Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: Rl9D47u9EP78FQMZIZv/oi/+jBXkHXGyfzMWFoB2Ef4=
Subject key identifier: C1:A2:AC:36:97:0D:25:42:0A:9B:5E:C4:7C:09:51:5C:B6:7E:B5:E6
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019D9A74D4D5053F0A328E56775D10494EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0BEE
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: nCCfIy+3wnSImLrywORvUVrWXHWLbRQ/F3/68msCXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d4:d5:05:3f:0a:32:8e:56:77:5d:10:49:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=c1a2ac36970d25420a9b5ec47c09515cb67eb5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:bb:9a:19:35:82:72:59:69:ce:60:c5:ad:
b8:0c:8f:50:de:7e:e7:06:cf:b2:ac:e1:a6:81:cd:
b3:cf:ea:3d:27:69:d2:da:50:73:94:6d:c5:b2:a8:
1e:eb:d3:b3:c9:39:11:e9:14:59:03:46:b5:75:4b:
05:fc:46:6b:3a:74:13:46:81:b2:84:1f:56:25:74:
38:0d:51:7c:20:41:ec:31:dd:93:e3:f4:d2:d2:cc:
db:ce:d0:93:e0:9b:42:d7:52:0a:23:2c:a8:63:bc:
0a:af:ee:c5:99:90:8e:3c:fb:82:08:3c:7a:e2:48:
fa:59:a5:de:f1:a1:4a:c5:96:f8:0a:5a:c9:8f:d8:
d6:c3:02:f1:00:5d:3b:71:f6:85:09:64:dd:29:bd:
ac:ed:8d:09:ad:94:0f:9e:ba:97:cf:6e:c5:77:1f:
d1:1b:30:41:de:49:e1:f3:c5:fb:bc:33:01:84:e7:
8b:56:64:82:0a:5f:4b:e2:56:22:50:1b:46:d0:41:
67:b9:b7:15:40:30:b5:0c:b2:fb:cc:66:69:53:38:
5a:1f:a4:9b:9b:fa:64:3d:33:4e:a9:15:6e:af:9d:
f3:e0:1b:d5:94:cd:7c:aa:dd:e7:b9:05:e1:30:b3:
e3:3e:1d:dc:00:00:2a:3b:a6:c8:4d:8f:b8:ac:20:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:AC:36:97:0D:25:42:0A:9B:5E:C4:7C:09:51:5C:B6:7E:B5:E6
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:69:b6:e2:2b:06:e3:e2:9a:0c:cd:80:1a:22:96:81:85:
cd:36:a8:7d:e2:55:82:9b:f6:c7:50:65:7c:87:a7:b3:17:a9:
1f:33:7a:aa:24:53:a6:37:42:9c:c2:f2:55:c8:49:55:5c:a2:
a2:5a:c9:3e:bb:2c:23:4b:eb:9a:5c:ee:58:14:78:6f:15:0f:
22:29:a8:30:cb:7f:bd:ad:ab:17:57:8e:e7:10:73:86:bd:06:
79:61:37:26:b7:f3:a2:10:71:0f:29:bb:0d:e7:b6:20:4f:0d:
b7:25:b2:91:8e:5b:66:f5:e8:91:f1:16:7b:26:4b:84:80:a1:
3a:6c:4c:a5:8f:21:f2:8e:07:7d:70:f2:1b:48:7d:4a:99:81:
75:64:20:3d:c0:ce:08:0c:d3:fa:7b:8c:f3:61:aa:0f:1b:01:
63:88:b2:c4:a5:a1:5b:b4:2b:f1:66:85:cc:98:61:a1:ff:25:
c3:45:c9:46:ef:ed:b6:f7:7f:9b:86:74:72:5b:d6:34:8a:3b:
d2:40:e8:e5:d3:e3:5c:46:fc:5b:8a:e2:9f:43:6a:a5:8e:68:
4c:4b:73:f4:54:23:86:b6:3d:97:07:e3:c9:fb:aa:49:37:dd:
79:7f:bc:53:14:98:93:6b:ac:3a:bc:d3:03:13:cb:1f:97:e7:
43:89:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:53 2026 by rpki-client