Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: 8/XtsgsYH3mNlAVbHYkACflzuGYnGlwhQAmlddcIYgY=
Subject key identifier: 13:E2:70:A7:E6:38:31:BE:61:40:6F:B3:C6:BC:37:1F:8D:B2:82:42
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019D29617211441E037628B7972778F851AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: OALzhGVAJBhNZEQqPE5iPK7IEkCPiJI8/kMkBzPjuaU=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:72:11:44:1e:03:76:28:b7:97:27:78:f8:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=13e270a7e63831be61406fb3c6bc371f8db28242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:8c:e9:03:48:0d:e6:63:69:5f:dc:5b:29:
05:48:46:65:92:35:f7:f6:84:4f:21:f6:2e:b5:57:
85:10:60:e0:00:d3:5c:b7:5b:d0:82:d8:9e:72:64:
71:9d:9e:62:05:1f:a3:a5:f3:ed:5f:8b:86:69:9e:
d9:78:56:53:7c:73:4b:c7:49:aa:9f:16:46:59:d3:
87:50:6b:a1:cc:0a:99:4c:10:60:43:77:00:0e:65:
7e:c5:fc:b8:4e:5c:ff:60:4e:32:47:1d:8d:33:3b:
bb:29:1e:eb:b0:09:47:12:b7:90:4d:2d:00:72:97:
f3:b8:6a:c2:a2:92:e5:4c:19:44:e6:21:07:47:b2:
f2:7a:04:92:2d:52:29:1f:bd:f1:ce:37:df:78:30:
28:f4:67:aa:c4:6d:7e:54:d4:f8:d1:a0:6d:8a:c1:
9d:2c:56:af:32:7d:61:20:f2:fd:f5:a3:25:33:0c:
58:89:80:00:6c:32:cc:2a:0b:eb:2b:81:bc:96:98:
91:01:81:6b:aa:02:29:97:b2:01:b1:5b:15:8e:4f:
85:aa:32:4f:e0:98:c0:82:ac:a4:95:a8:39:7f:94:
eb:45:8d:5f:a1:3f:92:af:fe:51:83:0c:1f:8b:94:
8f:36:85:68:84:65:b9:5d:b8:a5:1d:d9:80:d2:43:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E2:70:A7:E6:38:31:BE:61:40:6F:B3:C6:BC:37:1F:8D:B2:82:42
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:5c:22:5e:1f:d8:34:1c:05:ea:42:72:ad:c1:40:53:2a:
93:43:af:50:b4:19:ca:e4:7b:c8:94:91:34:8e:d3:ce:30:c9:
44:11:3c:d3:88:9a:08:d6:69:4c:12:a2:d6:af:7a:d3:e6:34:
c1:32:60:fc:62:80:e7:10:24:86:6b:be:44:e7:34:c2:05:d1:
14:87:fa:af:37:14:ca:82:ef:7f:98:cc:c1:fe:3b:53:cc:7d:
64:21:1d:8c:4f:9d:5b:6b:91:e5:50:69:23:a1:99:92:e7:e7:
ba:da:d0:32:d0:09:00:54:8b:6a:ee:c6:4a:bf:14:9a:04:67:
28:86:a1:aa:54:8e:82:8e:ec:d2:af:01:bd:de:4f:19:53:97:
40:e8:8a:a3:0d:bf:08:ba:75:a3:37:cb:2b:6e:49:31:cb:b4:
5c:20:52:01:da:d0:3e:bf:24:b6:37:44:77:b8:c0:d7:71:f2:
75:20:ee:50:46:93:7a:62:44:4e:b9:52:9d:76:2f:5e:0b:78:
c0:98:db:1b:c2:b2:b3:c8:58:d4:b0:b6:d4:33:29:cd:b6:9a:
65:8b:c3:9c:d2:d6:99:4e:46:f6:cc:c1:bf:de:86:4e:2f:68:
54:59:6c:fb:09:f7:90:e0:21:94:bc:62:01:dc:24:14:40:7e:
e2:f1:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:38 2026 by rpki-client