
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: yv27gPwWIRYQCdGbFbygbd5Mq7KFl56H6cIK5jqB2bI=
Subject key identifier: 0B:94:4B:47:B6:8E:4F:6D:24:8D:3B:4D:E8:F7:EC:06:34:BC:40:05
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 01A0DACDB1FA05BACDCF049352FAA637C71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0D9D
Signing time: Fri 25 Sep 2026 23:01:48 +0000
Manifest this update: Fri 25 Sep 2026 23:01:48 +0000
Manifest next update: Sat 26 Sep 2026 23:01:48 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: rtcAvy03rVVykFUXgJE5NtrHnnKIDPtSMM17yXRaHyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:b1:fa:05:ba:cd:cf:04:93:52:fa:a6:37:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Sep 25 23:01:48 2026 GMT
Not After : Sep 26 23:01:48 2026 GMT
Subject: CN=0b944b47b68e4f6d248d3b4de8f7ec0634bc4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:b3:8a:02:a9:b9:9a:ee:f9:23:a4:32:c1:
60:a9:25:a6:dc:73:59:fd:b0:c3:d5:4e:e0:12:0a:
64:5c:c1:67:16:45:78:14:d0:1e:c3:49:25:07:ef:
08:71:f1:30:2c:7f:d1:03:a6:15:97:40:e7:dd:80:
6b:b4:b3:6b:45:85:cd:99:39:2a:07:6d:86:c0:5a:
b7:4e:0e:0d:5f:ab:f0:4d:a5:f4:8b:d0:4a:83:f1:
83:5d:d6:b8:d7:4f:ed:ce:1f:83:b7:1d:85:3e:75:
1c:72:6e:42:ae:9d:8f:52:c8:b1:bf:6d:ee:3c:0e:
6f:17:53:9f:36:a2:4d:a9:d4:d3:cc:4b:c1:22:68:
4b:e1:7d:92:1b:58:2b:ac:86:a4:f6:ba:ce:e8:98:
53:ea:ee:35:09:16:3e:ec:91:dd:69:f1:3f:7a:ea:
c9:cc:e0:fc:02:2e:36:0d:b0:da:26:38:70:5b:63:
21:cc:97:5a:9b:c6:85:d2:9b:df:bb:25:f6:df:8e:
4a:0e:d0:0a:bb:95:4f:89:39:ed:c4:63:4e:50:14:
76:f7:11:61:11:3a:38:fb:12:40:d9:03:07:b5:35:
26:08:08:74:85:f1:32:4c:29:e6:68:7d:8c:20:1d:
d4:1f:15:f1:e1:c1:93:21:12:75:47:32:9c:0b:0a:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:4B:47:B6:8E:4F:6D:24:8D:3B:4D:E8:F7:EC:06:34:BC:40:05
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:25:51:e4:ac:c3:8c:25:31:e9:6a:3c:2f:ac:e6:c8:4e:
3d:78:80:93:f7:0b:5e:8e:a9:d9:0a:ff:20:4a:06:12:0b:f2:
77:a1:2e:99:ed:b6:97:b4:66:75:07:83:8e:2a:d0:aa:6f:43:
bc:78:0c:ae:48:13:5c:0b:99:9b:dc:72:2b:9b:87:43:f2:c1:
0c:7b:96:82:47:f6:eb:79:1b:a4:98:5a:7e:ba:57:83:8f:68:
01:2c:98:73:7b:1a:25:bd:d9:e5:4a:12:c6:5d:7c:ec:41:fd:
53:b8:9f:54:95:67:09:64:c5:be:6e:a4:b5:0f:39:a2:00:03:
bf:e3:18:59:e8:ba:0a:5d:1b:e7:63:10:79:b0:54:f3:84:bc:
32:39:23:db:38:0c:3a:f3:10:e9:d5:9a:bd:62:c6:d2:f7:e1:
45:08:6e:4f:66:10:83:62:f8:fc:90:46:e6:07:a0:39:de:1e:
93:b0:31:7c:57:fa:e7:14:da:3d:26:b7:a1:88:47:f8:7c:5a:
84:e1:50:a6:83:93:d4:cf:98:70:86:94:82:9c:ab:fe:e7:5b:
24:01:96:4b:d7:e2:1b:ba:e6:cf:49:c2:7d:84:93:34:80:c3:
5b:e0:68:08:b9:77:b6:cd:25:a3:2f:ae:fd:5c:c4:54:5b:8a:
f4:33:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:33:47 2026 by rpki-client