Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: D0bgUNnfsmp/jjMl6ZjP4hMEix6AmsyLXWQ0lEWnM/o=
Subject key identifier: 10:DE:2C:FE:D8:FA:44:BB:DA:C3:C1:E8:2A:42:92:A6:90:69:8F:8F
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 019D28841BAECBF5461186DBE9C2E8A65EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0BB3
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: XMh9j8ru94dWS7ud3QdYYY0jSSicCnRBXyb4LLXGPk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1b:ae:cb:f5:46:11:86:db:e9:c2:e8:a6:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=10de2cfed8fa44bbdac3c1e82a4292a690698f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:23:e0:82:b9:3f:c8:eb:e3:11:89:2a:a0:
47:a8:75:02:5a:23:e3:3d:78:4b:c6:89:10:21:50:
31:2a:a0:62:e3:60:7c:ba:e4:05:fa:ca:f3:85:fc:
80:be:a9:c7:14:fe:94:13:da:0e:bc:db:49:4b:44:
13:87:d1:fc:e7:69:f1:ed:e8:5f:1a:db:cb:65:52:
cc:1b:4a:7d:72:b8:0b:fb:65:5e:b0:d5:5a:d2:2a:
06:f8:e0:0b:42:32:85:ac:88:df:32:2b:5c:d9:89:
84:77:30:b5:7d:af:82:4d:4d:4a:91:76:af:e6:b7:
be:cd:b7:e2:0d:5a:30:77:55:5a:1b:ed:27:d2:7c:
47:f2:70:9f:49:55:d6:b7:f2:8c:a4:b3:f8:b8:1d:
47:20:ad:6e:b6:42:a6:a4:58:14:33:c0:fe:7e:f6:
f9:10:cc:43:af:cf:9e:81:65:92:81:a9:4c:84:02:
39:d3:42:c8:99:6f:71:d2:99:af:1e:1b:13:11:70:
8b:19:29:f6:93:fd:00:0d:a0:94:d7:9b:67:13:43:
d2:27:4d:01:ac:e6:e5:70:c0:70:3c:b4:7b:d7:b2:
42:87:33:ab:32:b6:d3:78:61:aa:7a:e5:9a:17:f0:
65:25:88:2a:9d:dd:98:87:b5:f8:0f:6b:51:4e:7f:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:2C:FE:D8:FA:44:BB:DA:C3:C1:E8:2A:42:92:A6:90:69:8F:8F
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:64:04:12:b5:9e:d6:79:74:bf:af:7e:f6:f8:0e:77:a8:96:
bf:d8:f7:51:59:3c:ad:1a:81:b2:3c:89:e7:09:ca:30:1f:1e:
8b:e9:c8:82:dd:95:e7:43:d6:63:db:76:bd:06:0b:cd:f0:f8:
fb:0c:2e:41:e6:1c:ec:90:0c:ad:f8:ad:a3:55:f1:c9:3d:15:
16:f4:bf:48:1c:ed:c9:d5:81:fa:93:fd:e7:6f:94:c0:a4:2a:
4f:df:c3:73:8f:3e:18:8c:50:7b:02:7f:65:97:9a:84:96:9d:
04:12:46:0e:3e:e5:ad:79:7e:40:be:9a:62:68:18:24:de:f1:
5e:da:b8:64:19:3e:f4:3a:69:3f:4f:4c:8b:4f:e0:1d:7a:ec:
5f:2b:bf:b3:4f:a5:33:3a:c8:db:e0:8d:66:4a:d7:e9:a5:ce:
8b:41:10:36:a4:fb:9c:fb:8c:e0:f3:79:f5:33:40:13:59:ee:
27:f8:1e:ed:95:99:9a:f2:e7:56:2c:4f:03:38:ea:c1:c7:52:
c6:9e:c6:d2:4b:0d:16:48:73:5f:70:6e:93:57:a4:5f:5d:64:
5a:17:51:18:0e:b6:56:da:e9:e7:77:7d:bd:19:fc:e4:75:a3:
15:05:8f:c4:3c:f2:16:f7:81:31:76:4d:bb:30:3b:97:cd:1d:
04:1b:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:50 2026 by rpki-client