Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: lKGviilmFquj32R7KdylvuFDMEhlaueNll6Rzm9KByU=
Subject key identifier: 99:4B:F3:76:A7:54:90:6B:C7:A7:70:4D:57:D8:F0:03:4A:97:DA:0B
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019E1EDA16FC1AA57534B1D7B6B10B50EA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 13A9
Signing time: Wed 13 May 2026 01:01:09 +0000
Manifest this update: Wed 13 May 2026 01:01:09 +0000
Manifest next update: Thu 14 May 2026 01:01:09 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: eHR2qiS3P3JblhgmAnmVvafm8bJo3UCnOBJX8mKB4HM=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:16:fc:1a:a5:75:34:b1:d7:b6:b1:0b:50:ea:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: May 13 01:01:09 2026 GMT
Not After : May 14 01:01:09 2026 GMT
Subject: CN=994bf376a754906bc7a7704d57d8f0034a97da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:ff:b0:1a:59:61:4b:14:60:d1:25:31:12:
49:74:0f:31:ef:e0:08:e9:32:c9:3b:f9:68:38:2e:
4f:e2:2a:77:4b:1e:4d:41:49:93:17:e7:d1:d2:5e:
af:de:45:b6:5c:65:d3:31:5c:ab:09:a5:3a:c0:80:
be:ca:7e:24:90:a0:27:ba:17:30:db:b5:32:fb:a1:
e8:fe:f3:85:93:0b:ab:3d:8b:b6:f3:0f:83:d6:a3:
0b:1f:73:56:80:69:c2:1b:62:92:51:ef:ec:fe:c8:
db:5d:4c:12:a9:27:f1:71:a6:29:f7:0e:02:7e:5f:
f6:4f:c6:65:8f:41:23:1f:43:fc:6a:e4:d4:8a:e5:
f5:24:4f:1e:b9:c2:2f:25:66:53:02:71:dc:be:49:
61:18:9d:1d:c9:26:fc:27:2d:93:e0:14:26:a8:b2:
aa:7c:be:8d:f7:37:bb:3e:7b:0c:47:8b:a4:ad:83:
54:da:be:80:30:f0:88:f9:e5:24:cc:74:cd:5f:62:
ab:e8:57:2c:e5:ce:07:62:0a:1f:a5:53:03:93:48:
f5:90:70:35:77:8d:e9:40:ac:6d:80:81:c2:1d:00:
3e:e9:1a:bf:9b:00:73:ab:e8:dc:d8:a9:0b:a5:21:
b4:da:ba:8e:ad:58:39:17:53:03:61:83:a2:29:ca:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4B:F3:76:A7:54:90:6B:C7:A7:70:4D:57:D8:F0:03:4A:97:DA:0B
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:a2:2d:a2:25:88:6f:ca:3a:44:33:15:31:5d:b3:a6:5a:
f7:d5:c7:ce:be:48:90:84:24:49:a2:6a:b0:94:bb:eb:be:ed:
3b:1a:3d:f7:92:4f:ae:48:06:73:ca:47:30:d0:09:51:78:10:
5a:60:d5:ce:58:37:cb:f4:f2:ca:d0:3c:33:0b:b0:92:47:19:
eb:9e:9a:93:ad:6e:1e:db:bc:00:34:92:27:d2:d0:5c:88:93:
8f:a0:25:04:9d:6d:5e:df:60:c6:22:93:53:09:e8:ff:05:66:
f5:09:05:ca:b8:76:7b:ae:74:9a:74:c9:b5:6c:86:f2:36:90:
c9:4f:fb:58:07:43:6c:97:f2:84:0e:38:c5:d3:ea:11:e2:e9:
73:88:20:90:ee:f4:cf:7f:17:91:17:ab:81:26:53:79:a8:5d:
2d:e2:b7:a6:fb:b5:6a:2c:ed:97:9e:ce:a8:34:75:e8:b4:4b:
40:7f:f5:03:8e:c9:e5:60:2d:be:48:ac:9b:c6:0c:8b:92:34:
17:df:23:ea:7b:31:c7:58:e6:c6:b6:08:c2:5d:b5:15:f4:8d:
65:60:1d:21:f0:b2:1e:fa:b7:9c:7a:ac:b2:55:d7:c9:23:0f:
b8:85:cc:de:90:da:82:50:b2:3e:16:f2:82:73:8b:76:74:74:
7c:aa:79:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:37 2026 by rpki-client