Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
File: nskNT33GWqxj5T0h4bYLFHcHjcM.mft (raw, json)
Hash identifier: vKgBdsI7voVa39b3x8FtiL57yxUt++uMf6FmHko8Hwc=
Subject key identifier: 4F:55:11:0E:30:D5:16:A2:8D:17:05:47:73:FC:9B:37:51:BB:E9:3A
Authority key identifier: 9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
Certificate issuer: /CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Certificate serial: 019FA786ABAB24AD355D8CEAF4B52CC40174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
Manifest number: 01CA
Signing time: Tue 28 Jul 2026 07:00:48 +0000
Manifest this update: Tue 28 Jul 2026 07:00:48 +0000
Manifest next update: Wed 29 Jul 2026 07:00:48 +0000
Files and hashes: 1: f35nVT2UBskdAnHb1V1qpocTRSw.asa (hash: M12I0GnyVy1LhMGI7fglgOw9JEa1nOJpBPoyuQKlCpA=)
2: nskNT33GWqxj5T0h4bYLFHcHjcM.crl (hash: OIgzhjBaL+19JayOBLT4oqRXQumElwcCOvxmgUXsYAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:ab:ab:24:ad:35:5d:8c:ea:f4:b5:2c:c4:01:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec90d4f7dc65aac63e53d21e1b60b1477078dc3
Validity
Not Before: Jul 28 07:00:48 2026 GMT
Not After : Jul 29 07:00:48 2026 GMT
Subject: CN=4f55110e30d516a28d17054773fc9b3751bbe93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:82:54:37:7b:0c:7d:8f:57:0d:bc:f0:13:
04:4e:d2:e6:00:6b:5b:cc:fe:1f:c0:68:70:63:47:
46:fa:f6:74:f1:a9:3e:c0:34:fe:2a:46:ad:c6:64:
64:ba:f6:6c:b2:26:ae:dc:44:8a:84:66:2b:41:02:
44:76:51:f2:d0:2e:53:ba:dd:b1:6a:33:40:b6:cf:
d2:9b:5a:c4:83:b0:38:43:ea:da:41:6a:f1:f7:35:
8b:8c:ad:d6:03:ed:4b:5d:16:b9:60:96:b3:e5:e8:
58:8a:bb:4d:29:32:0f:b6:2c:fa:07:2e:f0:eb:44:
3a:34:47:f6:94:88:6b:91:a7:9e:b3:82:03:1f:57:
c0:b9:ec:ee:14:48:12:e8:cf:69:43:c3:ae:08:a6:
f7:a8:91:22:fa:52:14:56:82:83:55:8e:cf:04:c5:
68:09:4e:f7:30:f2:fb:2a:18:96:06:84:40:b8:42:
e5:c7:f3:dd:4f:ad:dd:b0:3d:02:a1:33:9b:d7:9e:
99:0d:22:65:38:52:8d:08:8a:39:9c:92:5f:9c:37:
3d:1f:fa:8f:2b:79:9a:ef:32:91:bb:be:e4:a0:6e:
4a:a8:e0:4b:c4:01:16:40:2d:d3:25:d8:15:40:c6:
ff:1e:2c:1d:97:4d:52:d5:b4:03:02:56:3b:9d:d3:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:11:0E:30:D5:16:A2:8D:17:05:47:73:FC:9B:37:51:BB:E9:3A
X509v3 Authority Key Identifier:
keyid:9E:C9:0D:4F:7D:C6:5A:AC:63:E5:3D:21:E1:B6:0B:14:77:07:8D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nskNT33GWqxj5T0h4bYLFHcHjcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/29ff57-3ca6-4cd4-874e-c3741e4d3e74/1/nskNT33GWqxj5T0h4bYLFHcHjcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:18:4e:7e:44:41:94:59:1b:b6:8d:3f:0c:22:f7:bb:b5:6b:
