Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: MvDX1v/dbMROTrJUclldgQNJ5L2iTEk+6rkNwu9cxJw=
Subject key identifier: 09:15:D9:52:5F:5E:C3:94:CD:98:F4:62:7A:D0:13:C4:FB:53:E6:07
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 01A0DB722F4B09BAE7EEC4A23A6C7BD78D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 1223
Signing time: Sat 26 Sep 2026 02:01:28 +0000
Manifest this update: Sat 26 Sep 2026 02:01:28 +0000
Manifest next update: Sun 27 Sep 2026 02:01:28 +0000
Files and hashes: 1: DVNQFoQorVY9yU9kbTj9LC9XoJw.roa (hash: 07ZRQCYv53Y3Q3qxf4P5rZ1SgsujlGLWZ0tRpP+wSS0=)
2: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: g9egt2yeA8l7JlfPYYrLsyjholMcT9425cBwSYx+Xis=)
3: YbX_Uq-fQ-5ekdVmZwT4UX9M_AE.roa (hash: 3ccMS28ZUPKFrYPJozhkPpBaeqel+ZZodIDTxyiq9A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:2f:4b:09:ba:e7:ee:c4:a2:3a:6c:7b:d7:8d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Sep 26 02:01:28 2026 GMT
Not After : Sep 27 02:01:28 2026 GMT
Subject: CN=0915d9525f5ec394cd98f4627ad013c4fb53e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:6f:14:32:e4:9b:b2:a6:4c:cc:71:ca:c2:
ba:de:45:fe:2a:b9:32:a4:ac:3a:73:4b:c8:0c:85:
cc:de:b1:ba:d9:bf:2e:ba:73:51:21:80:2c:47:52:
a1:df:88:48:12:67:46:51:05:bb:d7:be:a8:cb:69:
75:64:70:39:6c:a0:18:7d:62:cb:dc:b7:42:c1:c7:
39:8a:47:da:de:67:02:8e:df:b0:0a:91:f6:e9:9f:
3b:08:d6:7c:3b:83:9d:6d:66:10:ab:20:7b:f6:eb:
c6:b0:5f:0f:57:bc:3c:15:c5:1e:b5:1f:29:2d:13:
65:34:3a:02:d0:b9:9f:b2:29:66:15:ac:ca:1e:e3:
7c:2b:65:86:33:ba:47:0c:ca:5b:32:37:54:1e:d9:
d0:78:51:85:67:40:ff:c0:6d:74:2e:51:e9:87:71:
db:56:7a:7c:03:60:c0:e7:29:8d:7a:54:4e:cf:5d:
50:0e:ab:23:23:ac:58:d9:fe:00:5f:45:1e:c9:88:
1c:d2:c6:3a:c9:60:f7:8f:83:83:48:c6:1f:65:46:
f4:6c:cf:6c:cb:3b:c2:07:6a:19:e6:e0:7b:d5:da:
e8:ea:a0:56:ea:f6:3d:22:c7:8c:b3:59:0e:e3:3c:
7c:53:3f:55:fb:0f:9d:a5:a1:3c:99:44:54:04:d9:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:D9:52:5F:5E:C3:94:CD:98:F4:62:7A:D0:13:C4:FB:53:E6:07
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:59:ba:66:ea:f8:57:22:f6:33:cc:e1:84:43:96:ff:6d:d0:
37:43:78:60:34:69:2d:f0:2c:39:cd:14:ff:34:91:8c:9c:78:
1f:e6:4b:d9:c0:97:83:c0:94:d9:bd:b1:d2:d0:50:1a:fc:e3:
ca:eb:d7:c8:37:09:bf:12:4a:b8:9e:9e:67:a8:37:3d:4d:a4:
f9:5b:e8:47:6a:4e:92:d3:a4:b9:81:04:0b:4c:4a:37:48:dc:
11:66:55:e7:45:91:b3:68:0e:58:38:03:f1:81:aa:c4:ed:47:
1d:00:7d:b2:41:23:56:b2:3c:38:74:19:66:b9:4d:d9:d6:96:
65:8c:dc:de:51:3d:b3:76:f4:82:a1:6e:e7:41:d8:97:38:3d:
ce:1e:4c:41:c6:82:28:3c:2f:ac:c8:fb:c8:e4:bf:2e:28:eb:
93:06:6d:61:10:16:5c:72:6c:e0:e2:eb:1f:55:2c:8c:d8:f2:
54:2c:1b:05:a4:d2:f2:62:d9:a0:df:31:4d:28:a7:8b:9e:7c:
6a:6d:b2:0b:59:ce:0b:0b:a9:cc:1c:f4:7e:10:c8:a3:33:00:
83:3e:63:98:1f:24:36:1c:16:d5:d7:d6:91:da:bb:98:69:d7:
b8:6a:80:18:39:db:cf:5d:bf:b8:1f:1f:b1:b9:ad:13:a9:2d:
61:da:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:31 2026 by rpki-client