Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: Juln0RSJ906Wjoig1eoZ7zNqNhvbIopSSwcPpCjyH7M=
Subject key identifier: ED:DB:14:80:9C:D0:D4:B7:AE:69:8F:EF:A1:C4:7D:BF:7A:84:3D:9E
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019D98505DDCB2A36EF7F207082F5D520902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:36 +0000
Manifest this update: Thu 16 Apr 2026 22:01:36 +0000
Manifest next update: Fri 17 Apr 2026 22:01:36 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 6ao2LUWQn5ZOr+Tg7iCqf1hSvq0pAr0Hm/qIXJpdL78=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:5d:dc:b2:a3:6e:f7:f2:07:08:2f:5d:52:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Apr 16 22:01:36 2026 GMT
Not After : Apr 17 22:01:36 2026 GMT
Subject: CN=eddb14809cd0d4b7ae698fefa1c47dbf7a843d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:aa:5a:e8:0e:ae:30:19:0e:25:f4:1a:73:
3d:bb:53:78:08:51:93:3a:cb:95:cd:a0:0e:94:9f:
a4:16:ff:10:3c:6e:10:72:bc:b7:e7:79:fe:50:2d:
89:21:1a:20:f2:97:cf:8a:54:0e:0f:6e:cc:00:26:
d0:42:30:ce:a6:9b:f6:7f:ec:7f:7a:3a:08:de:20:
26:1d:3b:4c:af:86:89:5e:74:3a:d5:ec:0b:3b:b0:
07:86:f0:32:d7:0e:03:3a:f5:a0:6b:2f:aa:66:e0:
a1:c1:b4:4a:13:54:63:ed:ae:4e:ab:ea:17:58:0d:
b2:5b:9e:2d:4a:f5:a2:55:c1:03:25:f7:34:2b:0f:
11:de:72:cd:60:75:44:c4:31:48:6a:f6:4a:d3:26:
00:32:66:9f:0e:20:af:f8:66:c5:a3:5d:e8:a7:49:
bb:47:48:02:46:18:c8:39:b3:ce:18:73:f4:bc:ac:
b9:60:2d:61:ba:18:8e:60:03:2c:b4:4c:cd:5d:26:
34:98:0e:79:47:0a:2a:a1:52:09:ec:81:c6:86:a7:
5a:df:86:28:f2:4d:57:9b:cc:43:a6:e8:d5:2a:67:
27:d8:3b:c4:c1:21:0e:07:1c:6f:d2:66:42:d8:c5:
35:1d:9f:d7:58:8c:c6:9c:7a:8c:80:39:20:11:05:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:14:80:9C:D0:D4:B7:AE:69:8F:EF:A1:C4:7D:BF:7A:84:3D:9E
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c9:d1:13:62:d3:66:02:d5:ea:c2:22:c0:ac:28:ee:d9:bb:
60:6a:dc:e0:23:16:b0:80:ae:ca:be:f2:ff:cc:cd:d6:bd:0d:
86:ca:a7:37:d1:9b:64:08:2e:98:16:14:0e:68:91:74:50:b8:
d0:cb:a1:b0:a3:26:9c:41:b2:24:f3:e6:6c:a8:ad:74:19:c8:
47:19:f7:f1:53:aa:42:ea:77:04:74:61:b6:64:66:6d:1b:3f:
df:b3:89:b5:e8:26:b3:82:4e:cf:88:5f:e4:6b:4e:7f:6c:41:
eb:7a:e7:95:d3:a1:9d:0b:52:7b:9a:43:bd:6e:31:1c:8f:ac:
0c:b4:47:94:38:b9:9d:2b:50:b7:2c:f6:bc:60:14:07:95:8c:
62:f6:74:cb:50:f7:11:a7:81:bf:1f:f8:4a:f2:f7:2a:b5:77:
61:5a:9a:f4:09:bb:e6:7f:98:22:13:a5:4c:99:88:86:97:8a:
75:d8:77:b5:b0:b0:3d:09:37:2e:84:72:bf:97:49:6b:86:e6:
06:68:52:1b:aa:74:f3:56:87:d6:37:82:80:a2:8c:a0:c0:3a:
dd:79:8b:32:45:35:56:8c:cc:58:30:51:c0:df:0e:f4:3b:2e:
6d:0c:c0:db:c6:25:4a:d3:50:9f:8b:31:f5:1a:3d:52:68:fc:
5c:59:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:45 2026 by rpki-client