Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
File: nxw1DPVnNF5ddebFPgTfThJBwUA.mft (raw, json)
Hash identifier: g6KXBqEf3uugARTai1Ru0eltGLgOtdFyjpDEbcYFNAE=
Subject key identifier: A9:B3:9E:BA:1A:C9:C8:E0:C2:E6:FA:7C:D7:3C:84:2F:BC:21:62:BF
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019FAA8880D9F68A7372624114980903F35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (hash: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=)
2: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (hash: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=)
3: jDXTCYklB5PjjPIato0R36g-v0k.roa (hash: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=)
4: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (hash: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=)
5: nxw1DPVnNF5ddebFPgTfThJBwUA.crl (hash: mpOeyilp7OWWE/gx71+PvUIeuRtZRdcY/NAF758DmxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:80:d9:f6:8a:73:72:62:41:14:98:09:03:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=a9b39eba1ac9c8e0c2e6fa7cd73c842fbc2162bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:41:03:07:8b:42:b6:eb:66:9b:89:86:98:
fe:be:f4:72:35:22:f3:e2:89:03:a3:d5:14:01:14:
cf:47:be:cf:26:c3:dd:4f:1d:45:88:fd:e3:dc:1e:
d2:fd:54:ed:8c:06:e0:87:07:95:17:91:df:a5:e9:
bf:05:de:a5:f4:d2:ab:9b:51:b9:bc:07:89:b7:ea:
99:ea:37:a7:78:35:be:06:8f:2a:d1:db:d8:f5:d2:
38:9f:80:7a:2a:04:87:f5:2f:11:db:71:2f:a6:f3:
3f:47:c9:22:e0:3c:83:71:01:c2:e0:bc:17:7a:f4:
af:0e:dd:3d:21:2c:65:4d:3d:a2:3c:f9:ae:a3:bb:
a0:74:36:d4:5d:56:e7:95:cc:04:cb:dd:e5:79:94:
e1:5c:75:e1:21:a1:a3:cc:80:7c:9c:92:c6:87:ce:
24:dd:7c:c6:b5:be:6a:a1:6f:bd:76:10:21:7b:11:
ca:95:0b:10:6b:4c:66:a2:04:b4:f4:92:78:e1:c1:
36:1d:47:70:2e:14:6b:74:37:0c:a2:cd:11:0b:f5:
f6:c7:ac:9a:08:a0:c4:15:32:71:f2:bf:0b:65:44:
ef:e2:c4:01:e3:00:06:4a:66:6c:89:63:49:c8:83:
b5:10:3d:b9:c5:b0:36:c4:30:90:a3:e5:bb:fd:c1:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:9E:BA:1A:C9:C8:E0:C2:E6:FA:7C:D7:3C:84:2F:BC:21:62:BF
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:2b:17:8d:b4:de:f3:9c:e8:9b:c7:0a:25:da:f4:16:51:09:
50:5d:d6:59:e1:9d:64:4a:0c:0a:3c:a1:57:0c:32:b1:7e:b8:
9f:61:02:d1:dc:22:9b:54:7c:7f:99:ff:e1:b6:e7:14:97:36:
ea:e4:18:87:18:ff:ab:63:46:c5:00:f8:1c:52:7a:ca:ee:25:
15:5a:02:de:b8:e1:9f:dd:82:ac:61:b1:5b:00:09:99:5e:9b:
17:5f:2f:08:52:e9:e8:24:0e:75:58:fc:c8:18:e1:91:c7:af:
ce:f2:2e:4c:05:cf:32:4a:de:e2:f5:ad:6a:b8:99:d6:fe:25:
f2:e9:36:3b:27:a4:5c:7e:69:f3:b1:c5:c3:5d:b8:ed:1b:8b:
25:62:f5:49:e8:75:e1:53:e2:21:11:09:6c:9f:df:07:2e:7b:
3e:df:e3:db:d1:66:42:ec:51:35:c0:b2:a1:40:11:f0:ac:bf:
cb:ab:b8:9d:cc:51:87:e5:af:d5:b8:dc:45:a9:a8:a9:f2:13:
3a:b2:00:c2:9d:fb:7f:f8:3e:ec:bc:e9:e8:f4:e3:f3:9c:6e:
69:09:3f:cf:2e:ea:1e:f3:4f:88:08:02:23:41:73:13:9a:65:
29:89:1c:46:5d:a3:da:ed:f7:5a:13:6c:de:cd:4f:41:4a:b0:
af:26:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:10 2026 by rpki-client