Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: ctElruDkcXVZq1P9PENdDn+J0UU3BDJjSKQOKJVIoF4=
Subject key identifier: 17:80:33:F2:85:5E:30:F9:40:AA:3F:52:35:75:38:CA:31:17:15:70
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019D9C63200B2D28786080D7B68A7DB36D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0BEF
Signing time: Fri 17 Apr 2026 17:00:35 +0000
Manifest this update: Fri 17 Apr 2026 17:00:35 +0000
Manifest next update: Sat 18 Apr 2026 17:00:35 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: JonLH2LxjF5avHUfp6fGJuZq/S+LkUrCJqYZFVYby3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:20:0b:2d:28:78:60:80:d7:b6:8a:7d:b3:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Apr 17 17:00:35 2026 GMT
Not After : Apr 18 17:00:35 2026 GMT
Subject: CN=178033f2855e30f940aa3f52357538ca31171570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:d2:f7:95:74:6b:df:54:d7:90:1f:e6:61:
d9:40:6b:47:cd:b4:22:25:e3:57:f9:3d:a6:2d:07:
2c:da:e4:38:63:b1:1a:f9:77:6e:33:b2:05:97:80:
41:8a:8d:05:9c:89:1e:46:3a:9f:0d:a4:0c:3e:b5:
14:15:16:81:29:52:43:64:a4:e5:cd:f1:2d:2f:41:
aa:04:ef:17:bd:a5:74:f8:28:70:ad:0c:c7:db:a9:
40:b5:a6:db:1b:f3:9e:bc:7c:87:d2:16:77:de:19:
bf:98:93:16:e5:a3:ab:fe:aa:27:75:58:2b:c6:34:
3a:84:66:c7:cd:ac:11:8c:6e:81:59:d9:0e:7e:39:
bd:59:4d:6d:89:83:db:fc:93:7e:51:72:98:4e:d8:
1a:90:cf:6b:be:0e:d8:cf:ac:47:91:a8:c0:eb:d7:
e4:a9:05:06:31:e3:0c:4c:25:2a:ae:bc:0e:9c:60:
57:d8:95:7e:7b:b9:e3:ce:48:42:60:60:a8:23:15:
1c:ec:1c:30:05:82:99:55:74:fa:cd:65:1b:b1:bd:
a2:b2:10:96:12:ef:99:e1:3a:84:88:2d:62:90:35:
24:88:8a:07:ce:87:21:06:28:a5:00:14:3f:62:d3:
f8:28:79:e7:ce:c3:8b:ed:3e:86:23:9f:69:ac:6f:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:33:F2:85:5E:30:F9:40:AA:3F:52:35:75:38:CA:31:17:15:70
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:eb:42:62:e9:52:ec:6c:eb:f7:cb:a4:fe:a3:d2:00:22:6b:
0d:06:fe:71:76:4c:9d:79:6a:de:e4:2a:81:70:41:b9:e2:c2:
07:ba:7f:f2:8d:d9:b6:3c:c6:a1:ae:c2:62:e8:6a:d0:80:48:
48:09:39:c1:f4:69:38:8a:f0:fb:23:f1:52:af:84:cd:84:30:
d9:20:3c:18:f8:14:74:e5:9d:0f:e0:28:41:6d:6f:3b:06:f1:
5d:ac:d4:8c:59:84:27:61:04:cd:35:8d:4f:a3:bc:3d:f3:59:
bd:f2:4e:43:5e:91:dc:eb:18:30:6f:b1:d3:d4:7d:a8:a5:40:
54:c1:6c:1e:74:36:40:5b:3e:3c:05:75:ed:57:ff:16:92:af:
45:ae:1d:69:02:16:aa:ad:76:6b:91:cf:d9:18:5a:d1:0f:3a:
52:09:01:9b:ef:d4:cb:79:7f:f8:94:27:e4:f5:dd:e8:cd:2b:
52:13:dd:11:a3:7b:62:a3:7f:d8:0f:eb:0e:73:c8:42:54:dc:
23:76:14:ae:95:7b:62:e5:6e:b8:26:78:e9:83:e7:e9:54:07:
b6:1b:50:e1:42:e2:71:70:26:38:1b:97:bd:45:f1:8f:0b:b7:
d8:6c:5d:9f:9f:61:76:86:13:5d:3c:5d:c0:ae:9b:f1:37:49:
1f:60:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:31 2026 by rpki-client