Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: bXD+vGtLqxeM5aATRqpvtoGxp5lTcryCqhag9HtmVkE=
Subject key identifier: A9:B8:85:81:77:5E:98:07:D2:F6:CD:09:FD:B4:21:9B:E6:4A:36:B1
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019CAAC6321A40439D269282F6B95896DD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 0804
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: 7Nw66k4HGDgniHjPpIYuFlo7wts.roa (hash: xkBwde/whvV3zzujO/2yU/8uxz1ZIVTTivP0Kf+ua7o=)
2: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: 5jrAwTcKkL4F3gt58iRYoLK4cpV2c1haxIVvs85Ul0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:32:1a:40:43:9d:26:92:82:f6:b9:58:96:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=a9b88581775e9807d2f6cd09fdb4219be64a36b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:e7:bf:e4:b3:2d:bc:32:d3:8c:2a:72:41:
4c:ba:39:41:20:40:b2:c2:57:f1:19:02:9a:4d:ba:
d5:30:37:bb:63:46:51:27:93:7c:97:99:31:b6:70:
74:bc:3a:ed:33:bc:60:d6:72:39:d3:02:e1:d8:c0:
cf:f3:fc:dc:c3:6c:2e:cd:ff:a0:b4:82:fc:ae:c5:
fc:38:0a:ee:c0:15:fa:01:f1:bb:f5:1b:e4:5d:d6:
9c:09:bb:15:59:49:40:35:1b:eb:b1:60:9a:3e:e3:
a5:5c:d8:7c:1d:d9:85:95:77:30:f6:8c:c2:c5:f8:
ab:ef:48:1e:51:a5:f2:96:df:09:d9:52:7e:25:34:
d0:b8:c9:73:96:bb:d1:49:05:aa:3d:98:d4:94:28:
13:1d:9c:59:4f:fb:66:0d:79:20:5b:40:34:23:f9:
a9:ec:bc:10:42:1e:06:45:e9:d8:8f:e8:22:69:fa:
b5:6b:bf:73:01:7a:87:c4:c4:b7:21:ec:0c:d2:d3:
e5:fc:f8:59:5a:6b:72:20:00:55:78:67:02:59:a1:
de:32:c9:0d:9d:80:ff:26:c1:ee:c2:b6:76:2d:57:
55:4d:74:23:96:c5:55:5e:00:72:b2:ea:98:b6:b0:
c3:d6:0e:c0:d6:0e:f1:6a:02:f4:70:9f:8b:c0:4a:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:85:81:77:5E:98:07:D2:F6:CD:09:FD:B4:21:9B:E6:4A:36:B1
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:63:15:51:79:fe:1f:40:6b:ff:7e:86:74:b8:8d:dc:d4:11:
b5:07:ce:e7:9c:e8:4b:61:38:68:70:7f:b3:95:1d:a5:57:e7:
23:24:8e:26:f5:d4:cc:4a:62:24:c4:78:3d:10:f7:eb:88:3d:
28:05:2b:a5:aa:f0:fb:39:1a:78:25:db:f0:89:03:6c:05:c2:
69:ff:4f:7b:35:5c:93:b6:cc:2f:4b:2a:32:b4:60:eb:6a:29:
f8:57:bd:46:04:85:54:d4:84:1a:3c:34:d9:9a:7f:f1:be:da:
a0:88:2e:c2:08:e4:1f:6b:e0:48:1c:41:7c:7c:ce:0c:db:f8:
f7:8b:a6:93:b5:a2:94:22:f0:58:d3:62:61:87:a6:de:6b:e3:
df:61:40:5b:88:bf:e1:44:47:43:a7:dc:d7:32:bf:56:0a:73:
7b:7f:55:50:4d:97:82:6f:ac:e7:22:a5:cb:89:81:0f:86:c9:
5e:20:9d:fe:5d:8d:50:c4:04:6a:35:d0:6e:d3:58:41:e5:f1:
00:2d:31:10:74:d9:38:fa:56:89:6c:da:87:6b:99:56:a9:a7:
4f:05:9d:6e:c6:fd:ca:0c:44:2e:96:91:63:2d:60:18:f3:15:
f0:c0:38:9b:52:b4:f8:d0:20:44:55:9f:0d:c1:4f:93:8c:1a:
47:b0:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:53 2026 by rpki-client