Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: ayru7ci084ErwuTemxb33jfVgdeSKeRE+PumjxmDj3k=
Subject key identifier: BA:58:8E:C3:26:64:28:C4:90:B0:C1:A8:61:54:A4:68:C2:5B:73:E0
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019E1D90ECF812664E8182E3DA9FDFB43197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: YhsjFdGGK_6ON1FBtuxgmdwheyA.roa (hash: 64Tb7zxh4tuRO21YiMBfvgZBSdC/2Ty9Mxl18Hv18gA=)
2: fi6D_Q5Le5eiD6-9JaEHZ_M4yXA.roa (hash: lFdrIIdtjiCYDR2tpND6VyItgrcJm0ON9+SgONNjvtk=)
3: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (hash: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A=)
4: h2NAEmh9bsegz-FoJXfTB15ZZJk.roa (hash: uh3QBTKdg1DqO9gqwS5lnG2/Dsfn0YxPIDMUAOSyI9I=)
5: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: VQxafNxPN8LeOJRv0fRM3EXCuTgiJPxA+E/CUJGgODY=)
6: oOUHyt2lwAraeWDbtZYel--A0LA.roa (hash: qZ9a8A6AByWWpwPU9LrL8wfd4Kyr/sXVI1CsJ5vTla8=)
7: pJsxJtSo5imNU7v93La15fLkJAA.roa (hash: +fAb2sHSLdygccfss8kyRfDM1ke9+Lsk3/YoPePDo2Q=)
8: vBrlV27V1bfTVLlILh00n20z_uY.roa (hash: eiyS1uFSIt9joYpPFFZ3HDnGf1RAfdFn5060va8JSD8=)
9: yt_7T50IANQCtorHb2tBazjD69g.roa (hash: etu1e+RCPw6QUn/Jk6cZvXgZcn6VXIKZiAbbPv/IYyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ec:f8:12:66:4e:81:82:e3:da:9f:df:b4:31:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=ba588ec3266428c490b0c1a86154a468c25b73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:5d:b4:d9:b3:7b:8a:d6:07:3f:87:ba:0e:
5b:34:c0:f5:cb:25:ee:ef:a8:aa:14:08:2f:c2:81:
2b:32:e9:17:57:ec:f2:cc:69:06:19:41:0c:e7:6a:
c4:79:e0:57:7b:b2:e9:68:cc:65:b5:92:a6:00:bf:
7e:1d:70:0c:85:55:9f:a3:1f:b7:8e:09:49:bb:54:
c8:eb:52:e9:57:3c:3b:3c:02:e4:98:55:56:e0:4a:
de:2a:b3:91:a2:56:d4:97:59:e6:29:51:a2:82:38:
0e:31:e6:cc:8f:66:f5:54:dc:18:80:e5:10:fb:f8:
71:1a:60:48:aa:1b:18:2f:94:77:9b:40:42:2b:82:
11:5b:5c:1a:cc:47:0d:0d:54:e7:1d:c6:c2:c6:ca:
70:1e:71:8a:d6:9f:4e:69:9b:5f:11:c2:7e:5a:b1:
0f:e8:60:e2:5e:55:8f:d5:7f:57:88:14:71:6a:a5:
35:8c:4f:96:6b:24:a4:aa:8f:c1:11:a4:5f:62:de:
d2:2f:c6:c5:1e:ab:dc:e8:7b:a8:78:1c:f4:71:e8:
29:aa:81:83:a4:72:fc:18:90:76:95:03:06:82:8b:
d4:5f:b3:74:f5:ed:af:fb:84:d4:d5:e0:ea:5b:11:
be:89:04:70:50:8b:17:94:17:ce:c1:b1:5c:2d:32:
f4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:8E:C3:26:64:28:C4:90:B0:C1:A8:61:54:A4:68:C2:5B:73:E0
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:25:ff:78:dd:40:87:0f:bd:b1:9f:b6:0b:d3:a1:e0:8e:52:
12:1f:25:1c:b5:36:e6:21:a9:08:4d:59:2b:98:25:3e:0a:d9:
e1:26:35:35:9c:61:2f:df:1f:3a:10:cf:16:01:77:ea:b1:e0:
51:c2:1f:f9:82:36:43:52:51:44:59:19:d2:05:af:2e:e9:74:
5b:bd:99:f9:07:8a:23:e9:8d:b3:b7:aa:0f:14:e0:6e:72:35:
3a:55:f5:75:ba:55:04:97:f8:4c:80:ed:23:14:e4:72:f0:ec:
ad:5f:b6:8e:6c:7a:72:87:b4:de:08:83:50:8a:3a:7f:e0:3c:
27:7c:90:68:f4:a3:98:b7:f8:d5:e6:7c:58:71:ef:e7:12:fd:
61:e7:f9:1f:78:8e:ea:62:f1:64:03:09:b6:53:38:1d:65:07:
50:28:d6:dd:82:5b:87:8c:a5:c2:e5:66:05:e7:df:98:68:d8:
86:d0:8b:9b:bd:f5:d5:15:5d:eb:9f:46:b1:9a:fb:bd:f6:f4:
7c:2b:38:b6:35:ac:32:9d:7e:c0:2e:22:c4:68:19:9b:bf:ec:
dc:cf:9c:d3:5f:d2:ed:40:70:a0:9a:15:6d:aa:cb:c9:a5:f6:
2f:3a:de:29:04:c5:90:73:1d:ae:16:52:fd:a8:f6:bf:33:ae:
75:d4:4a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkOz4EmZOgYLj2p/ftDGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjYwNTEyMTkwMTM3WhcNMjYwNTEzMTkwMTM3WjAzMTEwLwYDVQQD
EyhiYTU4OGVjMzI2NjQyOGM0OTBiMGMxYTg2MTU0YTQ2OGMyNWI3M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o1dtNmze4rWBz+Hug5bNMD1yyXu
76iqFAgvwoErMukXV+zyzGkGGUEM52rEeeBXe7LpaMxltZKmAL9+HXAMhVWfox+3
jglJu1TI61LpVzw7PALkmFVW4EreKrORolbUl1nmKVGigjgOMebMj2b1VNwYgOUQ
+/hxGmBIqhsYL5R3m0BCK4IRW1wazEcNDVTnHcbCxspwHnGK1p9OaZtfEcJ+WrEP
6GDiXlWP1X9XiBRxaqU1jE+WaySkqo/BEaRfYt7SL8bFHqvc6HuoeBz0cegpqoGD
pHL8GJB2lQMGgovUX7N09e2v+4TU1eDqWxG+iQRwUIsXlBfOwbFcLTL00wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpYjsMmZCjEkLDBqGFUpGjCW3PgMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSX/eN1A
hw+9sZ+2C9Oh4I5SEh8lHLU25iGpCE1ZK5glPgrZ4SY1NZxhL98fOhDPFgF36rHg
UcIf+YI2Q1JRRFkZ0gWvLul0W72Z+QeKI+mNs7eqDxTgbnI1OlX1dbpVBJf4TIDt
IxTkcvDsrV+2jmx6coe03giDUIo6f+A8J3yQaPSjmLf41eZ8WHHv5xL9Yef5H3iO
6mLxZAMJtlM4HWUHUCjW3YJbh4ylwuVmBeffmGjYhtCLm7311RVd659GsZr7vfb0
fCs4tjWsMp1+wC4ixGgZm7/s3M+c01/S7UBwoJoVbarLyaX2LzreKQTFkHMdrhZS
/aj2vzOuddRK5g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:13:08 2026 by rpki-client