Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
File: nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft (raw, json)
Hash identifier: ez6W+MUtziGryXDDK8141QyyKmfAYBXxM1Y2QZS8cvU=
Subject key identifier: 42:76:9F:A4:84:A4:75:33:91:06:B1:77:B9:EB:D8:07:C0:52:28:10
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 01A0E098B3F5541F1FA80B6670A0D4BBEC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
Manifest number: 0DA0
Signing time: Sun 27 Sep 2026 02:01:38 +0000
Manifest this update: Sun 27 Sep 2026 02:01:38 +0000
Manifest next update: Mon 28 Sep 2026 02:01:38 +0000
Files and hashes: 1: 6G_a6nuyA2Xe_LNbhIk9vv4baYE.roa (hash: ly928oHajgAnNqxQKxaO4QyGgYIvl65qLblu5J549HI=)
2: nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl (hash: VOONf/0pWlGHLvz4z0fyHQ+UuTRHa+5VAG60Z47CXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:b3:f5:54:1f:1f:a8:0b:66:70:a0:d4:bb:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Sep 27 02:01:38 2026 GMT
Not After : Sep 28 02:01:38 2026 GMT
Subject: CN=42769fa484a475339106b177b9ebd807c0522810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:86:76:36:4e:01:c0:76:a7:17:b5:af:57:
a7:2b:1f:d5:60:e8:68:7e:2a:4e:01:67:57:d3:70:
27:ef:e8:69:50:3e:32:da:7c:31:72:2c:a2:b1:11:
10:47:92:af:70:00:98:0c:ef:38:d5:7c:3c:f2:79:
aa:83:4d:5f:ec:ed:4a:30:b1:9e:d7:83:a5:24:5f:
91:1c:11:ef:48:08:44:0c:b9:c1:7c:3f:9d:ee:d3:
41:4e:4a:b1:f9:d4:4a:d9:56:ea:79:b1:bf:67:a5:
4b:45:41:dd:ef:85:5b:9b:f6:70:6b:5e:3e:58:a9:
91:68:be:6c:f1:5c:39:d5:d1:35:3f:7c:e7:4d:99:
70:76:a3:2d:f1:ee:fd:16:2a:85:a9:7d:00:59:6d:
c8:a1:37:8f:29:a5:2d:3f:30:34:fb:db:6b:36:e5:
95:20:ea:e5:e6:8e:f5:69:91:e8:24:57:2c:05:27:
0f:7f:e4:13:bd:39:31:29:b6:d6:82:e7:61:bf:74:
0b:fd:b5:4f:f3:d9:d0:95:70:93:67:b1:0d:36:11:
53:9f:cd:98:8c:ce:3a:65:86:21:fc:b1:0d:11:72:
fa:b1:b5:65:88:a2:64:21:17:40:ae:98:b3:1e:d9:
e9:e6:66:eb:e5:d2:ad:ab:d7:19:6d:9f:77:f0:72:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:76:9F:A4:84:A4:75:33:91:06:B1:77:B9:EB:D8:07:C0:52:28:10
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:29:1c:da:52:30:f9:93:55:6f:b6:6c:c5:7a:10:a4:f2:
f1:8b:c9:ed:bd:08:65:17:75:73:3a:c7:1d:4e:39:f6:db:de:
47:8d:d4:b4:76:07:e8:4c:89:e1:e8:40:26:de:34:e2:3c:a6:
58:9b:8b:86:a8:d1:ca:53:ec:5b:29:0c:4d:d1:f7:88:a2:7e:
64:bb:f4:84:5b:90:f3:b0:25:09:3d:89:c6:62:93:d4:81:8a:
fb:5c:7b:11:2d:3c:a1:7f:c3:6f:49:4e:5e:4d:31:86:d2:3c:
5b:b3:5a:fa:98:5e:69:de:05:bf:46:31:02:40:e7:4c:0f:52:
42:e9:93:82:34:53:01:2a:e9:b7:a5:34:49:3b:f9:fd:8f:d4:
e5:79:6b:a9:fb:f9:89:71:18:69:c6:96:bd:94:c2:dd:f3:48:
12:ce:1d:64:9a:18:06:c5:e7:e4:a4:8c:03:8d:17:10:f3:c2:
ff:65:3a:a7:cf:8b:22:d3:01:57:47:db:80:22:21:b8:4e:19:
f8:b9:d2:f2:26:7b:df:57:f5:3a:41:0e:83:21:08:c2:2c:09:
81:83:34:2e:56:f6:22:11:ce:3d:f8:90:23:8c:27:79:92:66:
47:73:9a:2d:e6:f3:e4:de:ff:78:52:b6:86:b9:a0:c6:82:52:
4e:44:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:16:49 2026 by rpki-client