1e:3e:c5:e9:5b:80:c0:de:91:cd:a7:a2:d4:e8:74:0c:95:21:
c6:d6:46:28:cf:2f:8b:19:aa:8c:fd:f8:01:6d:aa:15:20:1f:
99:96:f1:99:e8:4f:b2:f1:54:91:9a:fe:71:f9:00:8f:f9:c0:
a5:8e:c9:98:e4:50:d4:11:cf:d0:a8:4c:76:2e:22:aa:e1:d5:
1f:3f:ba:98:21:72:4c:df:5f:e6:5f:4d:38:69:8a:59:80:11:
38:6f:14:9e:3a:76:cd:51:c7:c6:e2:fb:d2:67:60:0d:57:dc:
42:94:af:0f:cf:b5:0b:c2:e2:8d:5a:ba:70:c9:71:bf:3a:bd:
63:0e:99:97:b6:8c:62:52:6c:0b:1a:66:37:23:1c:77:7d:25:
08:2f:87:32:80:03:2f:6e:4d:87:07:33:66:07:b1:79:db:55:
48:d1:ea:51:5d:99:03:db:f4:6e:92:27:33:c5:b5:e2:fa:cf:
63:f5:bd:96:3f:f8:dc:50:ae:7d:34:9d:a6:04:1d:e2:d0:31:
70:9d:d2:7a:65:ea:9f:dd:e0:21:72:eb:21:80:b3:d0:1a:d9:
ef:fd:3f:87:4b:5e:db:da:3a:36:8e:ad:77:41:31:90:1e:1f:
6d:dd:bd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nhqurJK01XYzq9LUsxAF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzkwZDRmN2RjNjVhYWM2M2U1M2QyMWUxYjYwYjE0Nzcw
NzhkYzMwHhcNMjYwNzI4MDcwMDQ4WhcNMjYwNzI5MDcwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZjU1MTEwZTMwZDUxNmEyOGQxNzA1NDc3M2ZjOWIzNzUxYmJlOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyGCVDd7DH2PVw288BMETtLmAGtb
zP4fwGhwY0dG+vZ08ak+wDT+KkatxmRkuvZssiau3ESKhGYrQQJEdlHy0C5Tut2x
ajNAts/Sm1rEg7A4Q+raQWrx9zWLjK3WA+1LXRa5YJaz5ehYirtNKTIPtiz6By7w
60Q6NEf2lIhrkaees4IDH1fAuezuFEgS6M9pQ8OuCKb3qJEi+lIUVoKDVY7PBMVo
CU73MPL7KhiWBoRAuELlx/PdT63dsD0CoTOb156ZDSJlOFKNCIo5nJJfnDc9H/qP
K3ma7zKRu77koG5KqOBLxAEWQC3TJdgVQMb/Hiwdl01S1bQDAlY7ndMRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9VEQ4w1RaijRcFR3P8mzdRu+k6MB8GA1UdIwQY
MBaAFJ7JDU99xlqsY+U9IeG2CxR3B43DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUt
YzM3NDFlNGQzZTc0LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yOWZmNTctM2NhNi00Y2Q0LTg3NGUtYzM3NDFlNGQzZTc0
LzEvbnNrTlQzM0dXcXhqNVQwaDRiWUxGSGNIamNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRhOfkRB
lFkbto0/DCL3u7VrHj7F6VuAwN6Rzaei1Oh0DJUhxtZGKM8vixmqjP34AW2qFSAf
mZbxmehPsvFUkZr+cfkAj/nApY7JmORQ1BHP0KhMdi4iquHVHz+6mCFyTN9f5l9N
OGmKWYAROG8Unjp2zVHHxuL70mdgDVfcQpSvD8+1C8LijVq6cMlxvzq9Yw6Zl7aM
YlJsCxpmNyMcd30lCC+HMoADL25NhwczZgexedtVSNHqUV2ZA9v0bpInM8W14vrP
Y/W9lj/43FCufTSdpgQd4tAxcJ3SemXqn93gIXLrIYCz0BrZ7/0/h0te29o6No6t
d0ExkB4fbd29eg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:00 2026 by rpki-client