Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: 7LzqL2dj3h+CGxaoUruM8OZDBpsS5OT3WGH3CdtKAhw=
Subject key identifier: 98:4E:8E:1C:4B:DF:55:2F:33:CA:39:D2:2E:F7:CC:C5:1D:FD:E4:D1
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019E1F7EF9847A856EA3AE7246D8FEDA72A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 11C7
Signing time: Wed 13 May 2026 04:01:15 +0000
Manifest this update: Wed 13 May 2026 04:01:15 +0000
Manifest next update: Thu 14 May 2026 04:01:15 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: PO7/28Po+osxAPShHpnQeAH+bj9sA8B3CbQa+u85PaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f9:84:7a:85:6e:a3:ae:72:46:d8:fe:da:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: May 13 04:01:15 2026 GMT
Not After : May 14 04:01:15 2026 GMT
Subject: CN=984e8e1c4bdf552f33ca39d22ef7ccc51dfde4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:28:af:6e:8e:0e:bb:b9:b8:9a:2b:97:5c:
9d:5a:ca:71:f5:a0:16:71:78:e1:46:43:d2:f3:44:
05:42:82:d6:58:50:fb:48:6f:6e:96:7c:a2:e3:2c:
ca:cf:6d:3d:85:18:a3:ab:ba:cb:0c:3b:00:0c:b7:
45:19:1c:06:4c:61:99:8b:dd:62:4b:ea:72:a5:6e:
0a:59:94:59:2e:d2:40:dc:fd:03:54:ee:d4:02:7c:
67:7c:fe:44:c2:31:5f:08:ad:b6:c0:7d:ae:86:52:
3a:87:59:27:75:d1:e3:dd:85:14:08:76:8d:80:50:
55:7c:cf:b0:19:5b:4a:15:d2:5b:c5:00:dc:33:a3:
68:33:28:86:fa:2f:a6:0d:b1:4a:b1:96:64:7f:d9:
47:c0:8d:cb:c2:b6:a2:28:11:9e:fe:ec:8a:94:0a:
0e:d8:18:6b:29:c0:98:f9:ee:18:a6:7c:f7:75:fc:
bb:a4:f5:0a:e8:d9:83:a1:13:6c:5d:fb:68:b8:4a:
38:c1:2f:38:c9:17:da:ac:23:5f:69:84:d5:f0:47:
08:1e:c4:e9:92:96:07:b8:58:72:a3:81:f7:8f:77:
61:fa:d4:71:66:67:a3:e2:fd:1d:93:93:71:4b:e1:
32:8c:99:71:93:58:f0:b6:46:59:d6:8d:be:9e:ef:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:8E:1C:4B:DF:55:2F:33:CA:39:D2:2E:F7:CC:C5:1D:FD:E4:D1
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f9:4e:a9:3a:8f:a1:df:ec:de:9f:ce:93:58:9c:bd:0c:6b:
be:0f:37:29:0e:ce:dc:41:4c:c9:90:fd:74:68:e0:47:0d:8b:
49:a4:e0:8b:b0:40:f9:07:3f:e6:26:2e:2d:4d:5d:2c:9c:3d:
cf:92:6e:87:11:84:7a:86:ef:c4:17:aa:0e:75:83:a2:38:e9:
49:8c:20:90:f6:9c:1d:17:8e:79:59:e3:c6:ab:81:a5:d9:1b:
d1:d1:a5:c4:68:bf:e1:f5:77:89:55:8c:09:55:50:d1:80:bd:
46:3e:4f:43:59:8d:72:ea:13:26:ac:90:27:3d:0e:77:f7:d2:
45:18:b4:67:f8:51:41:df:77:6e:af:82:bc:d4:88:6e:4f:d3:
47:63:f2:cc:37:36:00:c2:ff:74:4b:53:b8:00:5d:b4:b7:15:
db:af:ad:86:e3:11:5a:50:af:2c:77:08:73:b1:9d:b9:88:c7:
53:c9:93:00:6d:e9:83:72:c9:13:a7:7f:99:be:d0:eb:95:5f:
2e:1d:5e:8f:e3:23:0b:d4:f3:72:c0:1b:83:f0:8b:32:98:ca:
78:90:86:f2:6d:af:52:09:8f:42:4b:7e:ce:1c:67:bf:83:03:
4f:e2:bd:ab:b4:c2:af:88:ff:bd:25:b0:88:f0:1b:78:6d:d2:
3f:c7:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:23 2026 by rpki-client