Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: VVjblhZqPgDBByE+n12ZFWzLlkXJsdv09gadF847+q0=
Subject key identifier: 27:44:FD:6A:A7:1A:9A:08:61:0F:A9:DA:51:21:89:12:C9:FD:E0:D8
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019CAAFD5FC0EB403FCD0B37C062574C3EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0B72
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: vFNkZCk1vSE4+w/zxUZqzIGxKOf55XArDMUyE0EfBgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5f:c0:eb:40:3f:cd:0b:37:c0:62:57:4c:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=2744fd6aa71a9a08610fa9da51218912c9fde0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:cb:5f:b9:b7:c6:76:dc:3e:c7:3f:5d:55:
18:71:c9:9c:86:56:35:2f:be:ce:37:ba:f9:7a:cb:
88:a7:26:a0:e1:d7:40:42:94:95:8d:c5:cf:4f:0e:
eb:0f:a6:e1:5e:b8:56:01:a4:22:91:3f:1c:25:69:
50:df:e2:22:2e:60:6e:b2:35:ae:07:03:fd:f3:dd:
4b:87:ab:c6:06:cd:06:8a:55:9c:4e:e7:ae:d9:6e:
41:73:25:35:10:87:9e:01:bf:8d:4b:73:7d:ec:ab:
db:ad:32:e3:8c:0c:94:9c:6b:cb:56:b6:02:e4:df:
fc:48:46:61:6a:39:ad:01:10:14:7b:c1:b8:e1:56:
f6:5e:e6:5b:bc:df:2f:63:c2:24:a4:27:35:7b:f8:
db:42:3f:ae:b8:a2:84:cc:55:cc:e0:70:2c:32:60:
f9:96:a6:be:fd:b2:4b:a2:61:65:18:51:3f:15:d1:
80:7e:86:e4:a9:cd:02:f4:1a:9b:4b:cb:b7:e4:cc:
29:ce:1b:d7:24:2e:0d:a1:48:98:8a:45:d4:13:bb:
59:7b:f9:85:56:c7:cc:56:b9:0c:37:62:9f:37:27:
cc:ec:0f:2e:cc:f6:f7:3c:19:de:f6:09:80:35:49:
7d:2c:8e:78:cf:d0:c8:3f:b4:57:c5:e7:79:5e:9b:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:FD:6A:A7:1A:9A:08:61:0F:A9:DA:51:21:89:12:C9:FD:E0:D8
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:5d:f1:d5:cb:2b:1a:9f:a3:0e:3d:72:35:a3:b6:24:6c:
28:8b:64:8c:d2:c7:9f:e8:26:58:01:79:ed:60:5f:ff:c0:27:
9a:08:2d:26:06:1f:55:52:e9:94:4c:1f:9d:90:a0:99:8f:41:
66:78:06:34:21:ea:5e:f4:64:d1:3a:83:34:e9:e7:3f:ba:d3:
0c:7d:f4:b2:ab:e5:34:c6:23:a0:56:7d:91:30:a0:0d:c2:82:
f6:5d:a7:02:f2:e6:82:8d:bb:0e:9b:30:71:82:7e:19:b8:bf:
9a:17:b9:16:4f:ac:9a:b4:1c:93:21:93:a6:19:6a:78:f0:48:
8e:01:dc:01:c0:5e:10:dd:1b:df:95:19:9a:35:d7:98:77:10:
2c:79:dc:9d:25:90:d3:70:fc:e6:71:9e:a8:fd:5e:40:4f:b4:
07:4a:cf:0d:89:69:f5:2f:a7:34:30:df:f3:3a:85:10:97:7d:
da:84:ff:c6:02:77:6a:96:18:48:44:c0:f8:5e:66:26:05:98:
a6:1d:5d:72:b1:20:ad:93:9e:4a:65:ea:b7:26:9e:12:fd:3c:
c6:00:6a:8c:e5:24:8d:da:89:76:b7:0b:51:75:80:88:d8:1f:
2e:6d:ea:f4:1e:a4:57:dc:01:81:b4:37:7a:55:57:a9:ff:4a:
a2:37:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:57 2026 by rpki-client