Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
File: nxw1DPVnNF5ddebFPgTfThJBwUA.mft (raw, json)
Hash identifier: a9bhyYx6IZKsKQqQFJ2RiwOnut+O8bgJWAkecS/sIXI=
Subject key identifier: CA:0A:42:BA:93:21:12:16:DC:48:11:8D:99:31:34:D4:10:BD:51:7B
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019F916C70EA818CE04419CBE58840D92F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:30 +0000
Manifest this update: Fri 24 Jul 2026 00:00:30 +0000
Manifest next update: Sat 25 Jul 2026 00:00:30 +0000
Files and hashes: 1: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (hash: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=)
2: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (hash: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=)
3: jDXTCYklB5PjjPIato0R36g-v0k.roa (hash: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=)
4: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (hash: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=)
5: nxw1DPVnNF5ddebFPgTfThJBwUA.crl (hash: frw/dzkHKcbAAiJeuVdzIqsifGfInx13/b+BBtHWUWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:70:ea:81:8c:e0:44:19:cb:e5:88:40:d9:2f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 24 00:00:30 2026 GMT
Not After : Jul 25 00:00:30 2026 GMT
Subject: CN=ca0a42ba93211216dc48118d993134d410bd517b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:9c:67:fc:60:3d:bf:12:5a:c1:77:7c:b3:
dd:6f:29:c7:88:df:77:45:95:a8:fb:0e:75:5d:04:
f6:8f:f0:fc:2c:6d:13:77:8b:f4:2d:af:0c:ed:5c:
32:17:07:c2:3d:67:4b:f5:e8:bc:7e:16:59:5f:10:
ae:88:ca:69:5a:73:04:2c:ad:5c:ec:c5:97:e1:54:
69:af:08:72:3d:f5:ad:8d:1e:9c:8b:d1:44:ea:f1:
3a:3c:f8:c8:2d:51:1b:12:15:54:8c:00:4b:0a:32:
81:b3:d2:cc:13:8b:86:07:6b:00:f1:15:f4:c4:f7:
64:51:80:6e:80:57:ba:be:d6:6b:c0:d0:85:6b:45:
19:c1:41:18:01:37:7b:ec:1e:8c:29:90:5f:91:ca:
90:b5:1a:3a:68:cd:1f:8e:a2:73:6b:cf:75:0a:49:
bb:57:1a:a7:5d:21:8f:d3:46:cc:e8:bf:76:d2:3a:
08:68:ef:3a:dd:2f:af:44:cf:88:e8:12:af:77:5f:
20:df:13:b9:f2:cb:1c:38:37:41:45:04:1d:d8:9f:
48:20:4b:a6:db:57:a4:cd:c8:83:cd:bc:f9:e8:e9:
7e:4a:65:a0:c1:c6:86:e7:2b:f8:61:e8:54:a3:48:
1d:12:ea:72:68:f2:8d:28:66:4f:86:d8:84:d7:4c:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:42:BA:93:21:12:16:DC:48:11:8D:99:31:34:D4:10:BD:51:7B
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:10:94:9f:2f:08:71:12:97:03:bd:e0:67:b0:c8:db:b5:35:
33:54:d4:1a:f0:d4:f8:71:b1:d7:b2:87:4e:5b:dc:80:6e:23:
9d:5c:80:c8:39:f4:b4:e8:af:02:31:f4:34:10:6b:1a:c7:e6:
13:c2:eb:46:70:95:35:83:c9:b8:0a:21:50:5c:a0:84:6e:8c:
b7:fd:76:a1:81:70:e1:92:0c:bd:f3:4d:ef:2b:b2:93:aa:65:
e2:f3:58:46:49:fe:91:fb:5f:f6:7f:c5:38:32:69:e5:ef:b0:
ad:53:45:9e:44:b2:c1:85:f6:e5:26:e6:3a:5b:e8:1b:47:23:
f2:26:9d:be:2a:90:35:37:82:70:b4:17:a8:ff:b7:d7:d4:7c:
29:aa:26:80:bf:f9:fb:f0:91:d8:d6:04:02:25:66:86:1e:4e:
be:f3:fb:42:59:0f:a1:5e:a6:6b:2e:42:56:69:c1:6a:98:9f:
98:54:fc:78:13:18:0f:3a:5a:85:72:84:d1:89:e6:07:fd:f8:
27:56:d9:45:19:65:3f:ca:4a:8c:1f:72:c1:a2:23:22:85:63:
e1:f0:9d:03:dc:33:41:b4:7e:19:62:70:f0:8f:e0:93:81:41:
4d:17:6b:59:b4:bb:cc:1b:63:01:91:ea:9f:8c:a4:f1:32:72:
57:c8:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:05 2026 by rpki-client