Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: +w5wkEp+/P0u1OsrgSVYO+teImJGy2bHKeriXWDyQog=
Subject key identifier: 66:8E:33:60:44:D2:83:7A:90:C5:4F:4B:A0:6E:75:5C:B3:D9:31:E5
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019FA975A7D4D1BF00902E762FF9194CEE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 16:01:27 +0000
Manifest this update: Tue 28 Jul 2026 16:01:27 +0000
Manifest next update: Wed 29 Jul 2026 16:01:27 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 0IJaq5TDygrPDmxGiGgHz13sgmd9bH0WH+lB3S3DVew=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:a7:d4:d1:bf:00:90:2e:76:2f:f9:19:4c:ee:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jul 28 16:01:27 2026 GMT
Not After : Jul 29 16:01:27 2026 GMT
Subject: CN=668e336044d2837a90c54f4ba06e755cb3d931e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:43:13:54:6b:48:7f:3d:34:8d:6d:9c:c4:
8f:2b:c7:72:80:7b:95:50:34:e5:2b:59:54:28:c9:
36:dd:8f:07:55:f6:89:4e:9e:f2:7d:6c:62:cd:f0:
fe:23:dc:6f:6c:ab:77:92:ee:53:cb:6c:ae:75:1b:
cc:62:ea:2f:73:db:03:7a:0b:a7:e1:06:93:5a:2c:
76:eb:87:fe:6e:6b:65:b3:5d:eb:91:b4:32:0e:9d:
ec:79:f2:1f:4b:f5:e7:4b:f1:cf:4d:30:aa:0d:3a:
25:54:d0:14:d4:56:ee:70:3d:6a:1c:e9:eb:f5:96:
b8:1a:56:5b:dc:26:81:ea:6a:d5:57:77:0e:d0:f5:
f8:8a:9b:79:38:6d:1f:18:2d:b2:2c:17:14:38:ee:
25:ef:16:de:16:d3:3f:8d:b1:47:e6:65:9d:77:a8:
68:44:3e:cc:d7:e8:24:3f:0a:32:74:0d:31:25:2a:
d5:cf:e2:e2:fd:83:3c:e6:80:81:f0:d5:13:2f:3b:
2e:f3:45:35:7e:c6:34:f5:9c:11:19:c9:24:50:56:
10:3a:88:95:fe:a5:e8:9e:24:a1:9c:4f:85:e2:69:
56:d4:00:5d:34:04:35:78:09:e0:76:b3:92:f5:da:
51:22:45:56:6a:d3:cb:bd:f5:3d:4b:61:8f:67:e9:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:33:60:44:D2:83:7A:90:C5:4F:4B:A0:6E:75:5C:B3:D9:31:E5
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ad:e0:8d:93:18:23:41:11:00:cc:8d:bc:28:2c:50:8f:dd:
af:cb:9f:bf:4d:12:17:01:b4:15:5d:e5:11:f1:bc:a5:89:91:
b5:b5:ad:95:21:1b:f2:eb:b2:53:b3:5a:1c:ca:6e:8c:f3:f2:
91:9e:d8:a4:73:18:0d:8a:cd:3b:a1:e5:11:f5:48:9c:0a:8c:
31:d9:d6:8f:4f:8a:e9:56:27:f9:63:7a:fb:f6:5c:de:27:e4:
f8:41:cb:ea:61:0b:00:49:32:1e:1d:91:50:15:e0:46:0c:6b:
68:2e:75:c7:e1:31:34:9f:d1:0e:a3:4f:41:02:5b:6c:b7:91:
36:8f:da:43:6f:30:84:17:65:51:db:4e:83:36:30:08:09:a2:
77:78:4f:bb:6c:3d:36:07:d7:2c:c2:e2:84:54:d8:35:58:6a:
ed:28:21:88:18:25:3d:06:38:4a:3f:6d:21:36:93:4c:48:f0:
39:be:d5:1f:b8:2d:d0:fa:86:06:4d:70:91:05:68:b0:f1:a5:
d9:a3:54:11:7f:56:ca:aa:17:7b:a0:f5:34:da:ec:76:73:1e:
e6:1f:85:9b:4a:e8:26:93:9a:2f:4d:57:c6:53:f1:ae:ee:92:
fe:86:ca:26:5c:34:4a:c2:1b:7e:12:0f:4d:4d:b4:c2:67:ab:
35:90:33:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdafU0b8AkC52L/kZTO4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjYwNzI4MTYwMTI3WhcNMjYwNzI5MTYwMTI3WjAzMTEwLwYDVQQD
Eyg2NjhlMzM2MDQ0ZDI4MzdhOTBjNTRmNGJhMDZlNzU1Y2IzZDkzMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdDE1RrSH89NI1tnMSPK8dygHuV
UDTlK1lUKMk23Y8HVfaJTp7yfWxizfD+I9xvbKt3ku5Ty2yudRvMYuovc9sDegun
4QaTWix264f+bmtls13rkbQyDp3sefIfS/XnS/HPTTCqDTolVNAU1FbucD1qHOnr
9Za4GlZb3CaB6mrVV3cO0PX4ipt5OG0fGC2yLBcUOO4l7xbeFtM/jbFH5mWdd6ho
RD7M1+gkPwoydA0xJSrVz+Li/YM85oCB8NUTLzsu80U1fsY09ZwRGckkUFYQOoiV
/qXoniShnE+F4mlW1ABdNAQ1eAngdrOS9dpRIkVWatPLvfU9S2GPZ+m5awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaOM2BE0oN6kMVPS6BudVyz2THlMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwK3gjZMY
I0ERAMyNvCgsUI/dr8ufv00SFwG0FV3lEfG8pYmRtbWtlSEb8uuyU7NaHMpujPPy
kZ7YpHMYDYrNO6HlEfVInAqMMdnWj0+K6VYn+WN6+/Zc3ifk+EHL6mELAEkyHh2R
UBXgRgxraC51x+ExNJ/RDqNPQQJbbLeRNo/aQ28whBdlUdtOgzYwCAmid3hPu2w9
NgfXLMLihFTYNVhq7SghiBglPQY4Sj9tITaTTEjwOb7VH7gt0PqGBk1wkQVosPGl
2aNUEX9WyqoXe6D1NNrsdnMe5h+Fm0roJpOaL01XxlPxru6S/obKJlw0SsIbfhIP
TU20wmerNZAz4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:42:59 2026 by rpki-client