Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: Suc8HLM8loU/LslpiuaHtBq2E+BSrOLYTi9HO1IHOa0=
Subject key identifier: 60:2F:A2:3A:FD:D4:7A:61:2E:CE:ED:C7:60:47:9D:8F:F8:D4:BC:AE
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019F905A9A3B725C51B3AC27FAB53A7111FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 19:01:24 +0000
Manifest this update: Thu 23 Jul 2026 19:01:24 +0000
Manifest next update: Fri 24 Jul 2026 19:01:24 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: Ww9dDq1MxVO6EwckG5yEahQyyf/qPPVqLjf5ZzY37iI=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:9a:3b:72:5c:51:b3:ac:27:fa:b5:3a:71:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jul 23 19:01:24 2026 GMT
Not After : Jul 24 19:01:24 2026 GMT
Subject: CN=602fa23afdd47a612eceedc760479d8ff8d4bcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:c8:b5:64:ea:bd:c2:08:d0:6c:03:a0:cf:
f4:e4:0d:a1:ad:d6:07:c7:4a:14:1b:f8:5e:cf:3c:
99:dc:65:0e:ef:58:ff:7a:01:32:58:58:91:33:5c:
67:49:30:75:c1:ea:0e:c6:03:2a:29:cc:9c:99:c3:
72:6b:48:6c:57:8f:6c:26:b1:5a:7a:29:34:77:3a:
d2:92:cb:8b:43:36:56:44:c2:99:ae:e4:35:b2:5d:
3d:3f:5f:41:df:0e:c0:e4:4f:b2:05:39:df:b4:eb:
5f:a1:75:6d:7d:18:2b:9f:f7:a9:04:ec:cf:b7:9d:
b5:12:39:0b:24:18:7c:af:6f:64:db:d1:c6:15:1a:
ea:81:89:10:a3:39:39:39:95:21:e5:8d:cc:78:53:
98:5f:cb:78:45:5b:32:36:46:e4:18:34:12:1f:42:
f5:f1:3d:f4:27:e3:21:c0:5d:cf:cf:2c:6d:73:8e:
3b:d2:ad:69:90:a2:3a:81:49:36:cd:12:80:10:ae:
c5:d2:18:85:df:70:f9:7f:eb:f7:48:2a:67:d2:51:
b8:97:24:e3:dd:83:e9:9b:b5:fd:60:96:19:8b:0f:
83:f2:34:84:6c:29:9b:85:e7:61:f7:20:69:3d:cd:
5a:f3:f3:5d:fd:b4:a6:54:33:e4:bd:13:a3:4c:de:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2F:A2:3A:FD:D4:7A:61:2E:CE:ED:C7:60:47:9D:8F:F8:D4:BC:AE
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:44:2d:29:b5:54:bd:7a:f7:e7:75:d8:f5:32:f6:2c:32:d8:
7b:04:db:59:60:56:f3:3d:6b:47:d4:fe:45:85:c4:6b:2d:92:
b3:a8:82:05:c8:dd:1a:b5:71:f9:f3:24:5c:69:cf:a8:e5:9f:
57:e3:6d:3f:03:a5:ec:b5:7f:7a:4f:3c:fb:aa:3d:1f:ba:9f:
b7:57:41:db:f9:2a:82:39:71:b8:48:d0:35:4f:95:57:26:85:
f0:f2:17:81:a9:e8:55:92:e3:56:8b:f2:01:a3:9e:c9:b9:7d:
27:5c:41:f6:97:e5:11:71:f0:5c:a9:ae:9c:92:a0:e7:aa:34:
f6:d4:cc:44:3a:98:70:72:64:f9:36:4e:1e:f4:5d:51:86:36:
bf:39:68:f4:69:d9:63:0b:0b:a1:0f:0e:a9:01:6e:19:1c:59:
c5:60:85:f7:ea:e7:4b:a5:15:3e:8d:6e:d9:13:50:45:09:bb:
34:58:41:4a:b4:56:1d:97:47:a7:07:f5:9b:cd:e5:4e:ca:bd:
9e:43:cd:54:c8:ef:d4:4e:28:7a:0d:ee:1e:7f:5f:0a:5d:05:
d1:1d:86:d3:87:d8:4a:a1:c6:e6:53:22:ef:98:5a:59:1e:22:
39:78:40:b3:05:cc:c6:94:45:6e:ed:8b:b2:37:5b:b0:d5:df:
4a:06:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:27 2026 by rpki-client