Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: TbEjtGVW1JkxgKBoKqDWEA4oQMijpvoY/YcO6+deyAo=
Subject key identifier: 8F:ED:06:52:6A:59:B7:6F:28:1C:42:14:7E:D6:53:51:E9:13:DC:4C
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01A0DA9602029B98E203ED45D78A4D7818BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 22:00:59 +0000
Manifest this update: Fri 25 Sep 2026 22:00:59 +0000
Manifest next update: Sat 26 Sep 2026 22:00:59 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: n2Mi2o/oXlj6uqIt6K+y0aG7TOtH/cUEjOgL0z19P28=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:02:02:9b:98:e2:03:ed:45:d7:8a:4d:78:18:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Sep 25 22:00:59 2026 GMT
Not After : Sep 26 22:00:59 2026 GMT
Subject: CN=8fed06526a59b76f281c42147ed65351e913dc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:67:82:91:7f:5c:3c:37:58:6f:bf:e5:fe:b9:
ed:b9:92:f6:cb:fe:ba:e3:4e:fa:db:df:31:c5:35:
78:2a:ab:e2:e2:f1:d0:ce:c1:2a:d4:f4:75:ed:8c:
91:3e:b7:f1:36:dc:2d:14:32:26:8d:56:23:50:a7:
6a:a1:fd:79:48:8b:69:52:ad:38:49:60:19:ed:e8:
4a:b8:3e:23:2d:89:03:62:52:79:f5:3f:10:0d:d8:
3f:b9:12:2b:08:cd:64:72:f5:4a:f0:9b:77:af:c1:
e5:b4:c9:30:cb:83:b5:71:b1:00:4b:5d:5c:31:0a:
d8:0e:27:57:06:13:39:04:32:f0:72:4b:5c:6f:c2:
f8:73:ec:d9:23:af:0e:39:f9:e1:be:3c:5f:93:80:
da:da:85:83:d2:6b:02:ce:c3:a9:e2:b0:0c:31:04:
ae:8e:a5:a2:6b:5e:30:10:31:01:e7:a5:7c:13:c5:
2a:37:32:f1:ca:88:1d:64:86:bf:e1:c2:38:15:b3:
a4:64:a6:39:2c:00:b4:7b:bc:6b:6b:67:f8:33:88:
11:c8:01:cd:58:41:01:ce:bf:5a:fb:8e:bd:b1:e7:
c7:bd:c8:6c:5d:ba:a6:9e:80:c8:72:53:be:8a:d2:
67:91:ff:1d:43:31:54:0e:22:47:f9:d6:f4:04:f3:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:06:52:6A:59:B7:6F:28:1C:42:14:7E:D6:53:51:E9:13:DC:4C
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:95:59:74:7b:9f:35:1d:a1:37:3e:d9:5b:4c:10:78:cf:cf:
9c:08:0a:48:bb:82:53:d3:04:23:67:d2:38:88:b8:da:51:0e:
da:7d:84:ae:fd:f7:16:9b:07:a6:12:89:16:f1:3f:bb:a3:ed:
a5:03:fe:85:22:2e:68:bb:05:95:16:32:05:f5:3c:f7:ab:a1:
c0:c4:f0:ea:e5:a8:1e:3a:03:6d:17:73:4e:34:99:d0:cf:ed:
e8:90:bd:7a:c8:46:28:76:90:c1:03:5f:f3:fb:84:3a:0f:8f:
1f:f2:8e:20:35:6d:79:ba:bd:5c:1f:39:aa:c7:c5:0a:eb:f6:
b1:bf:e8:01:bd:b9:01:a7:14:b3:6b:b3:f6:f2:0b:ae:44:8e:
90:00:6e:19:9b:dd:90:fb:62:e4:29:89:78:ff:aa:fc:b9:92:
28:7f:42:db:6d:80:81:6e:ea:5d:2a:7c:79:e9:28:5e:9b:ae:
e1:e8:61:09:0c:56:84:1d:eb:d1:7c:b6:9d:1a:61:3e:11:ec:
c3:80:cf:8e:75:10:d7:07:05:63:21:ed:0d:c6:3d:80:76:c4:
56:d3:de:25:01:66:15:8d:d5:61:ea:14:d5:55:dc:d3:e1:67:
3a:88:e2:93:b1:99:9f:8a:df:8a:88:52:51:15:9e:61:8c:d9:
61:d1:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:44 2026 by rpki-client