Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: u5NN4kQktQOHBTSCiupMzwK4dWQ5V3/gDWLWzybrAcQ=
Subject key identifier: AB:70:33:38:B9:00:10:0C:8A:E1:BC:96:89:E6:94:74:5E:B4:AE:6C
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01A0DC4DAFE2CF87A5A2A23FB1C6DDC23D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 055C
Signing time: Sat 26 Sep 2026 06:01:13 +0000
Manifest this update: Sat 26 Sep 2026 06:01:13 +0000
Manifest next update: Sun 27 Sep 2026 06:01:13 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: +lOWYoQS2aDZo1jyOPIv1xwJ2cFoYGUOnqmEGAc1QXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:af:e2:cf:87:a5:a2:a2:3f:b1:c6:dd:c2:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Sep 26 06:01:13 2026 GMT
Not After : Sep 27 06:01:13 2026 GMT
Subject: CN=ab703338b900100c8ae1bc9689e694745eb4ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:ca:04:3a:ee:27:f6:7a:34:bb:e8:fe:50:
76:34:ce:87:1e:23:31:d5:8a:ef:71:74:cd:99:a4:
54:10:93:90:a9:73:05:84:8a:25:4a:38:b1:2e:de:
8f:a4:08:2c:22:3f:20:7d:75:98:d5:de:cd:89:14:
a9:e3:b1:a6:55:e1:af:a8:66:aa:04:05:41:f9:5f:
55:7b:07:87:b8:40:2f:ce:0b:16:cd:8d:52:c5:c1:
0c:95:d5:1f:f9:97:73:b3:9b:20:37:ba:55:b4:7a:
2d:ad:14:de:dc:d7:fe:9d:cf:1e:0f:92:47:9e:07:
69:18:cf:00:cd:2c:66:82:2e:5a:34:45:46:7b:ba:
40:0a:0b:7e:c5:57:2e:4b:15:ea:e0:14:b4:17:19:
24:43:4f:bb:54:75:b0:28:5a:20:dc:66:34:2d:86:
46:b2:8d:16:47:a0:16:f7:7a:9e:f1:17:6f:0f:c5:
49:bb:9e:aa:9d:c2:a0:c1:23:c3:ae:c8:7c:85:72:
78:6a:30:db:e1:e3:4b:b8:7b:bb:2d:de:f9:91:48:
8c:56:d9:ea:b2:1b:5d:5e:0e:db:f0:dd:02:0b:8b:
a3:b7:d3:6d:2b:18:8c:3f:38:88:85:17:25:97:f0:
f1:90:43:b1:46:ca:9a:43:00:0b:9e:d0:aa:1a:e7:
4c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:33:38:B9:00:10:0C:8A:E1:BC:96:89:E6:94:74:5E:B4:AE:6C
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:2e:d9:c4:1a:47:c0:ca:1e:1f:43:e9:1f:f0:07:40:7a:
4e:13:2e:61:78:b6:15:66:0e:f6:ec:b3:01:26:5c:5e:f7:18:
de:39:52:0e:f7:e5:b1:17:fb:6b:ef:32:3b:2f:42:2b:ab:bb:
e9:a4:43:69:83:cc:55:2e:fa:d0:28:a2:13:79:27:94:db:f3:
a3:04:79:38:07:03:f2:61:cd:bd:c8:58:1c:f7:ce:30:11:8d:
ab:d3:9e:d4:37:c9:2a:fc:8d:ee:ae:4d:aa:ae:1e:19:2b:f4:
b6:28:cd:b8:ae:bd:24:1b:0f:93:12:60:9e:7c:c3:f4:5d:e2:
73:a8:11:a8:34:82:e0:d7:c3:77:0d:bd:8d:eb:40:72:bc:82:
38:18:9d:e1:63:9a:b5:f8:dc:aa:f4:11:36:d3:1a:90:e1:c2:
40:ba:85:e4:d6:ca:25:65:58:b6:83:cb:a0:46:75:a1:95:2c:
69:9a:3c:35:47:e2:f6:8f:b2:c2:b9:7c:da:e0:a8:6c:5d:4e:
6e:c7:d0:c0:b3:f9:38:42:ab:38:84:b0:6c:5d:07:d4:45:7f:
c3:3e:ce:f4:2d:a9:32:18:fd:e3:f5:b1:c5:b1:6e:78:b7:66:
cf:19:39:b3:22:1f:f0:d5:a0:86:a7:71:91:6f:0a:46:db:ab:
2d:19:84:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:45:58 2026 by rpki-client