Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: tZT4vUCWgXT5R3VZOJr19Utq00Aosaj5hUHvX4hIeDs=
Subject key identifier: BC:94:A0:13:59:CE:16:4D:AB:2E:AB:AA:A9:0E:B6:5D:A8:73:13:FE
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019E1DC715A511F40C9D3B28EA934033D099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 03F0
Signing time: Tue 12 May 2026 20:00:46 +0000
Manifest this update: Tue 12 May 2026 20:00:46 +0000
Manifest next update: Wed 13 May 2026 20:00:46 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: zFY6Ft6T1oQ6dYfys0wMufKL7ymwoaGk1KZB9qmMFEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:15:a5:11:f4:0c:9d:3b:28:ea:93:40:33:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: May 12 20:00:46 2026 GMT
Not After : May 13 20:00:46 2026 GMT
Subject: CN=bc94a01359ce164dab2eabaaa90eb65da87313fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:05:8a:4c:45:ef:37:4a:11:5f:cc:7a:85:
11:12:31:66:8a:2d:07:6a:67:48:bd:0b:55:78:a1:
fa:39:53:b5:8c:27:b7:d9:68:e4:d5:2e:ac:b4:6a:
f2:fb:5b:1d:27:96:26:27:38:62:09:c8:fd:81:5d:
04:89:a6:30:1d:2d:b4:7d:2e:15:b0:00:aa:cc:bd:
22:12:bf:88:d8:44:4b:86:b5:7d:49:60:be:ab:2f:
84:8e:f6:aa:d0:4f:fe:d6:d3:ba:1b:03:89:0a:8f:
60:86:9b:df:a6:00:3e:5b:a8:7c:fb:09:28:7a:60:
de:58:99:20:bb:93:7f:50:57:4b:26:d7:d0:fc:81:
b4:59:ed:63:03:a0:82:91:55:3c:de:6f:db:fa:6a:
c3:0d:cb:73:17:dc:9f:ee:05:35:22:77:8a:2f:8e:
40:01:91:7d:cc:1b:11:6a:9e:62:25:0a:61:28:e3:
6f:28:f4:2c:88:67:eb:fd:6a:a6:c8:7c:1c:71:65:
82:1e:31:49:ba:a5:89:88:6b:1c:b8:69:4f:39:99:
04:08:e7:2c:79:17:ec:c0:a6:96:84:69:02:79:49:
9d:c0:6d:a8:c7:53:3c:1e:83:4f:5d:2d:a2:f6:07:
43:6d:9f:32:ae:f6:15:f3:1d:1d:ca:a9:28:07:cd:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:A0:13:59:CE:16:4D:AB:2E:AB:AA:A9:0E:B6:5D:A8:73:13:FE
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:9e:dc:35:75:fa:96:93:4f:c7:a1:71:e8:23:d2:a7:b2:
b6:a7:4c:ab:c8:01:e4:35:00:57:15:22:f5:de:cc:d2:50:c1:
e0:06:6c:a9:72:cd:bf:ec:da:fc:f3:1d:14:69:2b:8a:5b:60:
e3:03:37:3b:b5:9a:04:ff:eb:19:e9:10:f4:8b:7b:88:a9:a4:
af:79:21:cf:fc:59:d0:70:f3:df:18:b1:53:69:2a:a8:9b:0a:
3c:c7:8b:8f:08:17:80:f2:76:35:29:aa:f6:aa:7b:97:72:46:
9c:31:81:b3:07:d4:df:8c:a4:61:cc:31:1e:36:a1:bc:51:0f:
f9:59:14:b2:2b:e0:83:d4:eb:63:a3:56:18:14:2f:ae:2d:92:
0d:8d:4e:39:a4:6e:e7:07:81:64:3e:43:48:fb:b2:82:f2:4d:
d9:08:76:32:12:29:63:c2:32:fe:8d:7a:9f:0c:14:3c:8b:bf:
48:81:d0:09:eb:3f:db:e0:61:c4:5d:99:e4:50:17:ea:0d:2e:
6d:99:23:55:1a:75:93:5b:7f:18:5e:d1:bf:b0:6b:0a:eb:ea:
07:a1:48:ba:ae:61:2f:8a:4d:12:6f:7b:9b:f5:12:f5:97:d5:
c7:f2:fc:d6:11:dc:76:72:7e:b4:93:68:6f:3e:bf:c6:29:7b:
24:c9:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:07 2026 by rpki-client