Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: SfKz8XgNVrcFWZEZwxugl7yy9/wPsT4Qc43Y9cMtg4Y=
Subject key identifier: 33:6A:DA:3A:1C:C0:D9:B0:DB:F9:2D:2F:BC:96:EE:82:CD:88:3B:43
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01A0D2A5EC2629D00C942279FDBACAEE189F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 0557
Signing time: Thu 24 Sep 2026 09:01:24 +0000
Manifest this update: Thu 24 Sep 2026 09:01:24 +0000
Manifest next update: Fri 25 Sep 2026 09:01:24 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: MoGYquilk3g5QwcaoAOC8V2IUotWskUPAeoyXP4wXHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:ec:26:29:d0:0c:94:22:79:fd:ba:ca:ee:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Sep 24 09:01:24 2026 GMT
Not After : Sep 25 09:01:24 2026 GMT
Subject: CN=336ada3a1cc0d9b0dbf92d2fbc96ee82cd883b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:2c:74:af:19:6d:b0:b8:13:b4:9b:af:97:
ae:d0:a1:67:dd:cd:25:cb:f4:98:0c:c0:a6:d7:ba:
da:29:3b:0f:2c:9f:e2:22:c2:d0:6f:bd:d2:bc:57:
5e:49:02:54:e4:34:34:e2:c1:44:52:1c:93:5a:5e:
e3:a8:7a:ff:ef:4f:c1:92:6e:d2:a5:d6:f0:c3:50:
e8:19:68:c0:fe:90:ca:af:bc:81:7e:7d:9b:ca:65:
26:69:f1:4e:06:67:26:37:0b:57:aa:2f:7a:80:bd:
14:db:07:dc:23:b1:a9:03:23:32:24:a5:7e:f2:86:
83:ce:66:f0:d4:15:b4:ea:23:5d:34:8f:43:fd:61:
7b:2e:90:6d:b1:a7:5c:42:ea:62:49:18:26:74:11:
e5:73:d1:0d:40:37:1b:63:be:db:22:01:b0:ce:d3:
8d:98:2e:b0:99:31:e2:a1:23:f0:70:41:da:85:c2:
3f:c2:2b:f1:c0:13:9d:c8:76:21:35:6f:cb:dd:f2:
bf:d6:39:f1:9e:54:2a:d1:c6:ed:9e:44:f0:d9:05:
73:85:93:7e:60:f2:5c:38:03:b4:08:2d:e2:94:79:
23:da:01:be:0e:6a:cd:22:89:7e:6a:54:ad:4e:89:
36:ed:7f:94:bf:66:a2:3d:3a:01:a3:8d:35:ba:7c:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:DA:3A:1C:C0:D9:B0:DB:F9:2D:2F:BC:96:EE:82:CD:88:3B:43
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:82:0f:5a:f9:03:4f:90:47:c6:80:4f:f3:e0:cd:91:dd:
20:fd:1d:28:31:33:5b:6f:2f:b1:b0:c1:cf:07:a7:28:46:8a:
dc:14:98:58:00:a3:37:67:f9:a8:ad:4e:c3:99:09:2a:92:a8:
54:6e:65:6e:d5:7d:41:a7:1f:b9:cf:5b:95:bd:93:aa:ee:75:
40:81:38:ac:8f:9d:4e:d3:8e:48:5d:12:52:4a:3c:d2:7d:8b:
ca:67:84:c2:75:6e:2a:28:4a:71:75:f9:9e:45:23:97:81:ea:
98:06:6d:bc:7b:85:6d:fe:81:c4:9a:e0:34:ba:79:ce:a8:9d:
24:bb:96:54:12:94:14:93:09:99:a1:ad:67:60:72:8a:87:91:
f9:38:53:f9:5e:3c:a6:c9:73:ec:fc:d6:65:96:4e:58:d3:4e:
2e:29:43:1d:82:61:5c:2b:4b:7d:f8:e2:8d:c1:c7:5b:90:f9:
01:b9:26:27:92:df:d0:ce:ec:0c:89:4e:2a:66:b8:7a:c8:d8:
53:40:1d:8f:2a:8e:c1:e9:f4:79:ab:7f:73:78:08:c2:7a:63:
83:97:8d:46:5b:da:0c:38:5b:06:44:42:77:ea:4f:18:81:2d:
98:5b:8a:cb:c6:aa:76:a5:6b:a6:ba:29:46:34:39:89:dd:b4:
49:1e:29:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpewmKdAMlCJ5/brK7hifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl
OTI3NGIwHhcNMjYwOTI0MDkwMTI0WhcNMjYwOTI1MDkwMTI0WjAzMTEwLwYDVQQD
EygzMzZhZGEzYTFjYzBkOWIwZGJmOTJkMmZiYzk2ZWU4MmNkODgzYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvIsdK8ZbbC4E7Sbr5eu0KFn3c0l
y/SYDMCm17raKTsPLJ/iIsLQb73SvFdeSQJU5DQ04sFEUhyTWl7jqHr/70/Bkm7S
pdbww1DoGWjA/pDKr7yBfn2bymUmafFOBmcmNwtXqi96gL0U2wfcI7GpAyMyJKV+
8oaDzmbw1BW06iNdNI9D/WF7LpBtsadcQupiSRgmdBHlc9ENQDcbY77bIgGwztON
mC6wmTHioSPwcEHahcI/wivxwBOdyHYhNW/L3fK/1jnxnlQq0cbtnkTw2QVzhZN+
YPJcOAO0CC3ilHkj2gG+DmrNIol+alStTok27X+Uv2aiPToBo401unzp0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNq2jocwNmw2/ktL7yW7oLNiDtDMB8GA1UdIwQY
MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt
MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3
LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb2CD1r5
A0+QR8aAT/PgzZHdIP0dKDEzW28vsbDBzwenKEaK3BSYWACjN2f5qK1Ow5kJKpKo
VG5lbtV9Qacfuc9blb2Tqu51QIE4rI+dTtOOSF0SUko80n2LymeEwnVuKihKcXX5
nkUjl4HqmAZtvHuFbf6BxJrgNLp5zqidJLuWVBKUFJMJmaGtZ2ByioeR+ThT+V48
pslz7PzWZZZOWNNOLilDHYJhXCtLffjijcHHW5D5AbkmJ5Lf0M7sDIlOKma4esjY
U0AdjyqOwen0eat/c3gIwnpjg5eNRlvaDDhbBkRCd+pPGIEtmFuKy8aqdqVrprop
RjQ5id20SR4pBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 16:58:09 2026 by rpki-client