Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: miOVLrXx1timJSa5BPSX0wpBlHHQNMTCPQbn8datgF0=
Subject key identifier: 6F:C1:DB:E3:2D:9E:49:B0:E2:89:7B:6D:95:25:2B:1E:8D:27:B1:FC
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019CAC10065FE58209D66326629297FBCF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:57 +0000
Manifest this update: Mon 02 Mar 2026 01:00:57 +0000
Manifest next update: Tue 03 Mar 2026 01:00:57 +0000
Files and hashes: 1: P6MvyijEdfDH8PowPKZBFJvbCwc.roa (hash: QIBBo/B7mvu6Y0jpzZUhzPlgiko0hJqHLmPYVtkObOo=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: z8/Mpv91t3A0LbIddFnTOVQejOTGkhOML/IYn5ywdG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:06:5f:e5:82:09:d6:63:26:62:92:97:fb:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Mar 2 01:00:57 2026 GMT
Not After : Mar 3 01:00:57 2026 GMT
Subject: CN=6fc1dbe32d9e49b0e2897b6d95252b1e8d27b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:2c:6d:de:98:c2:cc:f0:da:d5:b6:e4:fd:
cc:36:0c:52:5a:e2:24:5c:0a:42:ff:1a:51:41:fd:
a6:fc:fe:16:a7:0d:a4:f6:9b:a9:39:22:5e:66:14:
9d:82:c3:f5:03:2f:a6:71:d3:78:08:d0:83:ba:67:
6f:05:ce:a5:ff:33:b0:97:0a:cb:b3:21:ee:0d:fb:
7b:a9:86:9e:13:ae:54:29:2d:d7:e3:a2:cd:cd:6c:
0d:8a:5e:35:ae:a0:f4:29:60:1e:df:49:c6:1f:48:
9a:bd:a6:8c:46:22:15:05:77:6e:87:a1:02:e4:b5:
59:c2:3c:1b:61:85:a4:a7:94:c7:3f:44:57:b3:22:
41:f4:77:94:35:13:c3:42:12:f1:22:8b:d2:8d:0c:
f5:9c:fc:03:4c:47:7e:3d:cd:23:91:3b:de:62:fe:
d2:dd:31:36:8e:2b:86:6a:d6:ad:80:81:f6:70:fe:
07:0b:c8:e9:38:22:af:30:3f:bb:cd:38:e2:b8:4d:
a2:f8:33:2d:d3:2b:f8:f2:85:f0:f1:d4:63:64:bf:
48:df:21:04:5b:b2:99:a6:4d:a0:cd:cd:c4:a5:d1:
17:28:c7:b1:4c:5f:7a:0e:8b:a8:ee:c9:86:75:3a:
2d:90:5c:2c:a5:c5:92:d1:75:43:c8:14:97:c8:a5:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:DB:E3:2D:9E:49:B0:E2:89:7B:6D:95:25:2B:1E:8D:27:B1:FC
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:ed:ef:85:a2:84:06:2c:02:8e:f8:24:43:04:3e:3c:d4:
fa:3f:7b:cd:5b:f2:7b:bf:ea:23:95:5d:6d:9f:dc:e6:34:b8:
20:f5:c5:29:eb:f6:e9:d8:e8:a6:10:31:27:d8:36:2c:fa:eb:
2d:21:0e:42:2a:fe:41:ef:07:f7:47:4e:f8:6f:e1:da:29:7e:
1d:1b:ae:35:90:44:25:27:3d:2b:6d:3d:54:9a:4c:45:7f:a6:
9d:05:a4:f1:72:c5:11:f3:aa:20:ce:91:b1:bb:96:0a:19:b2:
1e:84:b3:37:0b:af:8a:2e:2e:fa:18:8e:b1:0d:85:48:08:df:
7b:3b:aa:27:15:d0:1f:ca:9e:57:a8:18:c8:5f:76:10:d5:ad:
bf:76:24:5c:79:1b:44:ec:3d:4c:2c:14:bf:e7:84:a4:f2:3d:
ee:0c:00:96:59:79:7e:d0:d6:6a:24:1c:60:9e:01:95:2f:d6:
fc:b0:ea:20:dd:cd:22:05:43:38:6b:eb:d5:44:32:db:a6:c2:
d2:fc:7d:24:b8:02:24:a6:90:39:da:0a:b9:95:88:b5:06:b6:
98:9a:5d:12:5b:1a:27:8b:ee:43:4a:1a:49:10:dc:5f:f9:a0:
0b:ce:7d:e7:b6:10:99:f4:de:e5:fa:63:d5:87:4d:da:fb:d2:
eb:01:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:21 2026 by rpki-client