Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
File: nwAKfifXFIcphPrjeIda9lvkBWw.mft (raw, json)
Hash identifier: E+Hwq6B1Tho5ZvHSpjh6Ubvj9Vbs2y6I1VL3LwDD9d0=
Subject key identifier: 71:BE:46:34:6B:C0:7D:7B:59:79:0C:C8:F3:E4:40:57:A8:4E:63:9B
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Certificate issuer: /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial: 01A0D538C83EF0548DBEDCD24556AD0AC983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
Manifest number: 04C4
Signing time: Thu 24 Sep 2026 21:01:03 +0000
Manifest this update: Thu 24 Sep 2026 21:01:03 +0000
Manifest next update: Fri 25 Sep 2026 21:01:03 +0000
Files and hashes: 1: MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa (hash: wfWinCwDhzmsC0zOg51AT7GSB/rtsiDVC/qy5SZCJIw=)
2: nwAKfifXFIcphPrjeIda9lvkBWw.crl (hash: 6u6MOd/J8iXKIpCX0k5yZpEQxCQD0Mtw8vDwNvNzB0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:c8:3e:f0:54:8d:be:dc:d2:45:56:ad:0a:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
Validity
Not Before: Sep 24 21:01:03 2026 GMT
Not After : Sep 25 21:01:03 2026 GMT
Subject: CN=71be46346bc07d7b59790cc8f3e44057a84e639b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:85:be:71:cb:50:49:69:26:9c:b6:9e:5b:
bc:cd:a2:c1:6a:c9:f6:5e:fe:5b:e2:c4:c6:1c:b2:
e1:0b:d8:fc:ab:04:06:ef:bb:02:0c:fb:c3:fe:ef:
b2:cc:9e:72:ce:7f:66:24:72:c8:8e:39:f8:15:ed:
44:2c:e4:db:9b:19:c7:ce:1d:49:29:64:b9:63:d1:
e6:b8:d6:22:96:73:0f:90:20:26:ae:47:b6:f3:31:
27:9a:9c:1a:ba:f6:67:14:f7:82:69:24:23:1a:18:
d0:a8:c4:f7:bf:de:d7:44:50:fe:bd:71:6b:da:4b:
02:a9:3c:79:58:ff:c9:19:67:50:76:bc:6f:cb:fa:
41:f0:bd:57:3e:d2:d0:9c:9a:b9:61:1c:29:3b:d4:
58:45:11:6f:4c:88:ae:3b:bc:32:37:94:0a:65:24:
1b:18:f2:86:6c:58:d7:83:47:ae:47:8a:62:25:62:
de:35:62:e7:ed:0a:08:43:59:4c:f4:94:d4:93:c2:
26:a7:82:26:e0:94:42:8a:ab:83:31:8d:d4:5c:cc:
96:1a:99:8b:50:52:cf:05:ad:ee:24:79:14:ed:37:
27:50:cb:23:a7:dc:5c:45:1c:dc:96:f2:a6:c4:45:
96:89:cf:b2:e1:5f:8c:c1:11:e6:5b:c6:ad:96:38:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:46:34:6B:C0:7D:7B:59:79:0C:C8:F3:E4:40:57:A8:4E:63:9B
X509v3 Authority Key Identifier:
keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:e3:eb:94:d0:3e:4f:29:df:16:73:6b:19:bb:c1:bc:15:
5d:04:66:53:c7:25:46:1c:fb:29:52:bd:0a:47:cf:f8:49:23:
22:dc:fb:96:4b:8f:11:75:83:24:ab:b5:e1:30:66:61:45:1b:
12:bf:00:f1:f0:02:45:b1:52:9f:dd:d8:75:f1:f0:4c:6e:45:
4a:4e:88:f0:5b:1b:56:04:1d:ca:1d:82:1f:f3:33:23:22:03:
6b:2e:93:e4:5f:26:0b:43:f6:b9:f1:52:88:55:2e:fd:40:17:
04:c2:21:f0:8d:43:ab:30:87:2f:89:88:73:9a:26:a5:66:e0:
99:d9:5c:02:ed:ec:4d:e2:c4:d2:e1:7b:b5:8b:1d:68:db:c5:
e5:54:7f:9b:52:f0:3a:63:0b:fb:10:74:36:62:c8:59:67:35:
c5:b1:c6:80:fc:82:ba:6e:2b:93:f0:d9:8a:fb:9a:01:1b:a6:
53:f7:ba:63:b1:6a:02:69:2e:1f:2c:e5:49:92:f4:89:7b:1f:
d9:1c:76:2f:0a:af:f5:6c:f4:3c:e9:65:5d:f3:29:f5:0d:79:
5a:ab:11:32:cc:de:f2:35:58:29:41:61:c5:9d:74:9f:64:58:
a3:b0:82:f4:1d:94:6a:28:7c:1b:85:58:16:07:86:0e:8f:ae:
65:ed:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:49:35 2026 by rpki-client