Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: vcMLz+7gzS2jvih7mrHNwahO2COf2OzU/Al0bECsmBE=
Subject key identifier: 39:C7:0E:4C:81:C9:69:B0:84:5D:48:5C:28:37:12:3D:5E:AD:96:A9
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019D27DF9654115836EA47E8AF49506572D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: G_PF0dcvSh0twz3bDtykxA8n4vU.roa (hash: BuA1eaUoYFwCSmkQRdg21HY9Ijqx+wmJ9LSjgaoMGKo=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: 332MX6MX+/yxERm2rbzyOgK8lf7wVKZdnLQmZdRRUa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:54:11:58:36:ea:47:e8:af:49:50:65:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=39c70e4c81c969b0845d485c2837123d5ead96a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:85:42:da:76:5a:e2:61:a0:e9:7b:80:6b:
a1:5c:0e:66:d1:40:c5:52:a2:7e:ed:b7:9b:62:2a:
80:ac:88:a3:57:90:f9:58:1e:b9:4c:db:37:04:4c:
ce:b8:e8:a6:44:b5:c9:a9:a8:0c:66:7e:26:eb:88:
d1:1d:c8:89:00:4f:7e:fc:99:1f:9d:bd:dd:63:50:
83:83:36:8d:13:7b:7d:6d:e8:bf:86:30:c6:e4:62:
35:25:eb:2c:9c:7e:73:cf:89:80:47:76:dd:d2:51:
85:9e:ae:8d:f2:80:ca:75:bf:51:dc:2e:c5:93:c8:
c7:dc:cb:47:01:88:41:2d:a6:63:3d:4a:7f:7b:bc:
05:1b:5f:9d:13:ff:3b:38:21:76:33:33:12:31:3a:
be:4a:77:af:79:c3:5a:7f:40:c7:04:95:01:dc:91:
95:a3:ae:80:bd:f8:c2:84:e3:04:04:8b:15:a9:a2:
c1:81:72:4c:60:3a:41:4e:50:66:fa:df:93:8d:55:
f2:69:51:3f:58:8b:7f:ec:a0:8d:ce:41:bd:5a:09:
8d:f4:de:60:40:3e:9e:4b:72:27:c5:5d:6e:fd:c0:
06:9c:2a:84:cf:79:cc:ad:f6:00:c6:0e:6b:4d:94:
c0:4d:3d:6f:75:bc:6e:9d:0b:16:17:1c:e5:f7:74:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:0E:4C:81:C9:69:B0:84:5D:48:5C:28:37:12:3D:5E:AD:96:A9
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:94:f4:eb:b0:58:fd:95:35:01:b1:4b:1d:8e:0f:4f:0b:
be:4c:2a:9c:e6:00:b1:dd:5e:d5:ab:34:f7:50:e8:78:1c:57:
70:f9:07:46:8e:69:5b:cb:bd:c0:c0:21:d5:e3:c7:af:64:3a:
84:3c:13:04:68:0a:e1:bf:1a:6f:3a:9f:94:1b:a2:27:e1:a5:
37:97:0c:48:ae:bd:c8:84:b6:2f:94:b9:de:b5:cb:e4:c7:06:
b3:53:81:e9:53:4b:ef:7e:e8:e9:97:74:32:0f:69:01:46:69:
5a:23:8a:b7:c9:8e:47:3c:a1:2d:29:5f:15:dc:83:19:92:fc:
42:01:23:b8:93:53:79:b9:dc:38:31:83:09:71:f5:36:5e:3a:
48:65:c3:81:b1:7d:77:e8:8e:da:05:bb:a9:ef:c9:05:25:ee:
49:40:c6:af:1b:aa:b2:b8:b5:0d:0f:cf:14:56:0a:07:ab:a7:
af:e6:bf:c8:d2:02:82:a6:67:e4:ab:df:c4:2f:6a:61:0b:0d:
5f:35:2d:f0:cd:69:c3:41:c5:10:41:b0:1d:25:a6:fd:35:dc:
01:25:e6:3a:1a:e3:65:ce:78:40:c7:43:20:e0:0f:f8:77:dc:
06:9d:65:cc:70:01:d6:f7:9f:85:63:07:da:5e:99:f4:42:e6:
e5:c5:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:56 2026 by rpki-client