Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
File: nxw1DPVnNF5ddebFPgTfThJBwUA.mft (raw, json)
Hash identifier: H85yTpt7IRRKIBPznbGB5YHHfW2D2EdkI84eipG0Kgs=
Subject key identifier: 05:3A:08:E1:FE:7E:4B:41:DB:26:EB:02:D9:4B:FB:2E:FD:23:03:CD
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 01A0D5DE4B1DAAF0827809D88F12670F0713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:50 +0000
Manifest this update: Fri 25 Sep 2026 00:01:50 +0000
Manifest next update: Sat 26 Sep 2026 00:01:50 +0000
Files and hashes: 1: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (hash: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=)
2: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (hash: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=)
3: jDXTCYklB5PjjPIato0R36g-v0k.roa (hash: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=)
4: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (hash: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=)
5: nxw1DPVnNF5ddebFPgTfThJBwUA.crl (hash: GxNzbcUNcZCQkVzHhA9AO5OXIcaR66PiAwX598yIOBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:4b:1d:aa:f0:82:78:09:d8:8f:12:67:0f:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Sep 25 00:01:50 2026 GMT
Not After : Sep 26 00:01:50 2026 GMT
Subject: CN=053a08e1fe7e4b41db26eb02d94bfb2efd2303cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:09:db:c6:70:b7:bb:fb:87:36:74:16:36:
f4:87:b4:f0:29:c7:dd:75:c6:d7:76:7b:2c:de:3e:
c6:fb:e6:82:e2:72:ca:dd:82:c0:93:6f:04:b4:25:
44:fc:aa:13:7f:0c:bd:fd:c4:68:f7:70:e1:ca:8f:
db:b2:93:9f:06:6e:c7:71:bd:dd:b8:f2:b1:3e:d1:
e1:91:0e:66:82:98:93:c8:eb:8e:41:c2:75:7e:c1:
e8:c9:90:ec:04:5f:f9:72:01:13:35:d3:53:9d:83:
51:a1:17:0c:77:34:1b:31:f4:e3:51:76:af:f2:93:
79:dc:70:7e:79:66:3a:59:bc:59:c9:d1:32:83:96:
12:79:a8:45:5d:5e:48:dd:87:17:82:f4:66:9b:bb:
62:c6:bb:c6:90:20:d9:74:65:93:99:73:68:c0:2f:
c8:2e:7b:33:f9:7c:f1:20:2b:6b:ac:00:26:df:d1:
7f:6f:3a:3d:a1:b1:96:f2:f0:78:0a:bd:4b:57:c3:
fb:ba:9e:c4:48:d2:3b:42:4b:01:13:b7:a4:24:17:
6b:df:89:f6:3c:7c:15:19:4d:eb:8a:4d:5a:15:33:
6e:b6:36:36:5d:4d:f8:75:bd:12:9b:67:7a:7e:fc:
5b:5a:54:37:f7:80:d2:e0:0c:7b:87:99:01:34:f6:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:08:E1:FE:7E:4B:41:DB:26:EB:02:D9:4B:FB:2E:FD:23:03:CD
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d9:bd:a3:93:01:12:43:ed:91:7a:52:aa:c4:ec:f8:cc:ef:
66:73:1e:90:52:da:7c:f5:e0:27:45:e6:12:e1:77:51:b0:ec:
fb:ea:07:df:46:be:54:c0:6d:25:15:e2:8d:6f:c0:81:73:72:
43:c6:23:a2:1a:eb:7d:cc:3e:89:66:f1:a0:db:cf:bf:c4:68:
b1:1f:ce:55:73:0a:89:fc:45:89:70:f5:09:1e:e3:68:60:0e:
83:7b:57:a4:17:62:3c:6b:86:30:b7:61:d0:99:27:af:f3:e3:
ad:35:f4:e9:b7:59:d5:cd:e4:f1:8a:d9:36:87:e7:a9:db:92:
04:57:bc:d8:5a:7f:d5:15:fb:37:f3:ce:ea:40:30:aa:df:40:
31:44:5e:c7:d2:e5:a2:5f:54:18:c3:ef:dd:db:fb:36:ee:47:
53:04:24:e1:2e:b0:01:b8:1a:d4:50:f8:24:6e:27:2e:61:95:
b0:59:1b:58:26:de:15:ea:44:83:67:af:e9:68:ac:bd:2f:71:
23:65:1d:a8:65:27:60:a7:10:f3:4f:9e:84:78:0d:f6:97:3d:
61:ea:d4:94:df:db:cc:37:5b:6d:56:d3:6f:f8:f9:5b:4d:5b:
4a:1b:16:36:ee:1a:55:c8:18:13:ea:2c:2e:79:e4:5c:fd:9b:
36:a7:9f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3ksdqvCCeAnYjxJnDwcTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWMzNTBjZjU2NzM0NWU1ZDc1ZTZjNTNlMDRkZjRlMTI0
MWMxNDAwHhcNMjYwOTI1MDAwMTUwWhcNMjYwOTI2MDAwMTUwWjAzMTEwLwYDVQQD
EygwNTNhMDhlMWZlN2U0YjQxZGIyNmViMDJkOTRiZmIyZWZkMjMwM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbMJ28Zwt7v7hzZ0Fjb0h7TwKcfd
dcbXdnss3j7G++aC4nLK3YLAk28EtCVE/KoTfwy9/cRo93Dhyo/bspOfBm7Hcb3d
uPKxPtHhkQ5mgpiTyOuOQcJ1fsHoyZDsBF/5cgETNdNTnYNRoRcMdzQbMfTjUXav
8pN53HB+eWY6WbxZydEyg5YSeahFXV5I3YcXgvRmm7tixrvGkCDZdGWTmXNowC/I
Lnsz+XzxICtrrAAm39F/bzo9obGW8vB4Cr1LV8P7up7ESNI7QksBE7ekJBdr34n2
PHwVGU3rik1aFTNutjY2XU34db0Sm2d6fvxbWlQ394DS4Ax7h5kBNPYWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU6COH+fktB2ybrAtlL+y79IwPNMB8GA1UdIwQY
MBaAFJ8cNQz1ZzReXXXmxT4E304SQcFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNm9o5MB
EkPtkXpSqsTs+MzvZnMekFLafPXgJ0XmEuF3UbDs++oH30a+VMBtJRXijW/AgXNy
Q8Yjohrrfcw+iWbxoNvPv8RosR/OVXMKifxFiXD1CR7jaGAOg3tXpBdiPGuGMLdh
0Jknr/PjrTX06bdZ1c3k8YrZNofnqduSBFe82Fp/1RX7N/PO6kAwqt9AMURex9Ll
ol9UGMPv3dv7Nu5HUwQk4S6wAbga1FD4JG4nLmGVsFkbWCbeFepEg2ev6WisvS9x
I2UdqGUnYKcQ80+ehHgN9pc9YerUlN/bzDdbbVbTb/j5W01bShsWNu4aVcgYE+os
LnnkXP2bNqef3w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:12:06 2026 by rpki-client