Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: vsFf4rhs+LS+qxdcXkuwu5YvJvVQhvx5ojNX7xv73cg=
Subject key identifier: 97:7F:F1:E5:19:D7:22:31:6E:AC:59:A4:3A:C0:3D:CE:62:F2:6F:63
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019D265F474CEC7EA9340F624E33230E3280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1146
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: UfCc3hjeObAl/4lUmwJKrtDfMy2n2Bq0iQEoMetYD14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:47:4c:ec:7e:a9:34:0f:62:4e:33:23:0e:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=977ff1e519d722316eac59a43ac03dce62f26f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:22:c9:0a:23:c5:b1:ba:50:b6:12:c5:91:
78:fb:b4:30:d6:f7:64:07:77:10:88:cb:05:db:83:
b2:65:33:44:a9:e4:7b:b3:49:fa:74:91:b4:d5:8d:
2a:bf:f7:09:92:3b:f1:9a:a4:40:b6:83:39:22:4b:
9f:a4:ec:e9:56:15:fe:42:01:51:99:8f:f8:0c:da:
19:06:ea:3e:3d:fd:ba:cc:8a:71:70:06:a1:99:5a:
67:c2:67:78:b2:b5:b7:97:19:eb:eb:a7:dd:82:0e:
15:1b:ba:c6:77:36:6c:e6:ee:07:54:a4:ae:38:8e:
99:fb:b2:1e:f0:8f:fb:e4:75:84:43:5b:45:56:82:
45:6d:6d:92:af:01:4f:80:c2:77:d4:cc:bd:0c:93:
7d:31:a7:ef:df:cb:b5:e7:98:91:23:bc:8c:51:52:
6b:f4:aa:9e:9a:a3:b2:a3:09:37:6f:8b:dd:80:fa:
50:9e:1a:b4:3f:84:4e:dc:17:1d:8c:8f:8a:d2:ff:
5a:3c:d9:77:40:6d:2a:fa:18:0a:fb:5b:75:79:c5:
8a:45:ce:ef:d8:e0:37:89:cc:aa:93:b2:e9:47:26:
b7:3d:97:56:6f:67:9a:97:ba:fa:67:37:b7:55:e2:
13:a6:f8:02:f6:a4:32:df:bb:5c:5e:d9:7b:e0:00:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:F1:E5:19:D7:22:31:6E:AC:59:A4:3A:C0:3D:CE:62:F2:6F:63
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:23:88:0a:a4:15:22:69:c8:9f:27:22:81:30:a9:b0:16:28:
30:3d:47:ca:4e:e9:a9:b7:3a:ec:c4:9c:8c:5d:3c:05:7e:69:
52:98:a1:0d:df:a7:f1:2d:e0:a1:5e:76:88:b7:1f:1a:07:e2:
ed:b9:c7:4d:e9:24:b9:ad:4e:6c:c3:ba:30:d8:2a:6b:e3:2d:
c8:4c:6c:19:de:b3:dd:ee:60:db:64:c4:f0:71:a6:b6:b9:e5:
b4:4a:89:7d:7d:ec:b0:05:c1:77:9f:f0:d6:d8:5f:f7:74:fe:
ce:bb:be:3d:2d:73:70:56:63:48:b1:96:20:a8:2e:6c:63:d7:
fe:4d:f1:8a:bd:dc:79:dd:5b:97:a4:85:fe:7a:43:cb:0f:7b:
b0:b2:39:0d:12:27:9d:68:94:2b:7b:64:5d:6e:e3:8f:61:75:
77:c9:3a:a9:8e:f2:76:4d:5f:75:1d:8c:4a:4b:5d:bd:73:0b:
22:2a:4b:0b:7f:08:72:43:39:57:54:b8:ef:35:5c:67:91:ed:
60:28:95:21:3a:e3:47:b2:5f:25:c0:9c:4d:d5:c5:d9:b6:41:
87:7b:16:b6:67:3e:f9:f1:33:c9:68:73:bd:d1:64:93:a4:27:
56:d8:2b:5b:a9:e4:16:b5:62:98:14:d1:60:70:d2:33:47:26:
d1:10:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:27 2026 by rpki-client