Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: XEVBWe1BnBB2Wr8V4fYZ5q1CSLiWotsIsCkqYyuAHMM=
Subject key identifier: BE:CE:3F:A0:AA:3B:99:75:90:86:47:29:70:8D:24:75:5E:84:77:DB
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019D390A0DD4630E1621B75C1086DA65A39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: P6MvyijEdfDH8PowPKZBFJvbCwc.roa (hash: QIBBo/B7mvu6Y0jpzZUhzPlgiko0hJqHLmPYVtkObOo=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: 4NRsWg3w1bA/qP7B9B6ELpeV2tVSST45CWUgDpYHovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0d:d4:63:0e:16:21:b7:5c:10:86:da:65:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=bece3fa0aa3b997590864729708d24755e8477db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:6e:9b:7f:6d:63:7b:2e:b9:9a:a1:1e:df:
bd:20:17:68:5e:63:75:d4:76:e6:f1:f2:d7:40:35:
b8:48:5d:91:59:e7:74:1c:72:86:c1:28:6d:1b:e6:
69:58:8e:f2:85:71:59:c5:4e:39:1e:95:6e:24:92:
de:1c:40:9e:f3:f7:a4:6f:cb:0a:b1:2e:a5:49:7f:
26:12:c4:1e:24:d5:82:ec:7e:a0:80:99:bc:04:9d:
a4:60:9a:74:4d:09:42:7a:c5:c1:d2:6e:42:c2:5e:
07:7f:7c:4e:bf:a1:10:8d:75:2f:2e:ab:4c:f7:a7:
7f:7c:93:38:58:a1:49:a9:4c:49:31:e2:92:22:e3:
1f:90:71:a4:a2:d6:90:64:27:5e:d3:f1:9d:ca:c4:
19:af:b3:f9:30:64:8c:86:5c:c2:88:59:b0:4d:23:
ed:51:f7:2b:bb:76:e9:c4:36:12:14:0e:f3:b3:7d:
5f:18:33:a6:7f:64:9b:1c:1f:8e:61:7f:e2:2b:5e:
5e:1b:bc:42:ff:62:9f:42:98:90:53:5e:1d:4d:27:
89:ee:2f:25:77:86:e0:ef:12:80:1f:07:3d:85:ce:
15:6e:f2:af:60:f6:eb:8e:a7:99:aa:ac:b4:db:bc:
96:71:46:e9:57:82:40:52:38:0a:28:3c:a1:4b:3a:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:3F:A0:AA:3B:99:75:90:86:47:29:70:8D:24:75:5E:84:77:DB
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b7:9d:0b:0f:2d:5c:3e:72:46:99:c3:c5:b4:6b:d0:08:5a:
62:63:36:43:77:44:fc:f6:4c:0b:fb:ab:35:a9:3f:ba:5b:8d:
42:b2:85:1d:ff:3d:b4:bc:e2:bc:60:c0:be:a6:f6:b2:68:9f:
21:99:f5:66:9e:38:22:00:a3:79:8a:30:f6:6d:f1:d4:71:b9:
08:fb:6f:79:ed:86:13:f8:dc:68:89:86:dc:a1:5a:18:f2:c3:
04:e5:0a:51:19:c6:b3:08:b3:f8:46:b2:98:4f:b7:49:a2:4f:
94:9d:d8:ad:c2:2c:e6:c4:f6:18:3f:ad:c5:1c:53:c9:b9:3f:
48:7c:64:de:12:a5:a4:ec:c4:77:5b:1c:da:c9:11:00:47:2b:
7c:1d:22:91:d9:34:85:61:2a:df:b0:fc:3e:ca:e4:34:11:ba:
3f:47:73:69:0f:2c:b8:60:81:96:3f:2f:31:b5:51:c9:f6:0d:
27:71:29:4f:f7:fa:79:b1:c7:94:a1:b5:20:d9:aa:ba:98:4e:
f7:48:26:24:f4:e2:1f:68:f1:0f:44:c1:1f:37:08:82:ae:49:
6c:78:86:1a:19:5a:f2:93:b6:dd:db:3b:cc:c3:20:8f:ca:5a:
a0:75:6a:09:66:bc:3e:b2:19:56:6e:b8:10:f5:59:5d:82:6e:
42:a7:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:00 2026 by rpki-client