Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: qtRf/heKktOXHF8CppBE/zL0B5A7EPfM5rrOZ3F28JU=
Subject key identifier: 1A:C7:AA:0D:CD:64:10:11:FE:0F:77:B6:04:40:F2:21:19:01:72:C9
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 01A1046D98442E1E498EECF80046A98F2A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1529
Signing time: Sun 04 Oct 2026 01:00:53 +0000
Manifest this update: Sun 04 Oct 2026 01:00:53 +0000
Manifest next update: Mon 05 Oct 2026 01:00:53 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: 9OsuDz1Knf3WlHNr+iL9rH3mnQGu0788RSo9ahs2mBE=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:98:44:2e:1e:49:8e:ec:f8:00:46:a9:8f:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Oct 4 01:00:53 2026 GMT
Not After : Oct 5 01:00:53 2026 GMT
Subject: CN=1ac7aa0dcd641011fe0f77b60440f221190172c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:03:a6:06:be:1d:7e:04:3c:69:3b:6c:72:
8b:bd:72:8d:a5:7f:f0:35:95:32:e6:19:05:4a:2d:
45:51:3c:5d:2f:c1:cf:d3:91:62:c2:cb:82:86:42:
1a:4b:b8:1c:af:58:29:f9:38:20:ea:99:50:b7:b8:
12:ea:8b:fb:69:6a:fb:eb:46:3f:52:d4:fa:43:a3:
91:6f:24:a4:b5:7b:6f:71:8c:46:12:82:a3:14:eb:
6b:3f:2a:34:7f:e3:ec:6e:fd:bc:e7:f0:87:89:18:
08:b4:82:43:00:61:df:94:f1:c8:e4:bd:dd:fa:3f:
20:a8:8a:1d:72:ed:35:5c:60:b6:47:f3:b9:b2:2f:
a5:38:d7:02:f8:36:f1:47:6b:88:b2:5e:1f:e2:ad:
3e:66:41:e1:f5:26:ba:04:1e:4f:56:96:0c:7b:20:
07:e7:a9:55:e4:8b:01:b8:dc:58:93:4a:94:8b:eb:
9d:58:8d:83:7e:91:d2:be:23:46:9f:a6:a6:3e:4b:
d2:a9:05:a7:ac:0e:be:a9:2e:d6:9e:44:01:75:9a:
a2:f2:ba:0d:e1:dc:d9:87:41:55:3e:58:1c:d2:e4:
96:8d:77:da:8e:a9:5d:b4:bd:29:1b:d0:48:d5:54:
28:6e:89:60:e8:c8:16:ab:66:18:fb:84:45:53:db:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:AA:0D:CD:64:10:11:FE:0F:77:B6:04:40:F2:21:19:01:72:C9
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:71:f0:8d:f2:a7:ce:2e:e3:92:95:e1:68:74:45:db:f0:3b:
d1:5b:95:fd:0b:27:61:04:3d:d1:64:dd:70:4f:34:85:58:24:
60:ec:2e:a7:6c:de:82:ea:86:ca:9b:81:b0:74:a9:a9:2d:4c:
55:f8:dc:5b:76:9e:47:19:f0:bc:e4:f0:85:b6:f5:ea:e6:a0:
ef:53:a2:34:b3:9f:6a:94:cf:86:00:c4:fb:3f:80:4e:ae:61:
65:41:0f:39:1d:ed:80:e4:85:6f:10:ab:c4:f4:ae:6e:ca:b9:
ff:5f:a2:5a:a6:6e:b2:2c:ee:95:cf:10:e4:b1:5a:22:7c:17:
8c:3c:15:cd:66:16:68:3f:60:a8:95:31:a8:d8:bf:f7:72:a0:
f7:13:45:05:3a:20:1e:b8:36:37:24:a8:77:0d:19:b5:5e:bf:
23:25:ab:9a:16:80:b7:63:bb:bc:d5:86:05:af:7b:a0:79:c7:
28:2e:db:0e:53:60:cf:f6:bd:02:f7:76:2c:72:35:c6:eb:5d:
5a:78:63:61:f4:07:4b:86:5b:e5:7d:64:c1:98:e4:9e:fd:80:
dd:e7:9e:72:6b:38:e3:31:25:c7:83:54:7d:d6:5d:5b:85:50:
95:75:8f:5d:07:bf:2c:e5:b1:4a:d4:ff:eb:5f:c5:2b:f4:5b:
4e:1b:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:00:39 2026 by rpki-client