Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: AR2YZLaRKT5zJMMzJHel6weCbeHXtj6X+nHLF6Tor78=
Subject key identifier: 5C:E1:96:F8:46:67:31:1D:6B:65:B3:62:50:EF:D9:F9:55:50:CB:FC
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019D25BA9BB0651481168681775E19CBD224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: P6MvyijEdfDH8PowPKZBFJvbCwc.roa (hash: QIBBo/B7mvu6Y0jpzZUhzPlgiko0hJqHLmPYVtkObOo=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: s/jUia0hGVtP7MB1Nik4Vz7TTwNH8RaojL/qfx7t6ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9b:b0:65:14:81:16:86:81:77:5e:19:cb:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=5ce196f84667311d6b65b36250efd9f95550cbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:d0:d4:21:60:bb:24:76:9c:73:60:ec:0b:
8b:17:54:a0:12:90:04:98:29:e9:59:e9:d0:c1:fb:
41:3b:0f:97:c0:ba:28:5f:e1:f9:7f:cd:71:11:f7:
b4:82:b1:3c:51:5a:6a:09:4e:1b:ed:db:b4:3e:47:
d1:2e:f1:0c:01:7d:28:91:17:f4:a3:ab:00:d3:74:
a9:3c:9d:90:f3:81:cc:4d:ec:92:a8:7f:9d:ff:4b:
e1:e2:3c:1c:23:44:3c:96:21:9e:42:82:43:60:de:
1e:fc:e6:ec:b5:5b:32:ad:22:61:2e:70:5a:ef:6c:
a7:6f:49:53:bc:5a:6f:01:78:71:14:ac:f3:46:c5:
7d:23:2d:d6:58:a2:b4:e2:1e:34:24:b4:4c:b0:17:
1a:fb:3a:06:c1:be:8b:d5:73:ee:3b:c9:7d:8a:8e:
35:dc:d5:6b:41:8e:db:94:f4:ed:b9:15:d4:21:f9:
d3:64:34:04:98:cf:69:da:8a:4b:38:22:2c:4f:16:
16:53:85:a8:20:bb:22:e5:a9:74:5f:45:48:ea:45:
e0:2e:64:31:9b:70:8c:a1:d6:fd:ed:0d:15:b5:47:
f7:48:6c:bc:cf:e4:02:98:f2:f1:84:65:ce:ca:6e:
7a:fb:5f:b8:68:2a:e6:a1:ab:09:9f:11:8f:04:1b:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:96:F8:46:67:31:1D:6B:65:B3:62:50:EF:D9:F9:55:50:CB:FC
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:35:b4:98:aa:5b:15:98:2f:60:0b:56:3e:50:8c:ea:76:e1:
b3:9f:75:2c:f3:67:f0:8c:31:55:1c:ab:b0:66:ae:d7:60:20:
5e:b6:f9:d0:ed:09:bf:9c:6b:d2:26:df:5a:42:4e:63:21:21:
02:21:49:b4:0b:d2:05:39:cc:b9:d3:0c:64:49:f9:10:8a:a3:
8a:b1:0f:ac:07:0a:53:fb:3d:9c:41:cc:df:42:e5:eb:b7:7a:
8c:bc:d1:fd:e0:cc:9e:2b:81:9e:9c:e9:97:7e:d0:d8:33:ae:
63:75:9d:52:ff:e4:08:65:59:de:d3:ee:dd:70:e6:a0:22:f6:
96:3d:4b:67:ba:c0:d2:e8:16:1c:94:d1:98:9c:7b:b0:0b:bc:
89:14:41:c0:dc:11:20:e9:9f:bd:07:91:19:5a:55:5a:ed:37:
cc:c3:a1:2e:79:76:62:05:17:7e:43:84:c6:42:61:a6:89:b5:
8b:93:bd:5c:15:3a:43:6d:7c:65:47:43:f0:b0:95:f2:26:21:
4d:ca:e7:db:a8:a8:25:e2:a7:44:82:6f:82:05:3f:99:23:6a:
58:26:28:e6:57:18:b2:49:3c:6d:b6:17:ca:65:11:96:0f:a7:
89:fd:65:01:b7:2d:02:68:a6:04:21:fe:54:51:48:21:35:dd:
14:ab:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:40 2026 by rpki-client