Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: tRpqUZG98/+9XMBN3YV6KqU+NftR68pOtVFnOZBGKd4=
Subject key identifier: B7:56:D6:3D:BD:90:A5:C1:82:7D:E5:2B:1D:5C:77:A0:42:5F:AC:17
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019F8E34D19456552E9CDFCF744FC0AD1CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 04AF
Signing time: Thu 23 Jul 2026 09:00:53 +0000
Manifest this update: Thu 23 Jul 2026 09:00:53 +0000
Manifest next update: Fri 24 Jul 2026 09:00:53 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: VozU/nFL1zS2csz658JDWMRaibKEshQRF1psmrMaA4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:d1:94:56:55:2e:9c:df:cf:74:4f:c0:ad:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jul 23 09:00:53 2026 GMT
Not After : Jul 24 09:00:53 2026 GMT
Subject: CN=b756d63dbd90a5c1827de52b1d5c77a0425fac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:f9:ec:73:b7:d9:d6:a5:09:44:4a:17:09:
42:6c:51:2a:c1:81:59:d7:20:20:28:46:81:a6:55:
0d:fb:e5:20:66:d2:6c:e6:ab:65:60:fa:b1:cd:ef:
db:10:a4:a2:49:a2:c6:7c:0f:88:ed:f6:d7:d9:5f:
1d:bb:04:bd:2a:68:ef:61:58:73:b2:f9:12:84:4d:
5c:a4:be:cb:97:42:65:8c:ad:bc:b2:c8:ef:b5:db:
f2:85:e1:1d:7b:e5:b4:68:8f:19:72:1e:4c:20:94:
75:03:9b:4e:86:b7:e6:81:2e:a2:56:40:6e:33:65:
f4:39:6a:83:25:fc:49:54:5d:f7:7a:0c:73:d0:0b:
a6:58:d1:16:89:ae:ac:46:27:71:e3:d1:d1:e8:50:
5e:75:d8:23:b3:60:3b:65:2b:35:1d:21:51:17:cb:
c3:d3:e7:75:91:e0:33:50:a6:ca:a0:03:68:b0:05:
86:da:f6:d6:c4:21:b7:1c:22:06:be:95:f4:2e:0d:
7f:69:f2:6b:28:10:8c:36:34:4c:a5:dd:06:59:01:
0a:50:c5:03:46:39:64:d8:b3:19:c8:ff:8f:b5:c1:
64:ad:9c:36:8d:b8:db:38:45:68:2e:64:42:af:d7:
d3:96:4d:d8:65:f1:43:21:93:be:03:09:f3:14:35:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:56:D6:3D:BD:90:A5:C1:82:7D:E5:2B:1D:5C:77:A0:42:5F:AC:17
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:14:32:b7:12:6c:81:f8:7b:44:32:c1:a0:c5:63:a9:7e:5f:
9c:76:dc:f5:0a:af:de:1a:a6:86:e1:57:8c:83:9d:1f:53:9f:
62:58:ea:22:a6:64:47:f4:77:f7:67:17:b4:39:0d:0d:ec:e2:
b1:83:a7:03:5c:09:8c:0e:69:c1:aa:27:0c:99:23:8c:70:b8:
18:38:58:f7:62:8d:92:28:a9:4c:88:03:e5:5c:f8:58:a4:f3:
4e:5b:71:af:d8:0e:8c:0c:f9:ee:7f:85:f5:be:e1:de:2f:db:
5c:e2:0f:8f:8d:61:5a:53:9d:cc:d1:31:ae:c7:78:24:a7:db:
66:2d:a3:da:9d:a3:a5:b8:4a:37:7b:8d:14:c4:f7:3f:2f:fe:
d4:ad:f4:d6:bd:92:82:c7:26:e6:86:4d:23:a5:6a:2d:b7:3f:
6a:c4:59:6e:64:d4:d5:2d:cd:77:f5:39:a8:e2:5a:ca:bf:5e:
04:92:f5:17:85:66:7f:e9:52:b9:4f:54:c2:b0:65:2f:75:e7:
25:84:5f:d4:da:ea:49:2a:a9:13:df:f7:a6:42:b8:a7:74:a1:
d1:32:db:5a:14:b3:71:f2:37:cb:26:be:83:96:1c:62:c2:52:
ce:60:86:0c:25:1b:82:d6:f8:c9:39:b2:6a:47:cb:d5:a8:79:
b6:fe:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:00 2026 by rpki-client