Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: vNdXrfu8cdgU/ObsPV6B0OsJsbhsYvU+DvBW+u+QnS8=
Subject key identifier: F0:15:22:09:CE:57:CD:F1:5B:44:9C:2B:FD:FC:28:4D:56:B6:D4:D4
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019E1FB6172CDE4ECBAE3B2377908F18F52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0C33
Signing time: Wed 13 May 2026 05:01:27 +0000
Manifest this update: Wed 13 May 2026 05:01:27 +0000
Manifest next update: Thu 14 May 2026 05:01:27 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: o2iU1zltE6Qiu5iJlQWmkPVfcZp7FlptyFOf0HsXPzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:17:2c:de:4e:cb:ae:3b:23:77:90:8f:18:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: May 13 05:01:27 2026 GMT
Not After : May 14 05:01:27 2026 GMT
Subject: CN=f0152209ce57cdf15b449c2bfdfc284d56b6d4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:b3:9d:a5:77:0f:9c:ee:41:25:3a:b7:d1:
9f:35:3b:1c:4d:1a:76:c8:0b:46:b8:5d:d4:b5:15:
d0:3f:e8:71:57:14:d7:e7:bd:58:29:4a:43:9e:42:
dc:65:e0:e6:4a:c1:b5:e8:ad:02:13:61:7c:f3:1f:
45:d7:9c:06:68:4d:ca:85:43:42:89:39:5d:3a:b6:
ca:7d:c1:33:37:db:73:cd:bd:16:ab:b9:c2:6d:05:
03:dc:2c:68:95:85:aa:93:3c:72:d4:ac:4d:70:f5:
f8:b4:b4:a7:57:e7:91:23:ac:a0:49:f2:63:4f:0b:
14:a8:a0:bf:dc:80:fd:37:f9:22:37:2c:de:01:c9:
85:c0:16:4c:c5:c3:b8:7d:28:7a:30:9b:69:a7:37:
de:64:ff:b9:a9:fb:07:e6:0f:21:d6:0e:e5:73:44:
44:40:d3:21:22:ca:cd:a6:9d:d9:c5:2b:ee:6e:cd:
c9:93:d1:03:83:96:dd:f2:11:d2:32:6d:c9:97:ca:
54:5d:b6:45:2b:06:5f:95:66:24:cf:26:3f:b5:f7:
ea:cd:71:26:e6:11:f7:bc:8a:c6:2c:4c:92:9e:49:
74:d3:0a:ae:4c:c5:b1:f3:bd:07:0d:24:12:58:b8:
5b:2f:50:40:d1:a5:fe:ad:12:6a:ec:a1:f3:95:7e:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:22:09:CE:57:CD:F1:5B:44:9C:2B:FD:FC:28:4D:56:B6:D4:D4
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:b7:b2:37:cc:39:d6:25:26:1f:40:e2:48:70:47:19:96:
05:b5:c0:20:3f:97:e5:a6:92:3f:ec:2e:4b:db:3c:03:fc:83:
33:2d:8e:94:c3:18:6e:a0:17:a8:89:be:a2:cc:c1:dd:0d:61:
6b:d2:b2:76:6e:25:c2:72:28:88:09:3c:63:7d:17:9d:07:31:
ce:18:38:30:4e:07:7f:10:f0:0d:d5:50:8a:a0:c3:f6:41:a4:
65:92:3c:09:e4:bd:ca:33:6b:13:cc:97:4f:0f:84:a4:0a:ea:
2f:02:1a:10:7e:63:20:f8:e2:4b:de:7a:0c:c9:81:d0:59:16:
16:05:d7:41:3e:33:7f:c2:67:57:77:bf:dc:46:09:00:6b:de:
af:57:7b:5f:c1:4c:a3:db:f5:36:2e:49:30:87:71:3c:01:48:
cd:9a:40:7e:08:cd:c6:83:dd:0d:0d:b0:15:f3:35:52:2a:46:
be:8a:e1:cb:a4:52:9e:2e:94:75:2a:7f:d0:66:3d:50:92:89:
35:cc:56:0e:aa:69:25:08:28:91:72:76:6f:27:b4:00:12:5f:
9a:1c:7e:42:f2:a9:6b:a3:e3:ea:ef:d6:1d:9f:94:fd:fb:08:
a8:6e:1d:16:12:f4:00:89:d6:f5:13:0f:1c:0f:9d:44:83:a3:
4f:67:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:42 2026 by rpki-client