Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: 6+87WHq0Jjk34VzM1NUzOgM5ujfcBP9I3UHfuEXmd20=
Subject key identifier: F2:BC:39:EF:E2:45:98:20:77:DB:1F:AB:68:38:46:DA:E8:7E:F7:49
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 01A08B9F08AE3D10CC59430EE07C6A897722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0D74
Signing time: Thu 10 Sep 2026 14:00:50 +0000
Manifest this update: Thu 10 Sep 2026 14:00:50 +0000
Manifest next update: Fri 11 Sep 2026 14:00:50 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: j9fa1j0LU39yfKXcrTyI8yfl0IW2xQY7dMUnPAQqeAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:08:ae:3d:10:cc:59:43:0e:e0:7c:6a:89:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Sep 10 14:00:50 2026 GMT
Not After : Sep 11 14:00:50 2026 GMT
Subject: CN=f2bc39efe245982077db1fab683846dae87ef749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:1a:a4:af:b2:cd:60:87:99:31:48:1f:dd:
95:b1:0f:10:f2:44:42:54:1f:13:cb:14:3b:1b:02:
8f:a2:9f:e3:0e:62:c4:c8:6e:09:3f:2d:46:3a:f4:
3a:16:32:3b:bd:dd:41:81:e3:24:b0:e3:d9:7a:b7:
f5:bb:2b:c5:1f:78:84:b6:89:4a:2a:9f:d0:33:fa:
32:84:b1:6f:88:25:a4:56:fa:63:26:35:61:a2:ef:
4a:71:fa:89:80:8a:ba:f3:2e:0a:ff:64:81:67:9c:
54:3c:2f:ca:8b:ce:2e:6b:57:c6:96:2e:91:75:5d:
4f:98:32:ae:8a:b1:7d:13:d6:26:83:cd:14:2e:20:
e3:cb:0a:c0:83:ee:cf:cc:35:05:2f:1c:41:97:ca:
aa:34:92:2a:ef:1d:20:49:36:14:52:b1:82:2d:85:
f7:d2:08:63:97:94:66:b2:88:ee:e1:a3:77:f8:e6:
cf:a2:ac:ee:84:89:78:d6:45:44:7d:ba:fa:a5:aa:
7b:1c:bd:b6:35:36:b8:0e:14:85:23:b5:56:af:29:
24:19:79:ba:67:49:40:d9:aa:ad:21:14:3a:b3:cf:
80:e7:be:9b:4b:d6:da:22:d9:54:63:85:a0:35:34:
80:f9:2e:9d:43:0c:f4:93:7f:b7:cc:e5:1f:e3:5a:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:39:EF:E2:45:98:20:77:DB:1F:AB:68:38:46:DA:E8:7E:F7:49
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:7d:ea:45:51:96:57:3d:4a:b2:33:d9:4e:be:ce:32:90:
57:21:16:73:81:c9:ef:82:b9:e7:91:01:85:40:2c:c4:b6:12:
ca:f0:c6:55:30:97:92:19:49:d2:8f:e6:13:a4:66:fd:fe:70:
68:d8:62:68:15:ac:bb:0a:07:98:4e:ee:1a:5e:72:69:3e:68:
28:2d:8d:f2:63:96:7b:0c:6f:99:ce:01:38:21:27:a4:94:f7:
77:0b:67:f2:7e:71:cc:4c:1e:0e:3b:39:9f:d6:d8:39:86:69:
9d:55:ed:66:77:b3:3d:20:95:af:c9:8b:00:85:fb:ed:57:6d:
54:57:99:6d:05:d8:73:6e:93:6d:05:26:f1:7e:bf:d7:a3:45:
d7:25:ca:3b:8c:68:9a:23:72:34:e6:5f:2f:dd:3a:c9:22:f4:
ac:cf:2c:d8:3a:ff:23:e9:9d:5c:6e:76:63:fd:e1:8c:e9:f5:
4a:95:54:c7:9f:15:86:6f:4f:bb:10:b9:1e:b1:2d:27:94:bb:
27:0c:c0:5c:73:41:16:43:73:c7:35:c9:a4:d4:9a:70:65:00:
36:18:f4:cd:2c:e3:e2:55:5a:54:8e:19:fc:6e:aa:09:2e:2e:
da:35:bb:33:93:48:93:7c:5d:02:43:c6:48:cb:3b:db:d9:5c:
43:17:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:36:53 2026 by rpki-client