Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: 1iuBqHKh0FxPuDZXZt4EK7CzA6ki5R+z9dsTcdGAZXo=
Subject key identifier: D7:DB:5E:FA:9C:85:48:67:E6:EA:F4:BD:08:45:F2:46:81:83:81:90
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01A0CDB55A5AA23704FCF1BC794E8569D6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1A7B
Signing time: Wed 23 Sep 2026 10:00:09 +0000
Manifest this update: Wed 23 Sep 2026 10:00:09 +0000
Manifest next update: Thu 24 Sep 2026 10:00:09 +0000
Files and hashes: 1: 8_5L183N5VYi33PFgyNl30nZ-0U.roa (hash: WdOddVYuBU7Ft7FiXqY6LOQ6deX5MP1aprQPlrRE8L8=)
2: 9PqkEGRCIk2yYfzY26gLFkQ-8js.roa (hash: jpfKtSlVYwWZpnaWDix/WKUF8NqzzWuC81b90Lt99zU=)
3: 9Vay-gG27tArSBIPskNgj__6_i8.roa (hash: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc=)
4: Ga4MEdE66A3X4pKqHdnMqL8RZV8.roa (hash: PVtvNEInOE4OeEScvnqZ1ElVCHNORyzTUmLPo7o6ML8=)
5: LKjf7o_3WUfKZdN019fUVQORc-s.roa (hash: vlLPmEb1KK6Co5nJrgcvXX7ly4ij/lppSPEpt9g7Zos=)
6: ZTlU03e2qt__TpF-io4-AEKUOrU.roa (hash: Zw2bD+qyXYZT0vDGotQc/HMnILry5JdGYie/nLyOu5Q=)
7: hMETGb9VAC5A2KuzQKg4WmxFmJA.roa (hash: rjUrw2hE9fEw4IxQF4Ze8WeXj/DO7a6kjsn9RA2w4Os=)
8: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: XOVl3yukNO9/yB8GzTUrxkfpK+4/hw1LDiJhH9r0lO4=)
9: wN49OFQ5_N3IG3a5kiAO9am9dg8.roa (hash: XT34PuJToY51E83rcV8TJMrNfpPhu/lemyAWGeaUIM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:5a:5a:a2:37:04:fc:f1:bc:79:4e:85:69:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Sep 23 10:00:09 2026 GMT
Not After : Sep 24 10:00:09 2026 GMT
Subject: CN=d7db5efa9c854867e6eaf4bd0845f24681838190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:61:43:23:6f:d7:93:05:e1:e0:09:5a:68:
e7:e3:6a:9d:4c:b0:89:a8:a9:b0:5b:b8:c4:9f:67:
5d:8c:c2:9b:21:52:fa:fd:60:57:36:3e:73:23:15:
69:ca:1c:d0:e5:22:93:6f:51:07:d2:f8:76:9b:3a:
c9:48:4b:cd:35:ee:47:64:0b:1f:68:7d:55:05:5e:
51:2d:60:f8:94:2c:1b:c9:bf:1b:26:8f:48:e8:f9:
1f:69:4e:cb:c9:2e:f8:42:90:b6:c0:c4:b1:b1:59:
3c:49:47:c3:fe:10:14:26:4c:88:1d:c9:ea:10:6c:
04:a7:c2:65:f3:1e:67:e6:9d:ba:9a:f9:12:20:d7:
9d:ac:15:23:55:a8:06:75:11:6a:8a:07:7f:05:ae:
c8:3c:77:15:86:cb:49:63:4b:32:cf:d4:f3:69:c5:
ac:71:3e:b5:fd:80:ee:70:9c:fd:43:2a:5b:33:52:
5d:a4:5f:72:fe:d6:ac:10:51:ac:4e:9b:2b:f0:c1:
29:31:d9:d5:a9:8c:66:2c:10:bb:e5:ec:29:f4:5e:
ad:ca:e5:f1:e2:04:11:1f:1c:b2:f7:00:fe:21:1a:
78:5f:82:62:6b:9f:5e:2b:7e:66:dd:e5:17:23:36:
08:c3:01:b8:75:2d:23:1e:7e:f2:e1:62:87:66:a3:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DB:5E:FA:9C:85:48:67:E6:EA:F4:BD:08:45:F2:46:81:83:81:90
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:25:37:75:42:cb:67:8a:6f:ae:c1:a3:e1:32:2e:9b:e7:
9c:81:58:fd:28:35:b5:0d:23:a4:be:b7:ff:cc:36:1a:eb:07:
e5:76:40:06:ba:7b:be:cc:c9:b4:30:f2:79:6b:0e:42:5a:8c:
58:a9:3d:0b:50:57:51:95:6e:b6:b8:fd:25:5c:65:df:46:7c:
02:af:17:3a:10:03:9e:a8:58:d0:6e:8d:e4:51:58:14:80:09:
47:f8:f8:5e:0c:0b:46:25:ba:d7:ae:d4:03:a5:fa:5c:97:42:
58:62:70:fe:44:25:8b:82:19:33:c4:34:e9:0e:e3:80:94:e4:
dc:8f:2b:9f:03:89:92:d6:18:ac:e4:87:0b:28:4a:2d:4c:c1:
8d:3d:1e:9d:d1:b5:1c:d4:81:bc:65:49:48:32:de:70:d4:f3:
ed:96:ab:b1:2f:f9:46:71:16:68:81:e5:7e:9f:d5:2b:df:6d:
ea:9d:c0:f1:bb:92:84:a4:2c:ab:79:ed:49:64:05:50:e0:68:
55:1b:b2:05:58:7e:66:99:09:2e:64:f8:32:cd:8f:b9:e2:af:
dd:dc:57:ba:8f:2f:f1:51:e8:eb:10:a1:cb:f8:ea:9f:c7:c0:
0c:8f:65:8f:76:d6:93:da:aa:90:80:24:58:83:23:9b:6f:b6:
7f:3b:4a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:14 2026 by rpki-client