Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: tolQP9UPqdOZPDaI2m8uXOpjYPd50FOe/MWkieHVe6s=
Subject key identifier: 30:5C:DF:D6:2A:BB:7F:19:FE:70:D3:BD:57:58:B2:5A:EC:EF:5A:D3
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01A1062663E7F0A90597C64BBF5259720DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0AA6
Signing time: Sun 04 Oct 2026 09:02:21 +0000
Manifest this update: Sun 04 Oct 2026 09:02:21 +0000
Manifest next update: Mon 05 Oct 2026 09:02:21 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: aOWr1XMLzn3lsDJi89YKWtckM1yxwJq64Je3bajik2c=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:63:e7:f0:a9:05:97:c6:4b:bf:52:59:72:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Oct 4 09:02:21 2026 GMT
Not After : Oct 5 09:02:21 2026 GMT
Subject: CN=305cdfd62abb7f19fe70d3bd5758b25aecef5ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:d1:64:11:5d:10:ba:2f:8f:e4:19:d5:89:
3e:31:62:8c:5a:92:02:d1:1c:90:7a:c7:44:d3:95:
15:51:d7:fc:5a:db:37:b9:c3:f8:7c:e9:08:72:b1:
5d:cc:2b:b8:1d:ca:25:fe:22:9b:c4:f6:31:8c:85:
aa:b1:78:05:88:6d:95:9d:5c:cc:0e:09:3e:98:d0:
40:ed:a6:3d:93:dd:68:93:e3:6e:09:bb:44:85:db:
b8:72:ce:43:41:22:45:76:85:73:96:75:99:d5:ac:
3f:a6:45:19:e9:98:c3:8b:93:4f:57:02:41:43:96:
3a:97:1c:20:f0:01:05:d1:25:a6:eb:7d:68:61:c4:
ff:1c:5f:b2:9c:b6:a5:e9:a5:24:2e:86:b9:98:2a:
d0:1e:60:5e:29:4f:ea:e3:fa:07:d8:f1:48:22:1b:
3e:5c:63:2c:c3:51:d8:d5:59:fc:f8:2c:dc:30:8e:
a3:3d:95:83:60:98:04:c3:38:d4:11:41:c2:7e:7f:
3f:a7:7c:24:1e:86:6b:55:d9:3b:13:cd:77:23:6d:
b1:58:fe:06:36:7d:8f:25:9f:4b:b9:11:e6:04:bd:
2b:75:89:67:d1:0d:d4:c4:cc:ef:56:ea:dd:72:9b:
14:cd:e8:a0:90:73:a1:f9:47:c4:92:15:a3:71:6d:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:DF:D6:2A:BB:7F:19:FE:70:D3:BD:57:58:B2:5A:EC:EF:5A:D3
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e0:81:75:45:ce:4f:f4:01:e3:6c:a2:dc:d8:20:2b:4e:76:
3b:e2:83:db:d4:5e:26:64:31:78:12:60:39:9f:94:64:02:cd:
28:51:9e:b0:40:a3:82:98:65:2c:13:f4:c4:04:2a:4a:83:01:
70:4a:8f:d7:a1:7c:08:75:e2:fa:8b:c5:06:c7:94:0d:be:83:
c9:c7:0d:d9:ff:15:98:e9:ba:69:5a:d3:02:b8:c9:5f:40:81:
7c:95:67:a0:55:4a:b3:2a:8a:6e:04:0c:72:55:77:0a:fe:2c:
52:2d:ef:d6:30:d9:67:2b:44:e8:57:43:a1:b5:63:18:46:66:
8a:26:ac:4d:d3:66:17:9a:6c:88:9e:f4:b8:95:b7:ab:24:91:
21:84:be:fe:05:88:99:cf:d8:21:b4:45:c1:ed:80:9c:1e:b0:
e6:a7:f1:7d:e3:e3:20:cf:ab:cb:eb:15:14:70:e6:8c:4c:83:
9c:a8:fc:dd:c3:1a:5a:b7:73:1f:91:cc:01:48:a8:15:59:76:
b9:ab:fc:0b:8b:d3:91:89:f1:85:3c:83:46:52:a5:3d:10:3d:
4e:f3:09:90:cf:50:19:b3:4d:01:ee:12:59:ea:0a:c6:8b:04:
6a:37:ba:34:5f:7c:43:a7:37:03:16:db:1b:47:2a:e3:4f:02:
40:24:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:51:01 2026 by rpki-client