Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: ABSHu0/S20okH5ytXQlvHsLll22vzHkT4oyQ4Iv3CEs=
Subject key identifier: 67:69:45:8F:BA:6A:76:F5:20:D1:89:59:CD:5F:3A:CE:F2:27:7F:C8
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019FAB9A4F0DE325DDA4CE83015589951A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0D00
Signing time: Wed 29 Jul 2026 02:00:44 +0000
Manifest this update: Wed 29 Jul 2026 02:00:44 +0000
Manifest next update: Thu 30 Jul 2026 02:00:44 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: 6dOwASmfyzEVMTYKbjSR+u5qRO0a7QNK9LfasGF3RUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:4f:0d:e3:25:dd:a4:ce:83:01:55:89:95:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jul 29 02:00:44 2026 GMT
Not After : Jul 30 02:00:44 2026 GMT
Subject: CN=6769458fba6a76f520d18959cd5f3acef2277fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:2c:e4:a5:65:7d:53:bf:b9:d1:fe:43:b4:
38:47:b1:2a:58:63:0b:0d:b1:19:0d:e5:6c:fc:37:
c9:db:da:88:37:c6:40:69:cc:b8:31:8d:fa:48:23:
c8:2d:54:24:fa:65:9c:b9:f7:7f:fd:2f:05:6f:33:
09:bc:e9:5e:ca:5f:92:ac:a9:5b:6b:80:15:1b:72:
c8:6e:be:7c:af:01:17:5c:47:dd:1d:8f:cd:6a:69:
5d:d7:15:f5:fd:8d:e2:5d:95:bd:03:35:84:fc:f8:
67:5f:3f:ae:b5:7d:09:26:db:77:e0:b5:e9:46:62:
5d:13:f0:e4:58:9b:bf:e8:7d:91:cc:17:d4:f7:3d:
53:d8:c4:22:fb:09:05:33:74:71:aa:60:84:29:85:
b0:51:44:21:d6:6b:75:17:93:9a:8b:de:99:03:b5:
34:90:a9:e1:64:7d:92:4c:88:d2:cb:2c:3c:fb:bf:
23:e5:3f:16:40:ac:bf:2d:1c:f1:9c:b4:73:32:dd:
a5:fa:46:56:63:7f:89:b6:d7:fa:b4:28:e7:75:d2:
3a:88:f0:0d:be:0a:37:28:87:a7:18:ba:23:b7:d5:
03:b6:7a:7a:37:54:da:20:0b:27:75:3e:f4:70:b5:
dc:bd:20:b5:94:4e:12:5f:be:12:65:1f:de:58:dc:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:69:45:8F:BA:6A:76:F5:20:D1:89:59:CD:5F:3A:CE:F2:27:7F:C8
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:af:79:ae:29:36:33:16:7c:15:28:fd:a3:5e:6f:fe:00:b6:
ae:aa:fb:71:59:51:e2:55:d4:21:9b:3d:59:62:96:3f:3a:37:
2a:08:1e:30:93:58:8b:e9:dd:2d:de:67:03:38:93:26:68:b5:
1a:89:30:6a:87:f5:d8:20:bf:60:c5:5a:cc:61:d9:4b:2a:53:
cf:2e:d2:df:16:1e:db:e1:24:a2:2c:fe:d6:94:09:4c:f0:16:
b2:e1:fc:a4:66:05:b9:a9:af:19:c5:ea:80:ad:70:89:f0:64:
db:5e:aa:da:7f:c6:ce:f8:61:e1:3c:65:d6:10:70:71:21:b1:
a4:a6:a2:c4:01:eb:06:94:48:fb:67:a8:73:fc:2c:e2:55:6c:
f3:2a:18:ec:22:03:d9:b3:ad:94:5f:c1:4f:67:ad:4e:3f:7a:
97:68:61:56:a6:bc:87:fb:d8:e6:f0:cd:50:72:38:55:12:4a:
98:43:56:49:94:29:4b:1d:24:89:57:e1:19:3f:d5:57:47:2b:
11:d5:82:cf:f2:83:b0:d9:a7:7f:25:c0:56:c0:6b:81:66:00:
93:85:96:eb:40:93:4f:72:69:37:65:a7:8b:d6:1c:45:2f:fe:
d0:f4:82:7c:5e:ef:ff:c4:55:6d:84:87:d9:5f:c9:0a:82:42:
a2:5c:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:04 2026 by rpki-client