Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: YrWwXRJiJkml1gALcTZiY1st7B29Ufuaytzen5qTiuU=
Subject key identifier: F6:3B:DC:46:AA:E0:46:A5:23:2D:94:52:17:84:DA:3B:C1:F4:17:F0
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 019D284DCF6E4CE1B67F710B6269D5C3DA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 0B3E
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: /CnwRea5xcR1eGC6iatk8atkxeZuNilfP9nalJOKnds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cf:6e:4c:e1:b6:7f:71:0b:62:69:d5:c3:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=f63bdc46aae046a5232d94521784da3bc1f417f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:8b:6a:32:6b:f8:57:db:cf:9e:c8:6a:69:
6c:af:42:4e:fb:d5:d1:6d:a6:dc:68:cf:5b:cc:5b:
89:01:c9:88:58:40:7e:8e:62:46:0d:f1:97:31:d7:
13:32:f8:58:c6:eb:3c:2e:4d:35:93:91:c4:1f:56:
de:f7:1e:1e:3f:28:fb:13:72:8b:c3:ba:de:02:da:
ae:31:fd:d2:d1:e6:2e:9a:32:f5:a2:13:1f:77:0d:
ca:da:3d:bf:1a:4f:bc:4f:ed:08:72:7a:22:34:8e:
3e:38:92:ce:b8:f7:7a:2d:1b:f3:9e:17:31:77:9d:
44:16:da:01:f3:b5:60:60:32:cf:0f:be:b1:4c:03:
86:01:b4:09:ab:58:72:71:95:7c:e0:18:a3:7c:22:
f7:0c:26:d4:69:70:87:72:d1:c2:21:2a:ce:99:04:
db:93:04:f9:ad:eb:0f:f2:16:2e:5e:7e:b3:b6:76:
46:29:4b:e8:f7:df:c6:be:9b:38:34:6f:fe:ca:2a:
ae:07:94:ac:ad:d8:26:ae:6d:f8:67:f0:c8:d1:df:
c5:17:93:32:d8:2a:2f:52:44:72:cd:fc:47:6e:95:
8d:80:de:80:a3:10:11:bf:a3:b5:e7:36:bf:f2:11:
b9:95:17:5e:28:e0:0e:a6:ce:40:40:96:a2:4e:0c:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:DC:46:AA:E0:46:A5:23:2D:94:52:17:84:DA:3B:C1:F4:17:F0
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:29:0d:0a:7a:9c:0f:0a:42:94:46:a2:3c:d0:90:d5:66:
f5:32:5b:fa:26:27:fc:da:8b:72:d4:14:d2:97:e4:08:97:33:
bd:39:87:b4:fc:69:2c:0b:58:52:6b:ce:e5:8c:23:5c:e9:50:
28:bd:9a:3d:bb:59:e7:b5:6e:16:20:8e:84:dd:6a:6b:78:4f:
4c:2f:67:5c:6c:5f:79:89:18:75:66:d4:bc:16:12:6e:6e:c2:
76:70:b5:62:ca:39:b3:40:fc:3b:88:d6:cc:af:f3:ec:ed:5b:
17:37:ba:48:d9:8d:0b:b5:15:82:34:87:3e:54:38:57:31:86:
13:91:5b:64:93:a0:bb:0f:28:0a:51:0f:17:9c:c0:7b:a7:a3:
51:a0:32:ca:9d:4d:33:c2:65:b8:0b:a6:72:54:b9:58:01:9f:
7a:37:f4:66:a4:44:c2:60:30:b3:aa:36:bd:b1:cb:34:f8:80:
59:ef:31:dc:05:92:bc:22:d3:37:44:3f:be:8c:20:01:be:a0:
78:da:d0:d0:9d:72:c0:12:c0:5e:e4:7e:56:8e:84:2b:8a:f4:
37:63:77:ac:81:e7:0c:4f:0b:f2:0d:42:68:f8:67:1d:0c:6a:
d7:fe:49:d4:5e:8f:d8:db:fa:a4:01:b1:26:a0:d5:ad:8c:15:
52:b3:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:49 2026 by rpki-client