Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: dGN9crEcm0I4+lflHbFIBZCkCDfSISE+oGzhbqFkBSk=
Subject key identifier: DB:C8:09:35:32:1F:F9:28:AA:A4:58:D6:A5:43:90:6F:C0:F2:D3:49
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019CE4EC70BE182875DE119CFD829F41D3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0B90
Signing time: Fri 13 Mar 2026 02:00:26 +0000
Manifest this update: Fri 13 Mar 2026 02:00:26 +0000
Manifest next update: Sat 14 Mar 2026 02:00:26 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: 7pLASffLqIbTJVfZjbf1RvNnylvgXBb5EkOGYn6fcgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:70:be:18:28:75:de:11:9c:fd:82:9f:41:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Mar 13 02:00:26 2026 GMT
Not After : Mar 14 02:00:26 2026 GMT
Subject: CN=dbc80935321ff928aaa458d6a543906fc0f2d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:0f:48:96:84:ed:db:b5:5b:36:6d:ae:3a:
5b:a4:a0:03:48:34:77:61:5f:f9:26:ca:dc:b8:81:
35:33:27:e6:28:dc:6c:be:59:91:2b:24:40:e1:9e:
42:55:d3:f2:67:50:53:1b:f0:e5:07:cc:3e:81:78:
69:ab:e0:5e:63:62:b8:e6:4d:b5:f8:02:00:95:c3:
6b:53:75:ab:79:ee:76:bd:9c:16:e2:15:64:65:50:
63:7c:3e:db:54:0b:d5:fa:2f:78:53:24:03:4d:f8:
e5:fe:2a:7d:b0:c6:95:8a:f0:18:76:b6:71:17:f9:
25:d9:eb:63:76:ce:f2:d9:d4:87:e0:6b:fc:66:94:
ce:22:26:3b:23:ef:21:27:3f:77:38:1a:f3:c7:2d:
6f:f1:12:33:f3:bd:8b:88:c5:bf:2a:61:07:b5:ce:
73:c4:2d:43:bf:d9:3c:89:b9:59:ab:d6:b3:65:b2:
3b:36:44:59:3c:d0:43:53:57:88:fb:45:08:a5:dd:
00:f5:9a:8d:ae:a3:5c:2f:d2:97:89:ef:9c:49:55:
13:67:7e:ec:6c:c0:da:bf:cf:26:0c:fe:e7:6d:db:
ef:0a:c0:4c:55:6a:df:47:ef:8f:99:45:d2:37:12:
cb:eb:c9:5e:f1:89:8e:9f:d4:6f:5e:cb:29:84:8d:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:09:35:32:1F:F9:28:AA:A4:58:D6:A5:43:90:6F:C0:F2:D3:49
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cd:f5:0a:e8:b5:5e:ff:68:91:dd:d7:37:45:2c:63:60:23:
71:f7:f3:7b:d4:87:af:d9:5a:4f:df:6e:89:e0:83:4f:0a:47:
67:ff:9a:21:27:15:b5:f0:d4:54:31:d6:6a:11:c0:af:c9:ca:
26:51:bc:c4:79:0e:15:02:fa:51:81:24:75:70:b3:1a:0d:de:
71:fe:44:bd:98:29:55:f6:58:13:99:57:09:5e:f2:68:95:41:
bc:5f:d7:6b:77:ee:7c:b2:df:e8:b4:96:93:37:75:2d:a8:67:
2f:66:4d:1e:d2:4e:16:96:c0:75:06:aa:96:54:da:de:18:01:
0d:b3:d2:a3:01:ba:01:40:cf:7a:3f:d1:5a:61:fa:93:79:80:
49:d3:2a:da:60:61:c8:93:49:4c:9a:6a:31:a8:3e:b0:a0:9c:
2d:b6:32:84:2f:59:97:f3:f6:55:94:49:0d:c8:33:22:60:43:
32:fd:8c:5e:83:c5:33:76:0a:3c:14:ab:61:54:b7:1f:43:4d:
46:19:bf:b8:b1:c5:46:5b:12:b9:12:be:8c:2b:11:77:27:5b:
2b:94:13:1d:11:1e:fc:bd:9f:56:b5:a8:e6:de:87:7c:d4:93:
60:94:78:39:44:fa:d3:cb:61:69:84:21:13:d4:5f:fe:72:f5:
75:70:ab:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:56 2026 by rpki-client