Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: FHvfcS0AYOWZncKMbrJQMST66MVkFnE+vnJ8ARt/qbk=
Subject key identifier: 05:08:F5:1A:F7:FF:0A:C8:62:DD:CC:E5:77:EF:13:F7:0F:03:14:EC
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A1DBDDBD833290B7C2302A943033275E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1AFE
Signing time: Sat 14 Nov 2026 21:01:44 +0000
Manifest this update: Sat 14 Nov 2026 21:01:44 +0000
Manifest next update: Sun 15 Nov 2026 21:01:44 +0000
Files and hashes: 1: K2WJcB75uSp0scLyzOGV-hRGVx0.roa (hash: 0K/8ZwJNliiAnSqFCGjlWxfVF9t/JBGHxvMTKKHkee0=)
2: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
3: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
4: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: RSFzcaDvOPje4aMKsHJbGtaNNz4MB21QFSHeX77QfYs=)
5: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
6: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
7: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
8: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
9: zN9zshVcbLaxGmPY9IoxTTh46cE.roa (hash: lwvqsUUAUGcqsHo7wPkCfnsjzH9q3csw70U8jkFV6t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:bd:83:32:90:b7:c2:30:2a:94:30:33:27:5e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 14 21:01:44 2026 GMT
Not After : Nov 15 21:01:44 2026 GMT
Subject: CN=0508f51af7ff0ac862ddcce577ef13f70f0314ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:d7:b7:e8:3f:ac:c6:79:76:97:b2:0c:46:
58:1b:10:90:74:42:96:33:37:54:af:dc:0e:16:de:
5e:dc:c5:22:f7:37:94:ac:f9:a1:36:e8:2c:c7:69:
c4:29:ea:77:76:e0:68:09:45:66:4c:9f:11:6a:ef:
df:c8:85:33:40:3d:c4:95:44:a0:a8:d9:50:eb:78:
f1:e2:84:1f:e8:bf:f6:22:96:9f:b9:1b:31:8b:f3:
86:1f:ad:79:f7:b5:24:bb:ee:5a:b1:3a:26:64:a4:
3e:98:f3:ba:95:c1:af:2c:fd:7a:5f:78:c3:cd:03:
0e:a5:ff:20:47:2e:07:e8:f3:88:fc:55:be:b2:4a:
d6:a7:e3:b5:a1:06:43:25:e4:95:66:d1:a3:13:de:
c0:95:d6:19:74:1c:11:9c:da:6c:f3:93:5c:51:2e:
f9:62:ce:b2:c7:8e:45:1b:32:0e:1e:6f:15:5f:64:
70:bb:52:13:a8:ec:c6:c5:9e:16:a6:38:27:f1:04:
a4:81:2e:90:88:26:35:4c:ae:44:2d:b6:e5:09:6b:
b1:44:af:59:8d:8b:09:bb:b0:29:5d:69:83:a1:83:
69:7a:21:87:49:fe:82:7b:26:a5:a3:22:3d:ea:44:
8c:9f:d8:66:b3:62:ab:3c:c7:25:b3:1e:5b:56:d9:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:F5:1A:F7:FF:0A:C8:62:DD:CC:E5:77:EF:13:F7:0F:03:14:EC
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:cf:fb:c9:d7:97:f6:5c:3b:fd:45:ff:99:e4:d8:0e:de:71:
3d:2d:76:5d:ec:19:70:3f:b2:66:a6:9f:ce:0c:c1:50:f0:92:
9f:64:da:d3:c8:f3:2a:5c:03:8f:3b:72:f0:9d:2b:a6:8e:f9:
6d:3d:f2:cc:fb:c4:00:c9:c7:fa:a1:1c:d0:32:d0:91:bb:13:
1d:50:d4:5a:cf:28:50:a2:dc:79:ad:9f:1d:ad:3e:55:c2:4d:
04:97:bd:9d:45:b2:de:f2:8a:24:71:dd:cf:42:8b:3c:d2:2f:
e0:f1:4c:fc:94:47:8f:1e:21:11:b3:90:32:42:20:25:f6:ff:
ba:a0:fa:92:80:3b:91:76:53:45:e3:53:41:b2:40:06:30:62:
29:85:15:07:76:a4:bf:38:47:fa:af:38:04:48:ea:b4:7e:da:
28:c0:f1:d4:6d:cf:b4:42:3d:a0:5e:94:8b:47:fb:30:f9:44:
e3:19:af:d4:3e:35:11:13:2c:11:df:cf:89:53:74:ac:4f:5d:
79:ab:a7:e1:58:96:02:5b:b7:ab:3a:7c:48:bf:8b:90:60:8f:
01:59:7b:74:7a:64:8b:d6:aa:7a:9e:ca:70:50:ec:ab:bc:d3:
3f:08:cf:01:2e:b6:89:d0:b5:03:0a:17:1c:1d:05:bc:9f:78:
89:07:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:29:52 2026 by rpki-client