Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: 1r66rhiL3Ew6WPZaU4wRSEolHJ38uEythLDzN8UB6S4=
Subject key identifier: 7C:B7:50:F1:F9:08:3E:E5:0F:F6:FB:BC:6E:6A:C0:F6:BC:77:18:8B
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019D265ED5A317D160B90DF483F602B68C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: 7Fke0bsBd7BfRbxMW2ccJRfIAhb/LYb8ONZad7/cPe4=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d5:a3:17:d1:60:b9:0d:f4:83:f6:02:b6:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=7cb750f1f9083ee50ff6fbbc6e6ac0f6bc77188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:b9:36:de:e5:4a:88:4e:f4:5c:64:06:fd:
61:ab:3b:ec:75:39:01:ec:1d:c3:8c:f3:86:8c:ca:
58:ae:73:ec:a7:cd:52:f6:1f:8b:95:51:2b:68:29:
e0:9a:ee:b7:d9:9f:8b:54:ad:4b:81:ed:ef:e6:aa:
74:e7:14:c6:04:60:90:fa:bf:bd:e2:af:6c:3d:81:
3e:59:80:de:03:75:66:79:af:74:a2:9f:c7:dd:e3:
c6:28:1f:88:8a:69:5a:28:36:81:86:59:7a:fa:5d:
19:1d:07:74:71:6c:80:70:a4:24:0b:15:cd:0c:c4:
04:d3:b5:f5:67:29:74:59:9c:b1:d2:10:cd:9e:c7:
57:63:58:43:98:b7:d3:0e:96:d8:b6:54:9a:14:a3:
c4:28:dc:b7:f6:82:bb:58:b0:13:30:7a:de:a9:c2:
5d:d4:cc:45:80:49:9f:58:32:d9:2c:75:3e:11:f7:
83:26:d4:8d:2a:f9:04:08:b9:6f:5b:12:e3:7a:ff:
ac:3b:e5:61:72:6b:fb:c9:9c:22:38:fe:10:6c:bc:
68:bb:30:9e:d5:eb:24:b2:d3:3a:d9:13:16:00:6b:
12:48:4d:04:56:a4:46:30:0a:ea:6e:67:79:49:cc:
8d:c8:96:5b:19:86:cf:f1:9d:10:e5:f1:50:da:17:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:50:F1:F9:08:3E:E5:0F:F6:FB:BC:6E:6A:C0:F6:BC:77:18:8B
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:1d:56:1d:c6:d0:70:7d:3e:d9:d0:09:31:ee:ff:7d:d3:
75:80:3d:db:f4:17:3c:91:80:60:71:65:4d:bd:e8:68:9f:2b:
98:b0:bd:56:50:d3:ca:98:e8:98:ca:81:9c:83:f1:ed:fb:91:
e8:97:58:c8:0b:64:5c:bf:dc:14:9e:b5:1e:ac:7f:6d:30:99:
0c:3c:fb:4f:65:36:51:5a:5e:11:73:64:0b:11:28:83:da:ad:
45:2f:28:a7:cb:90:24:f1:1a:4a:6b:b7:42:7b:40:fc:62:e3:
ba:8d:03:97:66:55:c1:f4:31:ce:25:d7:9f:fd:c2:53:b8:af:
d8:89:5a:3e:24:19:41:c3:9d:22:72:64:b5:be:6e:85:5e:cd:
ef:78:7c:d1:d0:c8:96:dd:33:4a:9a:d2:9c:da:49:44:0c:2d:
4d:91:7f:40:93:22:fd:c9:eb:51:5b:c5:ce:1c:4e:cc:78:25:
e0:6d:03:55:57:a6:5b:c9:f2:07:4a:91:77:c5:af:8f:c0:9f:
2c:db:cc:b7:b6:3e:6f:0a:f2:c7:c4:fd:e1:6a:98:b6:81:e3:
78:da:71:c8:4e:66:6d:38:78:da:08:be:b5:14:d9:79:8a:e7:
32:46:81:24:90:7e:a4:b2:24:63:32:c3:19:3f:66:a7:25:e7:
fb:c0:9f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXtWjF9FguQ30g/YCtoyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjYwMzI1MTkwMDQyWhcNMjYwMzI2MTkwMDQyWjAzMTEwLwYDVQQD
Eyg3Y2I3NTBmMWY5MDgzZWU1MGZmNmZiYmM2ZTZhYzBmNmJjNzcxODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTO5Nt7lSohO9FxkBv1hqzvsdTkB
7B3DjPOGjMpYrnPsp81S9h+LlVEraCngmu632Z+LVK1Lge3v5qp05xTGBGCQ+r+9
4q9sPYE+WYDeA3Vmea90op/H3ePGKB+IimlaKDaBhll6+l0ZHQd0cWyAcKQkCxXN
DMQE07X1Zyl0WZyx0hDNnsdXY1hDmLfTDpbYtlSaFKPEKNy39oK7WLATMHreqcJd
1MxFgEmfWDLZLHU+EfeDJtSNKvkECLlvWxLjev+sO+Vhcmv7yZwiOP4QbLxouzCe
1eskstM62RMWAGsSSE0EVqRGMArqbmd5ScyNyJZbGYbP8Z0Q5fFQ2hc76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy3UPH5CD7lD/b7vG5qwPa8dxiLMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzgdVh3G
0HB9PtnQCTHu/33TdYA92/QXPJGAYHFlTb3oaJ8rmLC9VlDTypjomMqBnIPx7fuR
6JdYyAtkXL/cFJ61Hqx/bTCZDDz7T2U2UVpeEXNkCxEog9qtRS8op8uQJPEaSmu3
QntA/GLjuo0Dl2ZVwfQxziXXn/3CU7iv2IlaPiQZQcOdInJktb5uhV7N73h80dDI
lt0zSprSnNpJRAwtTZF/QJMi/cnrUVvFzhxOzHgl4G0DVVemW8nyB0qRd8Wvj8Cf
LNvMt7Y+bwryx8T94WqYtoHjeNpxyE5mbTh42gi+tRTZeYrnMkaBJJB+pLIkYzLD
GT9mpyXn+8Cfkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:14 2026 by rpki-client