Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: 8zXLvcb2cFUUa52ZeCqHG7IK8MCI7384BSt0a6QhPqg=
Subject key identifier: 92:E2:2B:FC:AD:30:F2:6F:4B:17:D1:11:AD:94:56:E5:EC:93:E5:D8
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019D24A76214206F45189A81E38666EBF9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 036F
Signing time: Wed 25 Mar 2026 11:00:42 +0000
Manifest this update: Wed 25 Mar 2026 11:00:42 +0000
Manifest next update: Thu 26 Mar 2026 11:00:42 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: bH2SkDlUAxJLYBXSJOC5k9dt5frBWveuSXI2hBnBuqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:62:14:20:6f:45:18:9a:81:e3:86:66:eb:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Mar 25 11:00:42 2026 GMT
Not After : Mar 26 11:00:42 2026 GMT
Subject: CN=92e22bfcad30f26f4b17d111ad9456e5ec93e5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:b6:a5:f6:b6:db:1c:9c:f6:48:aa:82:92:
b8:eb:fd:25:1c:90:36:50:2f:1e:74:24:68:3c:39:
10:91:a3:a3:74:6c:fa:57:e5:b0:c0:36:7f:0e:d7:
75:2d:15:a9:6e:ec:ff:c1:67:43:d9:cb:87:4f:70:
3c:83:36:9a:a3:b5:93:00:e7:bc:65:62:b8:93:6e:
56:79:9c:81:c8:b7:76:6f:4f:dc:ed:4b:3a:f4:8b:
d5:4a:9a:dc:ba:12:1a:2e:e1:47:0a:4a:35:44:cb:
e2:0a:a8:c0:6f:ba:bf:5a:13:05:ae:cc:8f:df:96:
7c:b2:ef:82:64:74:2a:28:9b:2b:67:e1:c2:05:a6:
9c:0c:40:bf:6f:29:eb:36:20:a0:8b:78:ae:2b:f4:
1c:b2:0d:3a:2d:3b:0f:d5:68:86:22:61:24:d0:0f:
cc:ff:fd:e6:90:68:46:d8:97:98:7d:2f:73:a8:5f:
96:a9:44:fe:26:97:dc:ff:41:81:64:0f:c0:0e:a8:
a6:ad:a4:93:69:54:32:f7:a4:0d:eb:15:93:29:da:
1a:f5:89:6e:c5:4f:72:3b:19:fa:c3:5e:cc:67:c4:
97:c1:08:e2:6e:b4:33:3a:7d:62:be:ea:56:6f:7f:
6c:26:36:9c:1b:94:c8:f6:cf:71:bf:c4:62:da:1e:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:2B:FC:AD:30:F2:6F:4B:17:D1:11:AD:94:56:E5:EC:93:E5:D8
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:75:ca:ad:af:c9:27:d9:09:b7:f8:a5:09:61:04:ee:2f:21:
68:6d:16:7d:70:7d:d7:ad:95:0d:27:3d:21:95:8c:a1:30:2a:
b2:8b:d6:88:7c:c9:72:cc:a8:5a:86:7e:d3:93:78:4d:7a:39:
20:a3:c8:b0:0e:65:ab:64:d0:72:56:08:3f:6e:2f:d4:df:97:
14:a9:f7:fb:4b:42:09:81:75:91:a4:26:8e:ae:5b:a2:d7:b0:
f4:a9:d2:13:b9:fc:6a:5d:33:b5:4f:29:e5:61:da:cd:24:2e:
ae:4b:71:2d:8c:42:0b:02:4d:b3:dd:20:4f:6a:bd:b5:b1:87:
43:97:23:58:ed:03:3d:bc:c5:d3:16:1f:aa:7f:51:de:ba:97:
b5:25:c2:26:d5:36:4c:ab:e0:a7:b2:14:e7:02:ae:76:14:6a:
97:d0:7c:94:5c:ab:76:47:82:9c:63:00:64:dd:66:47:96:b0:
cb:fb:cf:29:de:30:85:f0:9a:ea:30:68:1c:21:0c:29:75:24:
21:45:3e:06:01:cb:07:42:90:ba:53:35:2f:5b:ec:03:af:8e:
cc:37:12:05:21:88:de:1e:4d:d2:c9:a2:b6:d7:15:2a:e9:28:
54:1f:9f:83:6a:a0:32:9e:55:f9:92:be:97:94:d6:85:95:d0:
27:78:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:00 2026 by rpki-client