Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: 2Rsk/8GojJG16NHh8CfgNlbgp/6pNAL8h7GK5J+uh44=
Subject key identifier: F6:0A:F2:5D:05:BA:BE:98:29:EC:55:9C:C3:9E:A3:CB:15:68:A4:77
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019EBFFEF896EFC82B5B84A5332A0313336C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0C86
Signing time: Sat 13 Jun 2026 08:00:18 +0000
Manifest this update: Sat 13 Jun 2026 08:00:18 +0000
Manifest next update: Sun 14 Jun 2026 08:00:18 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: zghvM4CGHslVzBXdc66ea0CJHMalLrLNMFaQfk63dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f8:96:ef:c8:2b:5b:84:a5:33:2a:03:13:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jun 13 08:00:18 2026 GMT
Not After : Jun 14 08:00:18 2026 GMT
Subject: CN=f60af25d05babe9829ec559cc39ea3cb1568a477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:f9:39:fe:14:8c:3e:2b:eb:9b:31:e2:9d:
41:8f:5b:5d:31:4a:0b:5e:57:cc:ff:5e:6c:67:19:
69:c1:c5:a4:3f:e9:9e:c5:63:47:67:48:f6:70:52:
7d:36:66:04:23:cf:2d:dc:01:c7:ef:50:62:8d:33:
d0:5d:72:2b:05:60:00:f2:39:e0:e5:ba:0a:02:a6:
12:50:e7:09:f9:e2:40:36:85:29:3b:bb:1a:e5:d6:
2f:15:5e:51:93:85:bb:65:76:0a:7b:48:36:9d:9c:
fc:09:9c:5f:a1:e3:6b:3b:d0:82:45:11:66:34:c3:
3c:4a:fe:b5:6f:b8:bf:20:24:61:8c:03:6a:c7:79:
73:a1:58:de:11:33:12:a8:a8:a1:29:96:a5:b3:31:
e0:21:b9:4b:39:34:7c:3e:5e:9f:9a:7c:23:01:bf:
3b:b5:ea:12:f6:90:7c:92:65:89:bc:8b:e7:bb:a3:
11:ae:d6:46:bd:4d:6b:f0:df:9e:6e:8a:57:58:60:
15:3f:30:4e:89:02:83:b4:46:c5:f6:49:eb:a6:c4:
0d:6e:06:a1:f7:c0:84:d7:ca:9f:b7:24:17:d5:f3:
9c:1b:7a:96:a0:3d:07:fa:45:39:eb:d7:d3:74:55:
ca:71:4e:6a:5b:1e:5e:ee:d9:0a:20:11:9d:73:bd:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:F2:5D:05:BA:BE:98:29:EC:55:9C:C3:9E:A3:CB:15:68:A4:77
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:92:99:1a:66:05:60:48:59:12:66:5b:bd:5a:14:92:46:
03:53:4e:1c:fe:16:c8:23:b2:6a:7d:ae:82:71:45:ae:01:58:
cf:38:40:38:45:50:ba:eb:bf:c6:ae:83:e6:e9:73:7a:6a:b2:
5b:2d:18:4a:2b:52:16:42:e6:4c:2c:73:00:6c:53:e1:f0:e1:
2a:11:40:6d:6c:76:d9:91:91:1b:75:17:8a:4e:a1:3f:aa:41:
43:2c:ee:3f:f5:e3:b9:1b:86:6e:47:02:06:ec:d0:72:9f:48:
c6:4b:0d:41:18:c9:96:b7:c0:db:ec:24:2e:eb:68:90:5b:9b:
09:76:30:3f:0b:44:d7:eb:0e:e0:37:2d:61:9f:5b:0e:3e:ca:
e9:18:13:f0:4b:13:c7:8c:a9:3b:81:9d:c8:5f:5e:d2:ac:fd:
c0:43:95:01:81:a5:30:34:69:7a:8b:9e:18:b2:c7:8c:81:03:
73:48:90:65:18:37:b2:4f:d1:1e:20:28:b2:0e:73:9a:37:98:
7f:46:09:af:bd:79:ba:60:cc:9f:fd:ce:8a:db:75:e9:27:b7:
f4:16:36:28:84:e0:55:4c:db:93:1b:9f:1a:9a:0a:6c:bd:83:
45:4e:9b:d9:27:24:98:16:f3:28:07:c2:da:1d:03:2d:63:44:
be:82:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:41 2026 by rpki-client