Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: IE5ujqbuE/u4nVHxfw3Up/V4Ds/t56GXNIDj8gGG34s=
Subject key identifier: F8:8A:63:B1:77:63:8B:B5:2A:F1:55:46:B6:CB:C4:98:B6:98:5F:19
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A0C55817BF4647FB2AE9CF8A93D63B7B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 19:01:19 +0000
Manifest this update: Mon 21 Sep 2026 19:01:19 +0000
Manifest next update: Tue 22 Sep 2026 19:01:19 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: KqgGcO2kHlz6SksG2qGoNP1c16loz8S/qw244EDxahM=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:58:17:bf:46:47:fb:2a:e9:cf:8a:93:d6:3b:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Sep 21 19:01:19 2026 GMT
Not After : Sep 22 19:01:19 2026 GMT
Subject: CN=f88a63b177638bb52af15546b6cbc498b6985f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:ba:ec:a5:15:22:fd:c9:f5:10:21:f5:67:
8f:b3:c6:8a:6c:12:e1:8a:1d:8a:c7:e4:1d:1d:12:
15:ec:0a:e6:3b:8d:93:99:64:fa:c1:4f:20:71:82:
b3:41:02:c5:fb:45:dd:26:70:43:ca:2b:65:3e:6e:
d0:83:92:b2:63:32:42:fc:03:36:00:0e:15:a5:8e:
49:f2:e5:11:22:cf:72:d6:5b:d9:b3:68:f1:af:55:
d7:e6:cd:67:b0:c1:cb:b5:ba:ca:d1:0d:d6:d0:99:
c2:a5:bc:e1:8c:bd:ce:3e:d2:64:22:f6:98:af:7c:
10:5b:b9:7f:a8:57:eb:88:8a:15:7c:cf:1b:cf:93:
cb:5e:d5:ce:86:59:45:74:71:76:8f:96:e5:80:e4:
a2:4e:c8:74:2c:96:b2:60:0c:a4:70:72:0d:60:f7:
60:94:84:1e:23:93:06:ac:50:71:b0:b1:1a:e9:ed:
84:a2:8f:cf:a7:f6:1d:5d:04:e0:77:f7:49:9b:de:
25:6a:41:c6:af:3d:8a:c6:a7:66:d7:c0:66:fc:54:
95:a4:50:ee:7d:68:1b:9b:cb:c8:b0:77:d1:10:fb:
18:12:f4:22:f1:8f:3e:4e:77:6e:b8:a7:2e:02:bc:
48:a6:a3:38:9e:1f:ab:ad:de:63:4e:39:2d:9f:e3:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:63:B1:77:63:8B:B5:2A:F1:55:46:B6:CB:C4:98:B6:98:5F:19
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:61:b9:fd:2b:c4:f3:ad:62:2f:4e:9e:10:26:ec:ac:bc:92:
d2:d4:be:6b:3b:a4:79:4b:a9:49:eb:0b:0e:bb:2d:a1:7d:23:
53:4d:5c:f3:d0:2d:71:98:58:a6:4b:8e:c3:a7:71:53:d9:77:
22:a7:91:aa:7a:f9:f5:c3:bb:1d:ef:b0:a1:79:39:f8:81:87:
e4:2b:e2:66:23:a4:66:94:54:dd:af:ef:20:ed:0c:84:3e:09:
5e:48:34:fb:32:5c:89:6a:c2:bb:92:7d:81:4a:d4:87:ad:dc:
d1:23:a3:68:06:4e:ec:8f:3d:de:6d:72:42:58:62:e0:fc:26:
56:09:e0:de:5b:87:a6:a8:32:8c:43:6d:d9:a2:97:a0:1c:24:
20:aa:09:e7:97:95:29:9e:7e:68:fa:c6:0f:c2:ac:77:cc:f3:
44:42:c1:22:5f:dd:9d:ea:a9:05:c2:25:8f:31:94:74:f0:79:
76:11:39:f8:93:77:84:b8:94:02:77:44:b7:5a:46:8a:10:8d:
ff:ea:be:ca:ab:a5:7b:00:9c:2b:ea:a5:ee:61:27:63:18:02:
30:0f:c4:d9:c8:a8:76:2b:b9:aa:c2:37:57:24:38:96:ab:9a:
12:54:6e:f5:41:52:c9:36:e4:b2:d6:da:e3:45:2e:3b:53:97:
29:2a:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:39:21 2026 by rpki-client