Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: HP2NyD47wqVNAFBb8Guc3qJJfMENNpotn5gpiYup/ek=
Subject key identifier: 26:BB:2C:78:F1:F1:C4:67:7D:E5:5F:11:D7:41:6E:A4:67:01:19:3F
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019DCE99C32780E5C7AAAF776EBCBAD6B0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0C09
Signing time: Mon 27 Apr 2026 11:01:16 +0000
Manifest this update: Mon 27 Apr 2026 11:01:16 +0000
Manifest next update: Tue 28 Apr 2026 11:01:16 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: KNEkHZ/Dn2cj36Hn7IV/B5THujM14MClOwJOT1ZQ1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:c3:27:80:e5:c7:aa:af:77:6e:bc:ba:d6:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Apr 27 11:01:16 2026 GMT
Not After : Apr 28 11:01:16 2026 GMT
Subject: CN=26bb2c78f1f1c4677de55f11d7416ea46701193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:7f:f0:be:27:5e:79:d9:e7:98:f4:fa:63:
f7:fc:30:5c:0a:d2:9b:7f:3e:6f:46:81:0a:65:26:
04:4e:00:2b:a3:f3:c8:49:11:36:5c:a1:76:a1:23:
fe:31:5b:1a:f2:17:4d:b4:dd:09:38:59:1a:2c:2e:
29:47:fb:5f:e3:3e:f2:3a:eb:91:30:84:fb:cd:08:
80:13:62:0c:eb:39:cc:19:29:56:b9:79:7d:46:52:
0d:8f:5d:27:a3:da:ff:2a:5b:71:07:85:da:17:a2:
f1:bf:93:02:3b:46:30:f0:99:66:52:03:6f:a0:11:
ad:09:08:2e:26:d7:80:a9:07:8a:e8:5a:9e:ca:fa:
21:c1:23:30:7f:80:82:9c:58:61:5a:27:d0:dc:84:
d6:9a:5c:ab:23:e5:68:0f:78:2e:88:9b:9e:04:4f:
69:2a:1d:6f:ee:58:cb:71:f9:61:f1:45:dc:5c:30:
6c:32:7b:09:e9:ba:aa:a2:4f:2c:f7:40:da:0e:f9:
d2:a0:4c:3a:5c:cf:d3:f2:d0:45:cb:62:53:1f:ab:
e2:ff:11:d5:98:02:a7:57:75:1f:e9:0d:39:b8:89:
3a:b1:9e:be:ac:66:29:79:4c:8c:8e:bf:31:9a:33:
ea:89:c5:bc:13:55:48:5d:f8:ce:d8:5c:ba:bb:e0:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:2C:78:F1:F1:C4:67:7D:E5:5F:11:D7:41:6E:A4:67:01:19:3F
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:fe:53:ba:36:47:46:3c:6a:5a:35:2b:a5:80:43:52:fa:
91:fd:50:e7:08:b6:25:6d:d6:6f:55:60:bf:2b:e0:4f:44:36:
b8:6f:b1:cb:cc:14:56:0a:10:fd:e3:ed:c3:b8:b1:21:bc:16:
a3:67:5f:28:5a:08:05:72:ff:67:5f:15:d6:82:9a:dc:b1:97:
6f:79:41:f7:38:2e:7e:0b:0b:78:3c:f1:ce:8b:75:28:6f:2e:
5e:20:c1:d6:eb:d1:c8:e1:40:a8:b6:ab:c9:b7:85:7f:1b:40:
b6:e0:d4:82:62:ef:5d:70:65:7a:3b:56:5e:a0:f7:c7:82:4a:
3f:ae:0f:b6:ad:f1:39:7c:17:f0:e0:c3:18:76:73:c5:15:4d:
f4:89:9b:97:49:d2:20:28:bc:24:82:4c:84:f3:8a:ae:b8:2e:
e9:fc:a8:c3:4a:9e:d5:37:1c:11:e6:84:64:42:b5:79:b6:13:
ca:6d:6c:d0:11:57:40:a6:e1:8e:e2:2f:0a:e6:85:c6:87:8d:
87:0d:1f:31:e8:9d:0c:9b:56:e7:b1:4b:7a:b7:49:5c:54:f9:
6a:58:f5:14:df:0e:54:39:41:63:bb:9e:45:31:dc:cf:c0:98:
a5:57:9f:ff:36:96:83:a1:53:a0:59:ed:09:94:8e:05:88:21:
34:9e:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:41 2026 by rpki-client