Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: M0jw3M+8h+ZEqwil5Ti0AqHEt7iMJNImDqKU+8mfksE=
Subject key identifier: 65:8E:68:F7:48:5A:BD:4D:AC:B5:82:B0:A9:9A:01:50:76:2D:6E:32
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A0D2DE9ECD5C8B971EC0B3DE54B519C4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 10:03:19 +0000
Manifest this update: Thu 24 Sep 2026 10:03:19 +0000
Manifest next update: Fri 25 Sep 2026 10:03:19 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: M8p2bCO5jhdBwNsg3rNj0LP8NU0xw2HlYzO1IBeuVVs=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:9e:cd:5c:8b:97:1e:c0:b3:de:54:b5:19:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Sep 24 10:03:19 2026 GMT
Not After : Sep 25 10:03:19 2026 GMT
Subject: CN=658e68f7485abd4dacb582b0a99a0150762d6e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:fd:de:73:0a:82:84:73:42:90:95:f3:2e:
28:c1:dd:10:70:56:b7:4f:af:4c:2c:6e:5b:0d:4c:
31:7c:05:4b:62:f9:72:74:b6:ef:b1:94:30:a9:95:
70:47:30:aa:bf:ad:38:7b:88:fe:07:9c:e8:4e:c8:
86:bf:48:26:96:43:a5:12:91:0a:c9:96:a5:f7:02:
4e:68:f8:96:bf:65:82:3e:9d:5b:be:56:00:56:ec:
7a:66:41:12:33:5a:80:a9:3d:80:f0:b2:04:84:d4:
39:50:29:f4:cc:e1:fb:d9:43:37:3c:3e:be:10:57:
d4:2e:08:a1:a0:48:d3:db:ee:01:84:b0:e2:e8:66:
d2:d7:41:65:7a:7e:b5:12:bd:75:e5:60:b1:cb:b7:
63:a0:df:aa:c1:91:1d:22:80:d5:ba:70:6a:98:fa:
c4:0a:f0:d2:a2:1c:84:33:7d:59:7a:62:c5:13:7d:
36:87:b5:c2:c7:94:84:5e:b6:91:fa:5d:be:94:ae:
67:47:03:7f:cb:22:f1:c5:fc:63:d0:67:d0:c5:46:
db:4a:af:46:5f:e4:aa:a6:88:d0:03:f2:8e:5c:69:
48:37:53:41:f3:2a:d6:4e:4b:3a:84:69:d9:51:2f:
2c:2c:e5:34:a0:79:f0:bc:a7:58:a1:9c:fb:45:f3:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:68:F7:48:5A:BD:4D:AC:B5:82:B0:A9:9A:01:50:76:2D:6E:32
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a2:b1:2e:59:31:70:b1:23:4d:82:43:17:a4:73:ab:ff:1d:
19:d9:3a:d6:ab:ca:90:db:06:66:f2:49:86:d4:1a:37:c4:39:
b8:25:cd:f8:4f:74:ec:10:80:a3:22:f2:a8:b3:53:52:cd:c5:
49:63:6e:db:ce:56:16:24:1d:6e:3f:6e:fc:47:95:4c:68:69:
e6:83:0c:fb:cb:ec:cc:21:b8:a6:ea:90:8f:05:af:fd:31:23:
d7:6d:d1:0f:2e:0b:a9:85:8c:66:2f:1f:0b:bc:89:99:51:0e:
96:f1:63:da:24:e6:91:9e:94:31:ed:fc:7b:43:b3:1d:6f:81:
17:2b:a6:3b:bf:f5:ec:97:f0:91:ba:4c:31:f9:fd:ad:03:9a:
da:6c:03:30:b6:df:22:59:96:a9:d2:30:b5:61:c3:10:be:82:
9d:c1:3b:e3:f0:db:65:87:bc:2d:c6:9e:43:4b:da:ad:b4:4a:
ef:51:fe:f7:59:d8:b6:15:0d:ba:9a:c1:4e:ad:69:70:1e:af:
a0:0c:d7:dc:e7:d5:c0:4c:ae:8f:6a:8b:f4:29:d4:d4:f2:21:
3d:2f:9f:ae:ad:37:20:e8:45:0f:97:e8:25:20:be:13:72:c6:
33:8f:98:df:e1:eb:b9:1d:3a:86:ac:c5:20:f2:6c:67:a9:39:
1a:8f:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:05:52 2026 by rpki-client