Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: rWNWJoL+5hJLV9QXFvwH4V447z2N5FgUq4UEQvX5FR0=
Subject key identifier: 10:80:B8:7A:CE:44:80:7D:0F:47:AD:17:B6:D8:F8:99:BA:A9:33:75
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 01A0DD989EF6A81005B65BA75FE82C051B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 12:02:41 +0000
Manifest this update: Sat 26 Sep 2026 12:02:41 +0000
Manifest next update: Sun 27 Sep 2026 12:02:41 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: c7DVYiW4nx0dS2LmW1xFsRjhAuwwgZ9dpWC8hl9TEA8=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:9e:f6:a8:10:05:b6:5b:a7:5f:e8:2c:05:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Sep 26 12:02:41 2026 GMT
Not After : Sep 27 12:02:41 2026 GMT
Subject: CN=1080b87ace44807d0f47ad17b6d8f899baa93375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:21:f3:14:61:37:a6:1e:e7:38:55:3c:8c:
70:b3:bc:66:13:ec:38:a1:23:2c:ce:19:c2:a3:12:
c6:e2:b9:78:95:d1:71:1c:18:a5:d3:8e:be:28:cd:
4c:ab:9f:3b:f2:c1:b4:74:f8:61:70:78:df:45:c0:
f0:83:db:df:fa:e1:a2:56:63:6e:f0:3b:09:8a:f1:
9c:18:32:ce:35:c5:d3:2b:92:09:a0:38:d2:a8:77:
0b:db:2a:ac:cc:73:28:10:f6:94:26:a4:ac:7a:95:
37:86:d8:e0:37:2d:ec:e1:ad:b6:31:e9:d8:39:a4:
1b:27:50:31:99:7b:c5:b0:ef:aa:66:84:99:1b:87:
a0:17:d4:a3:9c:80:0d:0f:2d:64:17:b7:e8:da:cf:
37:14:4b:b4:da:d5:fe:0d:71:15:48:ee:62:43:5a:
89:1b:11:81:b0:2d:6a:5e:8b:d7:94:e5:37:c5:e3:
08:db:22:37:f9:2d:fe:7d:21:bc:2f:d5:81:9c:35:
02:94:36:3b:65:51:e7:f1:c6:27:a5:d0:8c:7a:24:
99:7c:8c:0f:b1:1d:57:fc:f9:a0:68:96:b4:da:61:
a3:23:19:91:3c:25:3f:f6:ce:65:03:c1:69:d5:9f:
3b:c5:b5:3e:43:76:8c:d5:69:94:77:e6:b3:ac:a8:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:B8:7A:CE:44:80:7D:0F:47:AD:17:B6:D8:F8:99:BA:A9:33:75
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:bb:3d:9e:77:96:f7:6b:8a:eb:00:3c:64:e9:23:77:07:
0b:cf:20:77:98:19:c4:62:ea:93:73:80:cc:13:86:ed:14:0b:
f0:d7:a5:c2:5a:62:dc:31:82:15:bc:e8:2a:f6:25:00:b0:19:
df:12:a0:9a:e6:b1:47:3e:72:10:20:5f:14:34:1e:21:c4:86:
50:ca:cb:88:7b:37:f4:41:b9:f8:5f:bd:81:32:8f:42:d2:0a:
05:12:97:cc:5e:74:f6:02:f5:80:08:1c:bd:32:98:8f:a6:cf:
95:4f:89:22:8a:82:a8:c4:f1:d9:72:f0:ff:e6:33:e0:46:12:
2a:dc:2b:d8:51:7f:8b:3b:27:97:e4:cf:08:58:0f:c8:c9:e9:
9e:75:c7:6c:b8:00:a7:b9:80:bd:11:f6:68:83:50:40:b0:1f:
2d:4d:78:d2:e2:7d:e1:ad:b2:48:e3:c9:05:81:8a:4c:4b:05:
3b:fd:ef:2e:03:78:b5:e3:b0:90:ab:11:5e:4c:2c:b9:0a:70:
bc:32:51:9e:f0:a4:55:f1:0c:22:e4:5d:60:c9:25:fe:fb:ea:
06:14:dc:60:1f:7a:22:0f:3a:23:bc:0b:b4:9c:e3:ee:34:b3:
08:35:4e:98:60:7d:48:28:53:ee:45:3a:74:b1:40:dd:ec:c0:
05:fd:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:30:44 2026 by rpki-client