Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: ghepjXqryPZX2Egb+mm0tMnhwrfrwdr8pmNfWtaEqJA=
Subject key identifier: 3B:F8:29:5B:10:A1:47:FB:9B:DB:99:0E:02:D9:6C:53:96:0D:69:B9
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019F9090C5552A3B429BC125540ADAF2C573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0CF2
Signing time: Thu 23 Jul 2026 20:00:34 +0000
Manifest this update: Thu 23 Jul 2026 20:00:34 +0000
Manifest next update: Fri 24 Jul 2026 20:00:34 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: jAPrwJjs4U/xSmwmvYHOgXqGkrDQCb2UoFmdBxoTj70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c5:55:2a:3b:42:9b:c1:25:54:0a:da:f2:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jul 23 20:00:34 2026 GMT
Not After : Jul 24 20:00:34 2026 GMT
Subject: CN=3bf8295b10a147fb9bdb990e02d96c53960d69b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:91:98:b6:21:6a:b7:64:0a:ee:02:a0:4c:
a6:7b:0c:eb:d8:0c:79:f0:c5:77:1e:64:18:ba:47:
25:9d:14:1b:5c:1d:c8:af:c8:90:7e:fb:97:c7:c6:
f9:8a:e8:a1:5e:d2:fc:e0:e4:a0:14:92:31:b9:75:
6f:47:96:31:00:9f:6f:1d:64:dd:92:90:91:fe:f7:
85:cb:0a:f4:35:00:fa:30:fe:2c:f8:5a:bf:d6:1f:
7f:74:ef:61:0f:6c:47:f0:05:9c:df:7b:6e:9b:6a:
a9:4b:a7:32:8a:8b:c1:5e:d6:7c:e2:5d:01:26:93:
0b:4e:ac:35:cb:99:83:0a:83:15:ae:71:29:63:d5:
27:e5:e7:88:90:c1:e9:d6:20:db:ad:d5:59:7a:a4:
0a:5d:3a:b4:ce:85:66:20:57:4f:2e:ca:ca:0c:6f:
c4:94:d1:cc:5f:da:73:c9:ee:be:b1:ab:a5:72:fd:
41:59:2b:ea:c5:e6:b9:00:4a:54:fa:84:68:5f:1f:
73:44:3e:62:37:ed:ee:31:0a:f8:68:97:1d:d4:32:
7f:2f:52:3a:4a:0b:70:22:87:ed:ef:8a:2c:fc:ba:
b6:b7:9f:ce:ff:0a:e8:c6:22:92:0f:0d:12:0a:77:
f0:06:85:6f:ad:b7:71:00:f6:e1:50:35:d3:74:f1:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:29:5B:10:A1:47:FB:9B:DB:99:0E:02:D9:6C:53:96:0D:69:B9
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:05:a9:3c:c3:6d:34:3a:ec:bf:9c:6c:ce:46:d1:11:0d:73:
73:fa:ce:77:d0:a4:c7:07:9e:a6:9f:cd:be:c3:63:32:93:67:
33:35:8a:f1:da:15:bb:ac:37:94:ab:42:e6:77:85:de:23:b1:
05:3a:52:ff:d8:9b:55:58:98:9e:b2:db:6b:1d:4f:b4:16:b4:
6c:ae:d7:27:c4:b8:9e:63:6d:85:ba:16:bd:71:3c:7e:cc:95:
8f:03:12:45:b7:4d:b7:2e:a6:90:76:5b:11:29:e0:8b:72:b0:
b9:ad:db:9e:16:7f:e0:bb:8c:e1:e9:44:c0:89:3b:02:e2:e5:
52:9f:3e:e7:f6:b3:a8:0e:5c:1c:83:08:68:ab:21:b9:44:ed:
e5:b1:4c:1e:9f:e0:81:f3:12:07:a5:6c:1b:2d:d5:8a:c5:5d:
b1:ef:04:b6:a2:55:b3:a7:8c:74:e5:b7:1c:87:1f:06:ee:c7:
39:5c:db:62:8e:e5:ac:d1:74:eb:d0:cc:39:de:85:d3:c4:f1:
4b:52:4a:e9:15:31:35:7d:7f:e8:eb:47:dc:83:1e:7c:6b:3e:
c8:61:d9:96:01:ca:b5:b2:f2:80:56:1c:1a:ed:cc:c8:4b:08:
7d:b2:bd:77:f2:83:06:db:ad:50:e5:4d:8f:ad:27:a8:bf:34:
16:ee:04:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkMVVKjtCm8ElVAra8sVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2IyMjJiODEyNmEyMWRmMzJkMDE1ZTRjNDg1Mzk1N2Qx
ZDk3NDQwHhcNMjYwNzIzMjAwMDM0WhcNMjYwNzI0MjAwMDM0WjAzMTEwLwYDVQQD
EygzYmY4Mjk1YjEwYTE0N2ZiOWJkYjk5MGUwMmQ5NmM1Mzk2MGQ2OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2RmLYhardkCu4CoEymewzr2Ax5
8MV3HmQYukclnRQbXB3Ir8iQfvuXx8b5iuihXtL84OSgFJIxuXVvR5YxAJ9vHWTd
kpCR/veFywr0NQD6MP4s+Fq/1h9/dO9hD2xH8AWc33tum2qpS6cyiovBXtZ84l0B
JpMLTqw1y5mDCoMVrnEpY9Un5eeIkMHp1iDbrdVZeqQKXTq0zoVmIFdPLsrKDG/E
lNHMX9pzye6+saulcv1BWSvqxea5AEpU+oRoXx9zRD5iN+3uMQr4aJcd1DJ/L1I6
SgtwIoft74os/Lq2t5/O/wroxiKSDw0SCnfwBoVvrbdxAPbhUDXTdPF9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv4KVsQoUf7m9uZDgLZbFOWDWm5MB8GA1UdIwQY
MBaAFJ7LIiuBJqId8y0BXkxIU5V9HZdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzIt
NThlNGYyNGZhYmVhLzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNGYyOWEtYTcwOS00MmJhLTk2MzItNThlNGYyNGZhYmVh
LzEvbnNzaUs0RW1vaDN6TFFGZVRFaFRsWDBkbDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQWpPMNt
NDrsv5xszkbREQ1zc/rOd9Ckxweepp/NvsNjMpNnMzWK8doVu6w3lKtC5neF3iOx
BTpS/9ibVViYnrLbax1PtBa0bK7XJ8S4nmNthboWvXE8fsyVjwMSRbdNty6mkHZb
ESngi3Kwua3bnhZ/4LuM4elEwIk7AuLlUp8+5/azqA5cHIMIaKshuUTt5bFMHp/g
gfMSB6VsGy3VisVdse8EtqJVs6eMdOW3HIcfBu7HOVzbYo7lrNF069DMOd6F08Tx
S1JK6RUxNX1/6OtH3IMefGs+yGHZlgHKtbLygFYcGu3MyEsIfbK9d/KDBtutUOVN
j60nqL80Fu4ErQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:37 2026 by rpki-client