Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: MVkSnjutiIhJvRbsk54d0iTUpuZ3AZUHP4iVskXtMxw=
Subject key identifier: D7:6A:EF:9F:4B:B4:20:25:D9:28:8D:0B:E8:73:C7:C2:8C:0A:DD:F9
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019CABD9AC65664BCFDF8C666699D45CAC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: W7d/Fb/HcjquToXDsaBlwW3pUnlTCuKzH+hSwcrYEuU=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ac:65:66:4b:cf:df:8c:66:66:99:d4:5c:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=d76aef9f4bb42025d9288d0be873c7c28c0addf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:cf:49:6e:00:1e:3c:19:19:b8:0d:7f:db:
95:94:61:f0:db:a4:26:ba:c0:55:2a:6d:f1:66:8a:
59:a8:b0:e5:33:07:6a:3c:29:bd:d5:c3:87:be:5c:
66:12:c2:2c:71:27:c9:48:c1:02:61:a5:68:fd:0a:
ba:e8:db:9c:c1:1a:7c:02:fc:95:9b:29:bb:a0:61:
72:6d:77:4e:2b:62:1a:e4:08:5f:e7:96:14:ed:f7:
e7:d7:36:35:d3:46:1e:a8:d4:71:7e:84:02:10:c7:
5e:5f:74:05:db:31:b7:a5:8b:ad:a9:8a:f6:c4:62:
19:bc:61:d8:b0:a4:65:e5:59:e7:71:5a:a1:84:b5:
9b:b0:2d:3a:b0:ef:e4:2e:38:16:5b:36:c0:12:80:
59:45:b6:b4:40:bc:9e:b0:e8:ec:12:5d:3a:a6:b2:
d0:44:8a:cd:c2:1a:87:a1:f9:b3:de:4c:0c:86:4f:
a5:37:79:cd:d0:0b:0b:ff:dc:d2:c9:c9:03:c9:7e:
07:bc:15:52:38:09:68:ef:05:b2:5d:40:90:a3:ff:
8a:bb:1c:a1:1c:e5:05:90:3e:19:fe:7c:1b:9f:22:
df:09:22:a7:38:1a:df:91:04:4d:db:4c:7b:ec:81:
5c:aa:fa:73:a7:24:68:44:50:08:59:94:a2:ff:88:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:EF:9F:4B:B4:20:25:D9:28:8D:0B:E8:73:C7:C2:8C:0A:DD:F9
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:35:56:df:ef:1d:05:5f:83:c8:a0:f8:a1:02:ed:c0:40:c3:
70:17:c1:05:2e:5e:aa:b7:43:33:cf:4d:9d:3e:9e:a1:f8:ba:
ed:f3:9e:3b:14:5b:0a:3f:4e:4c:a7:c1:64:e9:e9:8d:18:f5:
8d:17:21:22:0d:84:cf:2f:5b:6c:ea:71:0b:7b:37:87:a1:c2:
c9:6d:3e:c1:0d:8f:88:7f:2f:d5:62:dd:f3:64:52:38:b0:1f:
18:99:7c:3e:3c:1b:64:48:2e:24:82:39:3c:5c:6e:84:4b:23:
9b:66:38:8c:ce:89:68:a7:da:ad:07:f3:cf:bd:ba:10:c5:6f:
86:88:29:08:d2:fe:a1:da:33:57:6c:61:d7:a4:e0:83:af:e1:
57:18:5e:2b:83:bb:77:c3:97:f1:21:16:27:df:0e:f2:ed:eb:
7c:44:92:2d:36:91:4e:19:b8:38:96:56:ae:c5:f2:3b:7d:8d:
99:80:c6:17:37:c0:1f:be:73:2e:6c:23:d0:5f:0c:ab:3f:17:
03:00:04:85:e0:f6:5b:ad:f0:2a:d1:85:41:ef:34:79:e3:2e:
65:ae:a6:f6:fa:25:59:97:d9:28:89:f5:2c:91:87:1b:19:db:
1e:e5:95:f1:9a:a9:e2:b6:91:9a:25:ff:e5:a8:c0:5f:2d:b2:
58:bc:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:16 2026 by rpki-client