Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: SZpkooYh3KsW6hQD2qmL3ZmJtdRUFYarbUX/jEfUdUk=
Subject key identifier: D8:B2:F7:1D:96:14:1A:A7:83:7B:64:05:B4:78:FC:31:74:C7:E6:C3
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01A10400019CFA6770E46A6190C1925B4AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1347
Signing time: Sat 03 Oct 2026 23:01:11 +0000
Manifest this update: Sat 03 Oct 2026 23:01:11 +0000
Manifest next update: Sun 04 Oct 2026 23:01:11 +0000
Files and hashes: 1: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (hash: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: chHB3FHa6QEWc1zWIE4VbuQxHZAjtNLh6P0pDNMXXzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:01:9c:fa:67:70:e4:6a:61:90:c1:92:5b:4a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Oct 3 23:01:11 2026 GMT
Not After : Oct 4 23:01:11 2026 GMT
Subject: CN=d8b2f71d96141aa7837b6405b478fc3174c7e6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:77:7a:0b:b0:f2:73:60:89:f9:80:6e:a3:
8b:25:97:a4:18:9d:0f:c7:7e:47:87:99:59:62:5b:
d4:73:c8:c7:e8:92:fc:2a:e6:00:a5:9a:9b:14:85:
66:65:ae:ab:fe:10:3a:0d:6d:1b:fb:a7:84:23:d6:
df:97:c3:11:05:42:1d:6d:46:74:7d:51:88:de:80:
9c:ad:cb:9e:f5:e1:a3:80:2b:26:60:a6:b4:cd:ef:
c4:cd:9e:16:30:7f:ad:89:1c:3a:32:3a:31:6d:77:
6c:df:3f:09:ce:50:7f:6c:48:a9:e7:17:9e:0a:70:
75:2a:d0:80:0b:29:e0:6c:bd:a9:08:39:5a:c6:5c:
bd:5b:ee:67:73:b4:4e:01:77:50:bb:be:4a:1c:ba:
3f:05:ef:2b:5d:9b:02:6e:8e:c2:45:b6:7a:da:70:
cd:cf:b0:fe:e2:57:db:a9:52:f7:10:ef:1d:d5:35:
95:3c:0e:7d:86:a1:10:5b:2e:33:f9:cf:99:ec:41:
cf:9d:ed:e8:d7:fb:c8:fd:b0:6f:81:04:12:23:63:
1a:d0:69:e3:bd:7c:86:85:45:c5:eb:d7:47:cb:6d:
1b:c8:56:b8:38:6c:39:b7:0e:0f:c2:0f:00:20:20:
91:b1:3f:3b:8f:67:99:0b:96:74:1f:d5:c2:a5:c8:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B2:F7:1D:96:14:1A:A7:83:7B:64:05:B4:78:FC:31:74:C7:E6:C3
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:49:c0:f1:e8:25:dc:ce:82:6e:4e:47:d6:01:6d:6b:e8:
80:fe:28:87:66:84:4b:04:14:06:83:64:9a:2e:78:77:99:03:
bd:d0:71:ec:fe:17:14:fc:ce:e9:41:9a:7f:39:0c:85:b8:59:
02:a4:2d:bc:7c:4c:d3:d1:c7:3c:d5:44:f5:13:17:fb:10:0d:
d3:43:37:e3:7e:07:db:91:11:d3:06:cc:4b:97:a2:d1:69:e9:
53:7f:90:15:35:16:b4:b3:b4:1a:f5:b4:27:14:77:ca:16:00:
3c:d1:2b:81:fb:24:30:f9:31:3e:63:a7:8c:c7:8c:fb:2b:4b:
5a:ac:ad:bb:b8:d7:b0:12:d0:c4:9b:87:ba:fa:97:1f:d7:c7:
25:c5:2b:68:c6:cf:98:bd:54:9e:f6:82:9f:98:da:0b:3f:c0:
f0:7c:03:e2:b7:02:32:42:ed:24:54:de:dd:34:ba:c5:c4:78:
11:4f:60:5a:53:a2:3b:79:3e:c1:71:33:c3:03:15:2a:e4:0a:
33:7f:34:73:a9:dc:ca:28:4b:30:41:50:41:9c:d9:82:4c:ce:
20:f0:5d:e7:a9:d6:64:cf:08:0b:c2:6a:5a:ce:5d:f1:72:b6:
c7:78:a8:7c:5a:72:79:6c:84:72:73:32:da:1f:cd:01:8a:74:
c5:53:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:34:32 2026 by rpki-client