Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
File: nxw1DPVnNF5ddebFPgTfThJBwUA.mft (raw, json)
Hash identifier: 3QTzM0ArjPILs7YRYsGdkp8YDSukSWofrLOIRil8O0E=
Subject key identifier: 89:C1:81:6C:94:68:B7:92:16:19:D9:07:2B:B7:CC:FA:83:B7:0A:1A
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 01A0C66B15E7E978684A99C7AFC901E71FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:41 +0000
Manifest this update: Tue 22 Sep 2026 00:01:41 +0000
Manifest next update: Wed 23 Sep 2026 00:01:41 +0000
Files and hashes: 1: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (hash: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=)
2: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (hash: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=)
3: jDXTCYklB5PjjPIato0R36g-v0k.roa (hash: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=)
4: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (hash: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=)
5: nxw1DPVnNF5ddebFPgTfThJBwUA.crl (hash: lW4gVVODAHcDs889c3q5bv/CPwP1sA+pGDQSJ5N4z4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:15:e7:e9:78:68:4a:99:c7:af:c9:01:e7:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Sep 22 00:01:41 2026 GMT
Not After : Sep 23 00:01:41 2026 GMT
Subject: CN=89c1816c9468b7921619d9072bb7ccfa83b70a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:4a:e5:10:71:d1:f1:a9:fb:31:88:99:5a:
8f:56:81:55:5f:cf:02:ce:57:68:f3:ac:c5:f4:44:
06:61:ae:97:d4:51:db:a0:61:0f:93:c4:c4:f6:fd:
bf:ee:c0:9b:8e:6d:a6:e6:93:c7:b0:8c:13:6b:ff:
40:cb:31:af:4d:50:49:d8:f1:d9:49:bf:bd:2a:ae:
2b:0c:7d:6a:a7:2c:bd:e4:5a:52:d7:9e:50:79:56:
36:5c:bb:e4:5c:c0:cb:b7:2c:33:e5:6f:bb:7a:29:
0e:2d:81:0d:f6:c2:cc:c1:ec:ad:4d:78:d6:a1:ed:
a4:28:ba:41:b2:35:a6:6b:5d:4a:dc:43:f0:ce:1f:
04:52:23:3f:9b:51:8d:8e:b2:ed:a5:33:4a:39:4f:
13:b0:53:7b:dd:a6:1a:97:a4:5a:94:e3:61:9b:3a:
d7:98:2f:0b:b8:35:ec:e1:8e:49:11:12:6c:25:31:
14:55:21:db:02:dd:87:c3:d6:94:4b:e3:0e:e1:19:
7c:fa:a2:95:9e:af:d4:3c:41:1e:a1:8a:2f:29:30:
c6:f7:a9:20:ab:a0:44:51:e2:18:94:07:80:c6:e8:
f4:d2:9c:4b:ca:88:ea:2b:51:8d:62:69:93:38:44:
95:56:c8:10:36:bd:e9:ed:75:6d:95:b3:3f:ae:89:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:81:6C:94:68:B7:92:16:19:D9:07:2B:B7:CC:FA:83:B7:0A:1A
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:02:dc:c0:42:c1:6c:0f:11:33:31:de:23:ba:4c:df:e8:
f8:d2:5b:10:d9:4b:9c:b7:e0:c5:bb:99:fa:a1:d1:9f:e6:c9:
7d:df:1e:d0:aa:21:9a:6e:36:0f:21:4a:75:90:4d:8d:a8:59:
0c:cd:de:08:73:38:67:cd:9b:89:aa:1b:35:68:b8:2b:80:a7:
82:f1:35:a2:53:15:6e:15:38:75:f1:4b:1d:d7:1a:c9:d6:0a:
e3:61:79:01:fb:cb:08:84:36:c0:c9:b4:0a:6c:8b:e3:bb:c6:
fb:83:a5:70:18:68:48:86:e1:58:50:2f:e8:58:78:c8:2c:3d:
6e:b8:35:15:71:05:cd:a8:a3:ac:37:bf:d4:4e:04:6f:3c:23:
53:8e:b6:40:24:1c:22:af:2c:64:c5:e1:7d:a7:c5:ee:ac:a2:
67:e6:ce:89:e2:e6:72:63:c3:e2:ef:b5:b5:c6:45:44:29:a6:
91:c8:c2:f2:2c:ac:5a:9c:61:9f:8e:63:6c:64:45:ee:96:71:
08:fe:88:d6:78:ef:75:35:de:f0:10:2f:ef:53:5f:43:54:54:
b6:8e:ef:cc:f4:98:71:b4:10:45:ed:5e:58:d5:1d:41:f5:d8:
9e:37:49:80:4c:c8:1e:c3:00:2c:a8:b2:47:43:72:17:12:6d:
87:25:95:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaxXn6XhoSpnHr8kB5x+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWMzNTBjZjU2NzM0NWU1ZDc1ZTZjNTNlMDRkZjRlMTI0
MWMxNDAwHhcNMjYwOTIyMDAwMTQxWhcNMjYwOTIzMDAwMTQxWjAzMTEwLwYDVQQD
Eyg4OWMxODE2Yzk0NjhiNzkyMTYxOWQ5MDcyYmI3Y2NmYTgzYjcwYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuBK5RBx0fGp+zGImVqPVoFVX88C
zldo86zF9EQGYa6X1FHboGEPk8TE9v2/7sCbjm2m5pPHsIwTa/9AyzGvTVBJ2PHZ
Sb+9Kq4rDH1qpyy95FpS155QeVY2XLvkXMDLtywz5W+7eikOLYEN9sLMweytTXjW
oe2kKLpBsjWma11K3EPwzh8EUiM/m1GNjrLtpTNKOU8TsFN73aYal6RalONhmzrX
mC8LuDXs4Y5JERJsJTEUVSHbAt2Hw9aUS+MO4Rl8+qKVnq/UPEEeoYovKTDG96kg
q6BEUeIYlAeAxuj00pxLyojqK1GNYmmTOESVVsgQNr3p7XVtlbM/rolB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInBgWyUaLeSFhnZByu3zPqDtwoaMB8GA1UdIwQY
MBaAFJ8cNQz1ZzReXXXmxT4E304SQcFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADocC3MBC
wWwPETMx3iO6TN/o+NJbENlLnLfgxbuZ+qHRn+bJfd8e0Kohmm42DyFKdZBNjahZ
DM3eCHM4Z82biaobNWi4K4CngvE1olMVbhU4dfFLHdcaydYK42F5AfvLCIQ2wMm0
CmyL47vG+4OlcBhoSIbhWFAv6Fh4yCw9brg1FXEFzaijrDe/1E4EbzwjU462QCQc
Iq8sZMXhfafF7qyiZ+bOieLmcmPD4u+1tcZFRCmmkcjC8iysWpxhn45jbGRF7pZx
CP6I1njvdTXe8BAv71NfQ1RUto7vzPSYcbQQRe1eWNUdQfXYnjdJgEzIHsMALKiy
R0NyFxJthyWVdg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:31:25 2026 by rpki-client