Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
File:                     _NWPqid85i17RmD_FIja0mxSR8s.mft (raw, json)
Hash identifier:          N2aoqVR7bhgIqM1PDRgkQ+7nD/YNIv+yVsVlWQJehzo=
Subject key identifier:   2F:6B:1F:AE:6C:C7:08:E7:D6:05:90:C1:76:7C:CD:B4:AA:0F:36:C6
Authority key identifier: FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
Certificate issuer:       /CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Certificate serial:       01A0C444F2F2B12EA1F989660F86A9F365C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
Manifest number:          1D
Signing time:             Mon 21 Sep 2026 14:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:47 +0000
Files and hashes:         1: WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa (hash: U6Td7uAG7reeHiTfQxI1PpECAeu9USD7DlfHvDW3/Ds=)
                          2: _NWPqid85i17RmD_FIja0mxSR8s.crl (hash: WMDUMwmmglwfAtR1sApp33mE5ptybmGCIxB51FckmsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:f2:f2:b1:2e:a1:f9:89:66:0f:86:a9:f3:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
        Validity
            Not Before: Sep 21 14:00:47 2026 GMT
            Not After : Sep 22 14:00:47 2026 GMT
        Subject: CN=2f6b1fae6cc708e7d60590c1767ccdb4aa0f36c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:b5:1f:2c:9e:03:32:b5:dc:bb:5c:08:e5:
                    d4:37:10:9d:78:2f:94:c6:61:35:a6:7d:4b:0e:45:
                    00:df:c2:62:bf:aa:c1:77:24:47:fa:e1:4c:8c:d8:
                    85:99:b2:6e:96:b4:bb:ed:52:dd:67:34:ea:64:a6:
                    b2:6a:52:d2:9e:d6:17:c6:9a:22:1c:6b:f5:0d:52:
                    23:5c:e2:0c:f9:91:ff:b9:d8:63:ae:bd:43:a1:ff:
                    83:cd:8a:63:a8:75:30:0b:d6:e2:53:7f:81:f5:34:
                    50:9e:04:e2:3a:5b:37:4c:53:c0:d0:b0:b4:84:bb:
                    46:fb:7f:4c:b1:95:e0:16:74:7f:43:6c:56:69:e2:
                    17:d5:db:5f:80:fa:1d:da:48:1b:0b:47:2d:be:f9:
                    7f:68:d3:27:73:a9:4f:94:f4:81:49:50:9a:40:8f:
                    55:fb:e0:b4:3b:94:94:eb:3d:5a:84:65:59:94:50:
                    94:c2:e3:7a:94:51:b2:6d:7d:d7:62:73:02:08:d8:
                    c8:fd:6c:1a:8f:61:97:8f:e8:aa:24:88:88:1b:46:
                    00:e3:74:37:fc:4f:99:92:71:5d:68:5c:b3:5d:1c:
                    6d:d9:e4:5e:d4:ee:52:09:a4:19:07:4d:ea:fd:14:
                    d0:54:13:3a:96:0d:dd:02:8f:d0:b2:1a:7a:7b:31:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:1F:AE:6C:C7:08:E7:D6:05:90:C1:76:7C:CD:B4:AA:0F:36:C6
            X509v3 Authority Key Identifier:
                keyid:FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:28:53:3c:e0:6a:18:e4:9d:6a:7b:ed:a2:3f:59:8c:48:
         9b:78:c3:e3:a1:aa:2f:1d:87:d0:95:46:1e:70:8f:25:90:7a:
         0d:62:3c:86:cf:00:14:f2:58:82:16:d0:76:27:0c:5f:d5:ad:
         f8:c0:33:41:d7:d3:c4:40:1a:c1:8d:2e:f8:80:26:66:60:97:
         0e:91:fa:44:96:8b:04:c5:4f:78:f2:1c:8a:d9:e8:a4:1a:7e:
         f4:2f:2f:5a:fc:5d:ad:72:73:2d:e7:14:d2:ca:39:6b:06:ba:
         49:d0:38:a5:b1:fa:18:a9:ce:7c:53:99:5a:a1:7b:ac:38:7a:
         37:6d:2b:7a:ab:10:5c:43:fc:fe:84:ee:38:90:ce:e3:d9:fb:
         b5:c2:a4:30:a4:26:d9:4b:b0:7c:44:b5:e5:a3:b0:ff:45:4d:
         1d:ec:df:10:ec:5e:96:c6:18:a5:8a:28:1a:be:a6:b3:52:34:
         1c:6c:c8:51:0e:1f:e6:74:fb:6a:27:5b:d6:a0:10:73:7e:c5:
         b8:6c:42:46:a1:98:3a:5c:e7:1e:85:12:b8:18:1b:8e:69:75:
         29:95:5a:c3:db:d9:2b:8b:8e:dd:31:2a:01:b6:b8:56:79:ea:
         b6:c2:3b:a9:c3:f3:ed:a8:cf:82:40:70:3b:6f:13:c9:fe:02:
         00:61:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:09 2026 by rpki-client