Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: h704KYvXsWXRO7KrnuOSDAJKw+e1lqDZkd99EYzPc4M=
Subject key identifier: 40:0A:19:7B:CD:F1:AE:88:51:F5:68:32:A2:D0:8B:36:23:F7:CD:66
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 01A186AD4B8028204B23AE39EA1229688240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0DF6
Signing time: Thu 29 Oct 2026 08:01:06 +0000
Manifest this update: Thu 29 Oct 2026 08:01:06 +0000
Manifest next update: Fri 30 Oct 2026 08:01:06 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: ofROy2D43Zk1lNxPI9aq9XNfX87wYpAa9XodfMjxAoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:4b:80:28:20:4b:23:ae:39:ea:12:29:68:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Oct 29 08:01:06 2026 GMT
Not After : Oct 30 08:01:06 2026 GMT
Subject: CN=400a197bcdf1ae8851f56832a2d08b3623f7cd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:c2:85:01:d8:54:ed:f9:95:31:c7:46:e5:
17:53:32:bf:90:31:00:b8:93:dc:cc:ab:77:83:b0:
d0:0c:ad:62:07:77:f3:cf:ad:53:ef:a1:96:fd:28:
22:89:cb:0a:db:d3:56:e0:4e:f8:77:36:5d:0b:11:
14:64:6d:a5:f7:c0:5e:06:2d:0b:0b:bf:8e:e5:67:
3e:80:12:17:3a:8e:46:bc:4b:ca:9d:f0:d5:4d:4b:
ef:5e:71:9d:8e:6a:f1:1c:e0:ad:76:13:0d:8c:25:
70:f8:1d:14:6d:ab:7e:73:82:af:51:c3:7c:b2:47:
4b:0f:15:84:50:98:ba:2a:86:16:c2:c4:c9:bb:fb:
5c:84:53:ec:74:7b:86:ce:a3:65:70:c9:e7:53:57:
ac:4c:f7:1b:47:2e:00:75:1a:da:0b:32:19:23:5c:
ea:4c:12:8f:22:20:78:92:ec:09:41:2e:97:3c:cf:
30:53:c0:a8:71:f7:c7:85:60:be:62:13:ae:23:f8:
b1:31:15:33:78:75:ad:5a:ce:a5:e9:53:83:62:22:
0f:16:43:ea:1c:69:e6:f4:43:8b:1b:31:c8:7e:c2:
47:af:db:84:ff:3c:49:2c:5f:2c:23:e3:22:66:fa:
f0:05:7a:b4:a0:bf:a7:bb:23:75:87:65:74:6b:67:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:19:7B:CD:F1:AE:88:51:F5:68:32:A2:D0:8B:36:23:F7:CD:66
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:8e:09:36:1a:53:b8:25:55:4c:05:f7:9d:ac:d7:6d:a5:
e0:11:ea:d1:e9:af:d6:6c:1e:64:1e:2a:62:a5:cc:75:d2:09:
ff:45:66:df:23:41:38:b6:1e:94:9f:e9:d4:f5:1e:ca:ec:39:
b5:08:d3:f9:e3:34:e2:6c:a2:4b:e4:a2:3e:05:cc:6e:e6:84:
c5:96:93:2b:0d:b3:25:40:13:cc:d2:61:a4:71:31:7f:b9:24:
20:2b:a5:8c:01:26:82:9e:2d:a8:6c:bf:93:dd:d6:96:60:66:
45:89:80:57:db:d8:e6:ac:75:e2:ea:a3:53:ac:47:f7:a7:4c:
4c:f8:6c:82:f4:60:ab:9d:7a:e1:27:a6:5e:86:82:24:99:c2:
ee:14:e6:80:cb:20:f6:25:4c:b2:01:9b:25:04:8c:69:95:a9:
fb:24:58:4f:73:8c:b6:df:ae:01:5e:51:d3:74:02:fd:48:8c:
85:a3:86:30:cc:ef:3f:16:58:4a:3c:d9:b8:35:0e:f0:c2:8c:
16:e1:55:bb:78:b1:ea:1c:c6:e1:5f:d3:d4:80:43:d1:56:32:
0a:5a:7f:e3:a5:c6:ba:cc:51:2b:0d:86:a2:1a:4b:92:28:ba:
ae:27:9d:35:91:a5:54:ca:90:8d:9c:28:0d:d8:20:ff:01:6f:
f6:bd:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:27 2026 by rpki-client