Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: kItPBP5s4nYdqRLJC1UY0EFA0OrbKOBdoFYq8VfWtgY=
Subject key identifier: F8:F5:BA:B6:4C:E3:81:6F:19:92:BA:4C:C6:7E:42:1B:8B:F4:87:36
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019D2960FB6ABBA8CC72A7327BB655D4AC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 08A6
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: E4cBhumudgsZLcpd3VWyzIQXYkuGVssY7zLeWysdPbE=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fb:6a:bb:a8:cc:72:a7:32:7b:b6:55:d4:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=f8f5bab64ce3816f1992ba4cc67e421b8bf48736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:16:90:40:42:4f:4f:3b:61:37:58:7d:7b:
bb:54:24:f6:38:47:ae:17:07:6b:29:a1:b0:f7:da:
0d:74:61:4d:b2:ca:8b:f5:2c:3d:bf:18:e7:8e:1a:
42:34:6c:00:f4:b6:d6:fc:f8:f9:ea:33:09:c6:31:
03:bf:60:bb:26:f6:13:9d:56:a8:f4:0d:3c:d5:2f:
c1:5a:79:d7:15:6d:ad:28:66:4a:4e:8b:09:f9:8c:
b0:ba:1d:9e:4f:22:64:44:4a:8d:05:f8:e7:29:3a:
a2:3e:94:8b:80:3c:7e:27:9f:ad:17:f7:38:24:60:
85:12:61:1f:a6:e0:64:01:2d:a9:b4:ac:8b:2e:b4:
8b:fa:12:a1:8d:27:14:06:83:fa:da:23:64:dc:1a:
69:45:a3:3a:6d:0d:dd:a8:fe:57:45:ec:d1:9c:66:
68:55:05:45:a6:de:3b:88:99:96:d6:52:77:03:d3:
68:22:b4:4d:3b:61:0c:7a:ff:d6:d2:03:4b:ed:6d:
f7:50:63:53:0d:ff:43:9e:93:4e:78:d0:08:70:82:
9e:95:f4:e7:e4:91:ac:4b:fe:4e:84:43:d3:37:f9:
27:d5:fc:29:c1:c6:4c:e9:67:36:67:14:fd:af:0b:
97:e8:31:16:aa:0b:0c:a7:7e:4c:74:72:21:e6:38:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:BA:B6:4C:E3:81:6F:19:92:BA:4C:C6:7E:42:1B:8B:F4:87:36
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:44:54:7b:d9:61:b8:9d:48:46:e3:8e:a2:fe:3e:e4:d5:
ad:37:98:d5:d3:9d:8a:c8:9e:fd:94:ea:cf:34:a8:78:f9:a3:
26:a3:38:29:81:d2:95:8d:8f:eb:a3:15:21:30:ca:a6:7a:31:
48:49:d4:61:0e:43:f3:11:4a:9c:50:bc:73:33:8a:0d:92:04:
0b:70:be:36:c9:ce:87:14:f0:1f:98:39:98:d9:2c:05:76:19:
24:5b:df:70:30:9e:7f:62:fe:e5:3b:a4:3f:0e:62:29:79:76:
75:ef:e5:68:73:31:bf:d1:21:99:3a:b0:f7:88:d3:76:4c:d1:
f7:6e:7e:aa:26:0a:92:f2:80:06:2f:eb:91:da:0c:c0:7a:5a:
c3:03:f7:14:3d:24:0b:c0:15:ba:a4:4e:6c:6e:71:73:b4:37:
93:a0:44:a8:35:a6:8d:6b:44:70:f9:7b:47:e0:3b:5d:fd:bb:
f5:8e:b8:bc:3c:40:d7:52:23:69:1d:90:10:62:06:3a:4f:40:
71:24:e8:47:eb:ff:24:0c:b5:49:f7:84:e9:0b:12:7f:32:7b:
92:78:0d:f0:81:bd:fd:95:3d:17:be:6a:4b:fd:0d:31:74:d4:
ae:ab:b8:af:e1:fa:47:06:6f:27:85:8c:72:8f:86:b7:b5:7f:
4d:86:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:08 2026 by rpki-client