Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: Bvvf7ksMrUTYBUYIchXeWZja28QC3uyToGm2HaWtzxI=
Subject key identifier: CD:9F:FF:F1:0C:C1:7F:75:80:51:D4:A3:3D:68:B2:92:55:B4:3F:03
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019E2091D5BE34E19C4C4B509546A918615C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 09:01:28 +0000
Manifest this update: Wed 13 May 2026 09:01:28 +0000
Manifest next update: Thu 14 May 2026 09:01:28 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: PyosemEEnEVt5dbqfpv5XM1rtIolVEhY63d+vXFmWfc=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:d5:be:34:e1:9c:4c:4b:50:95:46:a9:18:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: May 13 09:01:28 2026 GMT
Not After : May 14 09:01:28 2026 GMT
Subject: CN=cd9ffff10cc17f758051d4a33d68b29255b43f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:f5:25:7e:2f:c7:05:70:02:f8:fa:9c:45:
b3:8d:d9:e6:4c:d7:f3:49:58:ea:23:1c:bc:94:83:
37:ab:ee:e7:62:16:10:96:f1:eb:a0:b8:f5:a0:9f:
db:0b:b8:85:7d:0a:5e:a0:36:45:fb:06:25:56:68:
4f:56:5b:4c:42:f0:50:47:3a:cb:e2:5a:3b:0c:e9:
fc:3a:68:2a:88:90:86:5e:b5:be:51:65:dc:01:83:
d2:04:4f:2e:74:71:6a:46:8b:e4:f1:2d:c5:5d:dd:
42:81:29:18:cd:e1:23:31:5c:2d:b0:41:d9:71:ff:
c2:d8:3a:87:51:70:18:17:84:35:b4:f5:66:17:f2:
e9:12:86:9b:4c:fa:8f:2f:9a:14:ea:f3:77:72:50:
4e:ef:a1:85:18:ce:8e:5f:9f:26:1b:f2:7e:ac:a4:
a1:f6:9c:1a:4e:f4:95:77:75:21:f3:0f:47:41:8c:
09:6a:57:64:7f:40:b4:c2:10:a8:4d:53:81:f4:94:
ac:29:32:58:04:46:98:64:4a:cb:27:f0:18:c0:ea:
84:71:f8:a6:76:15:e3:3d:96:c8:38:e6:f1:f1:86:
b8:e2:3b:a4:34:21:a3:39:fa:da:b4:20:9d:dd:9c:
5f:3b:65:f5:e4:14:f4:a5:53:7b:58:f2:a1:fb:47:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:FF:F1:0C:C1:7F:75:80:51:D4:A3:3D:68:B2:92:55:B4:3F:03
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:e7:32:21:2d:bb:ac:6d:6c:45:3c:3f:43:78:75:bc:33:
32:e8:31:5f:55:cb:c7:c2:70:ae:05:90:cf:7a:fe:7b:54:6c:
c2:17:8d:04:96:1f:79:7a:cf:cf:c3:8d:19:d4:97:4c:b9:fb:
c0:02:5c:3e:48:d4:f8:36:7f:4f:c5:3d:5a:59:02:8a:11:4b:
7c:d5:3e:18:35:d6:e4:09:31:92:b2:44:3f:af:a8:b6:27:50:
56:91:ce:ae:fa:a7:2a:6a:ce:af:6c:bc:f3:2c:24:a0:e6:d4:
ed:6e:23:44:d4:c1:fe:62:32:75:5f:4c:82:f2:07:eb:59:6a:
06:34:76:8c:bd:ef:3c:7b:60:0f:1f:6d:dc:b3:03:2b:86:f7:
89:58:dc:68:8e:e8:cd:79:20:54:13:29:3e:0b:63:1b:f4:17:
38:9b:de:de:c8:a9:34:e0:53:1a:74:51:a8:c4:da:6a:4c:a4:
1c:37:98:d0:e9:1e:bb:45:ea:d3:76:a8:fe:4a:16:92:18:5a:
31:38:d5:af:bd:1a:f2:a1:4b:eb:14:d0:f5:f4:7b:d2:ef:78:
cb:46:4f:b7:ca:8a:ca:11:55:dd:7f:a0:a4:19:f1:56:ba:e1:
02:4d:4c:b6:54:76:71:c3:c8:2f:1b:43:e4:c2:e9:4c:26:71:
e0:92:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:45 2026 by rpki-client