D33E4156D0243A3E34B033877D84E1784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 85
Signing time: Sat 28 Mar 2026 10:01:18 +0000
Manifest this update: Sat 28 Mar 2026 10:01:18 +0000
Manifest next update: Sun 29 Mar 2026 10:01:18 +0000
Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: Wo6tPx4hcwe/y5XnJl9Zwax+LKi9PTALydalkfF/sE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:15:6d:02:43:a3:e3:4b:03:38:77:d8:4e:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Mar 28 10:01:18 2026 GMT
Not After : Mar 29 10:01:18 2026 GMT
Subject: CN=4f29617baa2779c2c89384ee4868e0aa9356910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:b7:cb:ff:df:80:8e:a3:9b:7d:ad:a9:04:
49:c2:4d:47:a6:c1:c3:8f:02:45:92:13:76:f4:71:
20:fd:7b:79:e0:df:db:88:39:f2:60:f7:2c:9d:3b:
43:af:80:81:71:5a:77:6b:e9:e4:2f:44:ff:5d:bf:
31:91:fe:9a:0e:40:b1:13:fa:1d:0e:cd:89:9d:1e:
f4:24:ae:e2:d5:59:86:3f:45:db:b2:ba:de:07:fb:
ae:9a:82:28:f0:7e:9c:a5:7b:bf:55:a5:a3:8c:07:
6e:ed:e0:b5:56:a7:32:96:a5:24:e5:49:0a:98:6b:
74:65:75:58:f3:a0:c7:75:68:c5:3f:34:26:27:2a:
2d:40:00:bd:01:7c:c5:0c:88:6c:db:f7:2c:a8:37:
68:30:58:45:12:2d:3d:71:ed:01:86:d8:2d:2c:38:
ae:3f:6f:15:15:4a:fa:79:2e:c1:d7:36:d2:f9:a3:
95:e2:ba:32:57:0f:1f:42:ee:58:2a:2b:78:f7:73:
29:8f:3b:cf:98:2a:92:35:04:ad:41:a1:63:af:14:
f0:af:0f:47:13:90:37:8e:44:d1:76:72:d1:e8:d3:
ad:a6:c1:75:70:fc:ef:ac:61:2e:8d:d1:d5:eb:54:
18:ae:6b:b2:f1:31:f7:bd:b1:5c:48:78:cf:bb:f9:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:61:7B:AA:27:79:C2:C8:93:84:EE:48:68:E0:AA:93:56:91:0D
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:17:88:ad:d6:1c:62:4d:40:53:f1:cd:77:16:33:ac:72:19:
c3:30:50:e9:9c:35:30:11:ae:da:6f:25:94:d1:9d:2f:a5:65:
d5:ba:1e:5e:c9:b6:0b:a3:55:08:ae:ba:29:ac:57:ad:3f:b0:
51:cf:85:c6:84:8f:6d:6c:2a:38:fb:4b:03:e5:27:f5:c8:47:
1c:8e:23:66:8b:93:01:f3:b1:ad:f5:bb:90:0f:b6:a3:4e:e3:
ea:5a:da:50:e9:2b:16:33:27:a2:79:d1:11:50:f9:bb:87:93:
3b:d7:97:b2:a0:ff:f3:77:77:a3:6a:c7:b8:78:9b:21:4f:cc:
42:79:31:40:2f:28:e5:0f:03:a8:11:de:fe:9d:a7:ef:a8:f3:
f4:7c:b5:57:a8:2e:a3:2d:a8:36:18:6d:82:b5:c3:ec:28:a2:
79:b3:62:90:fc:97:80:a8:dd:fa:bd:2a:75:77:9e:63:d5:a5:
f5:b7:69:b1:67:b8:35:6f:b3:c9:36:96:a2:11:ee:97:2b:52:
e8:11:ce:62:29:09:10:ca:ea:bf:6f:a4:2f:a9:6f:a6:0b:bc:
a0:82:0c:00:0d:75:b6:1e:bd:b0:17:a0:6c:b0:f5:7d:9d:ff:
b5:d5:e3:66:f8:ce:ce:f8:e6:62:d8:86:08:b9:84:cf:67:65:
99:45:8a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z5BVtAkOj40sDOHfYTheEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzkwZDRmN2RjNjVhYWM2M2U1M2QyMWUxYjYwYjE0Nzcw
NzhkYzMwHhcNMjYwMzI4MTAwMTE4WhcNMjYwMzI5MTAwMTE4WjAzMTEwLwYDVQQD
Eyg0ZjI5NjE3YmFhMjc3OWMyYzg5Mzg0ZWU0ODY4ZTBhYTkzNTY5MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlK3y//fgI6jm32tqQRJwk1HpsHD
jwJFkhN29HEg/Xt54N/biDnyYPcsnTtDr4CBcVp3a+nkL0T/Xb8xkf6aDkCxE/od
Ds2JnR70JK7i1VmGP0XbsrreB/uumoIo8H6cpXu/VaWjjAdu7eC1VqcylqUk5UkK
mGt0ZXVY86DHdWjFPzQmJyotQAC9AXzFDIhs2/csqDdoMFhFEi09ce0BhtgtLDiu
P28VFUr6eS7B1zbS+aOV4royVw8fQu5YKit493MpjzvPmCqSNQStQaFjrxTwrw9H
E5A3jkTRdnLR6NOtpsF1cPzvrGEujdHV61QYrmuy8TH3vbFcSHjPu/m4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8pYXuqJ3nCyJOE7kho4KqTVpENMB8GA1UdIwQY
MBaAFJ7JDU99xlqsY+U9IeG2CxR3B43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUt
YzM3NDFlNGQzZTc0LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUtYzM3NDFlNGQzZTc0
LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBeIrdYc
Yk1AU/HNdxYzrHIZwzBQ6Zw1MBGu2m8llNGdL6Vl1boeXsm2C6NVCK66KaxXrT+w
Uc+FxoSPbWwqOPtLA+Un9chHHI4jZouTAfOxrfW7kA+2o07j6lraUOkrFjMnonnR
EVD5u4eTO9eXsqD/83d3o2rHuHibIU/MQnkxQC8o5Q8DqBHe/p2n76jz9Hy1V6gu
oy2oNhhtgrXD7CiiebNikPyXgKjd+r0qdXeeY9Wl9bdpsWe4NW+zyTaWohHulytS
6BHOYikJEMrqv2+kL6lvpgu8oIIMAA11th69sBegbLD1fZ3/tdXjZvjOzvjmYtiG
CLmEz2dlmUWKjA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:26:11 2026 by rpki-client