Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: D32x+Q6/M66fnz5xKM0F3+Ph5l0h1unzOHuS82kJqg4=
Subject key identifier: B5:ED:72:90:A4:15:56:56:26:53:5D:48:19:32:E3:B9:30:82:36:67
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019FA003E7278BC704CB6474300C23085D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0CFA
Signing time: Sun 26 Jul 2026 20:00:38 +0000
Manifest this update: Sun 26 Jul 2026 20:00:38 +0000
Manifest next update: Mon 27 Jul 2026 20:00:38 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: lCxeOWM1ZZ1jLlHwn7mJzqlCU5D1vI/yjz2kv+xncS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:e7:27:8b:c7:04:cb:64:74:30:0c:23:08:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jul 26 20:00:38 2026 GMT
Not After : Jul 27 20:00:38 2026 GMT
Subject: CN=b5ed7290a415565626535d481932e3b930823667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:20:d0:98:7d:3a:ae:93:65:18:3d:38:6f:
e0:66:a5:7f:ae:90:7f:a8:75:bc:38:d0:9a:8f:2b:
76:f0:fb:68:a2:b5:4d:02:06:eb:a2:57:56:d9:20:
32:b0:da:b5:0c:51:c7:03:f7:19:cc:dc:2a:c8:c2:
7d:eb:47:09:88:e0:b8:e3:e9:c1:9b:29:e7:31:27:
bd:95:6b:0b:17:6b:da:f7:77:f7:e5:94:0a:f9:64:
7c:a9:84:70:6c:7c:bb:b1:8c:73:06:c4:3e:58:b2:
bf:7d:82:77:a0:91:5d:0b:98:9f:7d:ec:e2:b5:28:
9f:e6:99:d9:b7:1a:2e:7d:8a:47:71:ff:3e:30:e5:
1c:ec:c6:6e:bb:84:81:57:6e:5c:c6:7a:bb:a5:76:
a2:1c:4d:2a:51:ce:7d:eb:4b:9e:d8:25:79:3e:33:
ae:8c:0a:16:ba:19:0f:0c:3f:f3:b6:75:ad:11:b3:
4b:f8:46:9b:9c:bf:da:0f:bf:73:34:2d:0d:1b:5f:
36:e2:95:39:bc:20:24:3a:dd:d2:0e:77:5a:ce:77:
41:4f:87:da:c3:c8:ce:d5:41:a2:a8:04:c8:f5:bb:
c9:be:cc:fc:aa:7d:40:9a:6c:a8:d3:e8:7b:17:f2:
59:6f:9d:d0:e6:71:23:10:ed:0b:93:bc:60:23:be:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:ED:72:90:A4:15:56:56:26:53:5D:48:19:32:E3:B9:30:82:36:67
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:2b:b0:81:02:e2:3d:eb:ef:bf:b4:a2:6c:0d:19:76:b8:
87:25:62:b7:fc:67:e0:de:db:28:1b:99:d3:82:ca:fc:62:a5:
dd:79:4d:db:de:fa:e2:fc:67:95:2f:29:3a:22:40:b1:6d:09:
bb:2e:70:70:4c:c7:30:c0:d6:32:57:cb:38:95:90:f0:ca:53:
9b:65:4f:cd:e8:b6:0a:9e:ea:1a:d7:79:6e:03:a2:b2:4b:8b:
3d:ce:91:81:c0:09:1d:70:22:18:7c:93:24:d9:8a:d1:68:39:
6e:8c:b7:d5:a2:7c:5d:d8:3b:a0:fe:6f:15:df:4e:38:38:10:
ee:9b:99:6c:21:e4:34:b7:ba:37:8a:5c:f7:4d:8f:00:19:e4:
68:7e:01:a7:60:f9:6b:80:9f:33:64:90:87:4c:1b:80:91:a6:
db:ef:69:f9:85:8a:c7:dc:3e:5c:8f:e4:09:16:5c:d9:80:80:
6b:f6:50:80:89:21:86:99:79:00:ac:4d:70:f8:6a:2c:1d:3d:
09:f2:b7:98:13:24:05:e0:52:cb:7b:fe:62:e8:50:4e:58:d0:
21:13:65:f2:87:c7:7d:81:03:4b:78:a6:70:77:ea:f6:4a:51:
36:37:a2:02:92:22:72:2c:12:85:0c:9c:ba:4c:27:ef:c4:db:
88:35:ee:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:20 2026 by rpki-client