Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: c/zg1lAQ4LsHToCpLqnxBA1LS4SQcQpadb6cErDu1kM=
Subject key identifier: 2F:A2:B2:25:35:30:29:F4:EE:AC:8A:F1:7B:75:19:B7:08:8E:63:9E
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019CAA59104160BB2C386A89967A30AD779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:01:29 +0000
Manifest this update: Sun 01 Mar 2026 17:01:29 +0000
Manifest next update: Mon 02 Mar 2026 17:01:29 +0000
Files and hashes: 1: 08LcrSM5Tgh5WrAx78MCyBcUuUI.roa (hash: K9ZScW16pprknJqQJ4Lzi9WnkmX54pE86HFlLQ5ZeK0=)
2: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: DjX4vHCLQtyHvCQUnC8jg1J5u3kdtquAZarh5VejUCw=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:10:41:60:bb:2c:38:6a:89:96:7a:30:ad:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 1 17:01:29 2026 GMT
Not After : Mar 2 17:01:29 2026 GMT
Subject: CN=2fa2b225353029f4eeac8af17b7519b7088e639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:f7:86:0e:dd:97:a1:d6:cc:db:52:ce:04:
a9:17:69:44:db:79:e5:2f:20:3d:62:cb:a5:2d:93:
51:d3:57:17:2c:62:8e:35:12:46:81:02:56:0a:95:
3f:0e:98:d4:1b:ee:80:4e:39:78:4f:27:bf:2c:67:
42:48:8e:92:e2:25:a0:0a:68:52:7d:82:1b:7b:f6:
d8:01:1f:e4:50:99:9e:b3:e7:39:87:23:6e:31:c9:
ce:05:1f:a8:ab:95:21:5c:7e:d3:14:09:f6:f5:06:
21:77:70:aa:52:36:14:76:3c:5b:54:21:4e:6b:6c:
09:f0:b0:56:b4:77:b7:64:b6:67:61:3b:52:7c:a2:
2f:ce:d0:25:5c:f8:eb:7d:5a:65:7b:5d:a4:b7:ca:
c8:5b:d1:c5:0a:2a:8e:97:2d:10:6a:62:6b:cf:db:
97:49:56:41:e1:72:d6:00:52:a9:95:a6:4e:d8:ab:
fa:82:1b:ca:aa:9e:c5:5f:11:ab:08:a6:d6:cf:b6:
e3:8e:30:14:ba:ba:9f:e4:01:e0:5a:ae:08:b2:17:
39:08:18:b6:49:ed:c1:dc:16:65:7d:5b:1d:3f:82:
c1:e7:24:e8:dd:83:00:19:72:b0:d6:65:97:10:58:
4a:21:b4:52:08:f7:80:b6:af:75:80:cd:b8:6d:2a:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:B2:25:35:30:29:F4:EE:AC:8A:F1:7B:75:19:B7:08:8E:63:9E
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:87:c0:d8:90:94:6e:3f:87:33:00:f4:d2:d0:5b:11:1d:18:
2a:95:8c:00:bc:a4:9c:77:90:b6:47:b5:4f:3d:11:c7:9c:8e:
15:14:af:24:c8:11:c7:3b:ab:d5:16:10:c5:a4:9e:92:db:f9:
94:91:b7:ba:9b:c9:e7:7b:6a:65:12:64:c6:84:36:25:98:99:
a7:f4:d6:4f:bb:02:8c:e3:4c:77:8e:2a:34:de:af:7a:d2:5f:
ac:9e:89:f6:6c:a6:00:de:1e:a5:e2:0e:fc:a4:43:e9:a0:cd:
ce:91:73:5d:be:cd:78:e2:3e:04:ff:a3:f5:83:2d:0c:f6:8e:
16:2f:61:fd:93:62:7d:c2:97:35:85:2f:5c:bc:8a:e6:75:e9:
f3:61:90:89:33:70:93:2f:94:39:b1:10:85:22:20:4f:8c:63:
fd:d1:58:64:77:b7:5f:84:65:f6:04:3a:aa:5a:5e:e4:b6:6f:
75:cf:3b:0a:45:ee:88:6d:a2:be:e7:fb:81:98:4d:fe:83:fe:
49:27:34:28:5f:14:30:eb:58:33:7e:2a:01:99:f1:dd:db:ef:
a9:d9:37:74:91:c1:41:5b:2c:c1:2f:b1:63:92:93:c0:57:52:
65:31:91:d9:8f:45:45:fd:25:89:8a:3f:f9:b2:4a:6e:55:97:
ce:3f:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:10 2026 by rpki-client