Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: Qs+ZJamG5YiYHYBKvaXs0XVLFc2HYc+GWW7PJNV0MZs=
Subject key identifier: 54:15:D4:47:E7:0D:94:CF:31:15:E3:87:67:46:E4:86:1A:53:F4:F2
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019CAA584231E7E3502E06FD357D5846A7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:00:36 +0000
Manifest this update: Sun 01 Mar 2026 17:00:36 +0000
Manifest next update: Mon 02 Mar 2026 17:00:36 +0000
Files and hashes: 1: G_PF0dcvSh0twz3bDtykxA8n4vU.roa (hash: BuA1eaUoYFwCSmkQRdg21HY9Ijqx+wmJ9LSjgaoMGKo=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: PqGJB3WNgJP8ixtTuSQNGV4zuwyhTI/Ul9DA2pLN1uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:42:31:e7:e3:50:2e:06:fd:35:7d:58:46:a7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Mar 1 17:00:36 2026 GMT
Not After : Mar 2 17:00:36 2026 GMT
Subject: CN=5415d447e70d94cf3115e3876746e4861a53f4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:56:f4:e1:1d:7a:94:25:ab:c5:0c:e6:0c:
95:bb:80:30:68:7d:2d:cf:20:89:e9:ab:ba:70:8d:
6f:77:38:a8:9d:cf:81:19:fc:41:8e:98:ac:0d:32:
4d:43:18:27:fe:80:a1:2c:ac:35:0f:79:4a:20:43:
05:1f:c6:5c:13:e4:39:93:fb:ed:32:02:81:ec:a1:
71:c6:08:6f:07:30:5f:49:95:5d:f8:df:03:21:83:
8a:ff:03:18:96:47:99:5f:b5:b9:92:c2:77:89:55:
78:4d:59:6b:c9:fa:99:d5:d1:ab:5d:54:84:e8:cc:
d5:f7:2d:b7:d5:4b:76:47:82:8e:17:31:5e:22:de:
77:b5:90:cb:b4:95:9c:33:d9:5c:a2:05:63:9f:45:
24:2c:48:55:fe:29:ef:30:e4:cb:e5:86:10:43:cf:
ee:27:28:b5:04:4d:83:e8:68:f5:c7:73:f1:70:51:
b3:61:e1:43:cc:64:5b:d2:f4:dd:e0:53:6d:2d:8a:
ac:31:77:3f:ae:51:17:29:70:50:d2:d0:f1:1d:90:
0b:dc:18:fd:cd:9e:81:60:d0:04:b8:69:8b:45:cc:
ad:77:f7:9d:55:7e:2e:68:30:d1:87:17:b9:76:e7:
56:cf:56:7a:cd:8e:68:df:88:c7:be:aa:0d:cc:0c:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:D4:47:E7:0D:94:CF:31:15:E3:87:67:46:E4:86:1A:53:F4:F2
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:cb:93:7a:62:e4:30:43:49:1a:de:14:05:73:eb:39:c0:
94:a0:71:e2:72:d3:ba:a5:87:fe:95:55:7f:4e:54:f0:8e:7c:
52:84:92:f1:19:67:d5:e7:7a:e2:9a:62:52:80:3e:a9:ed:4b:
e6:d3:df:78:71:40:a5:2a:36:09:aa:6d:41:6b:1a:f7:36:c1:
5c:81:b6:0a:e1:95:9e:12:40:7c:73:d5:d8:8e:9b:4f:ca:25:
55:82:7f:80:a8:de:43:81:87:fc:8a:18:fc:a6:f1:33:41:79:
9f:d4:94:dc:34:be:b2:48:2b:3a:a6:67:2c:b3:b5:2b:d7:85:
45:91:58:69:70:27:cc:ae:7e:64:50:f8:00:f4:4a:ff:19:4a:
66:6c:84:e7:5a:1e:ec:aa:d6:60:8f:62:5f:68:86:de:bb:aa:
00:04:9b:94:04:2c:04:52:9f:b3:3f:28:70:3d:ad:44:bd:7c:
cd:95:58:74:ee:be:96:8f:0d:5d:dd:8b:c2:e7:c4:60:f4:ed:
cf:22:17:5e:c0:28:2d:e0:3e:f0:5e:b3:02:fa:32:cc:f6:5a:
77:0d:7e:e3:8f:f9:71:45:2d:54:ce:a0:47:f0:01:c2:77:a1:
1f:f4:d9:7d:bb:6e:b1:b4:44:96:6f:64:79:ce:6f:ad:0d:ba:
e8:8f:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:54 2026 by rpki-client