Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
File: NSf7SXnPwqLOJmsE-Re9toESV04.mft (raw, json)
Hash identifier: U2rjVG9r6bV9BA1csWj7jjixeGPxpdAznmhxv60ItOU=
Subject key identifier: 91:0B:FE:B6:60:D1:4B:AB:7E:ED:5C:B3:A5:D9:D1:A5:38:0C:F5:68
Authority key identifier: 35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
Certificate issuer: /CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Certificate serial: 01A0CA46E9BD4F96B117356796667640190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:40 +0000
Manifest this update: Tue 22 Sep 2026 18:00:40 +0000
Manifest next update: Wed 23 Sep 2026 18:00:40 +0000
Files and hashes: 1: NSf7SXnPwqLOJmsE-Re9toESV04.crl (hash: WANGzcV3C8fUACpo8Azmqe/N9m60opJkn5CYD158IKA=)
2: aBgCcG9RRforIkCARYIT340f4l8.roa (hash: N6x6dHF8Z4yQ497xX2jNu6IEX/saBW0DxfsXtmg1DwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:e9:bd:4f:96:b1:17:35:67:96:66:76:40:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Validity
Not Before: Sep 22 18:00:40 2026 GMT
Not After : Sep 23 18:00:40 2026 GMT
Subject: CN=910bfeb660d14bab7eed5cb3a5d9d1a5380cf568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:8d:c4:fd:5a:d5:06:f7:49:58:78:44:e5:
a9:c9:7b:17:b9:2f:71:96:d6:52:18:db:7a:16:6c:
dd:25:e4:53:a6:cb:b0:ce:c2:93:8f:17:10:ca:e4:
9f:86:b4:ac:b5:0e:c4:72:f2:9a:bd:8a:8d:b4:fe:
7c:98:d7:1e:b1:3f:6d:6e:65:ae:2d:e1:24:13:2a:
ad:b3:c2:fa:ec:1b:c9:87:a2:79:a6:db:f4:90:65:
29:9e:04:2e:fd:40:0c:d6:e7:56:1d:4a:06:29:04:
9f:4e:6e:9e:4d:1a:b8:b8:6c:63:22:c9:67:90:28:
a2:73:9f:ec:e1:38:81:25:88:d9:ec:66:3e:2a:8c:
1f:a2:f8:c1:1d:9c:f8:55:9c:10:1b:84:e5:9e:33:
4b:c9:dd:ae:80:86:8c:69:fb:4e:5a:9c:67:73:94:
89:d1:39:fe:ea:07:55:cc:b3:45:98:34:4f:31:b4:
84:b5:4a:40:ce:93:b6:ff:28:db:0b:7c:54:34:54:
6d:af:00:5b:d5:87:89:ff:05:64:39:6a:c2:cc:ba:
a5:7d:19:94:47:4e:80:18:62:c2:f7:f6:a9:58:90:
c4:90:eb:fb:3b:97:d4:14:d5:05:ed:4e:5a:00:bc:
02:2c:81:0b:81:40:ee:fe:a0:72:67:63:8d:35:1e:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:FE:B6:60:D1:4B:AB:7E:ED:5C:B3:A5:D9:D1:A5:38:0C:F5:68
X509v3 Authority Key Identifier:
keyid:35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a3:1b:d2:e5:4e:37:c0:6d:95:f2:14:cf:8b:5c:2e:6d:22:
ed:9c:b6:29:a5:7b:50:38:ba:39:89:ab:63:e4:42:94:2d:e7:
ff:eb:52:2b:67:9a:0b:54:04:47:42:e6:8c:89:98:66:fa:d5:
fc:9d:72:33:c8:41:70:39:58:11:62:73:e4:1a:86:00:ce:16:
3a:9f:0a:5a:c0:d9:7b:1b:0c:75:62:af:ee:1f:ab:31:e5:41:
cb:46:cf:07:97:bc:b0:9e:5d:55:d3:89:45:08:1c:79:49:88:
95:ed:60:96:06:86:22:3a:12:81:8a:42:a0:d9:90:b2:c2:2f:
40:26:53:0b:9b:01:dc:74:a8:64:43:eb:9a:31:e5:1e:38:01:
8b:6f:c4:a2:d9:05:43:72:ba:d1:78:9e:0b:1e:59:40:09:97:
a4:7d:dc:95:49:f1:ee:a2:96:52:d3:5d:0f:04:3b:71:77:24:
c9:e1:78:89:16:16:1b:ba:9e:76:6b:4c:fc:c2:9c:be:d8:1a:
26:59:f6:28:7b:6d:c1:ca:25:1c:20:0f:2b:e7:4f:99:88:21:
bb:72:49:eb:11:9f:84:a2:67:45:64:4f:a7:f0:61:f9:25:a0:
5a:2f:cc:9e:64:d0:6c:da:2e:fc:40:e9:4a:bf:21:60:80:1b:
d1:07:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:44:49 2026 by rpki-client