Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
File: nfWJZyvCo0XcEen_FiUA7BXa3R0.mft (raw, json)
Hash identifier: w6K8YEv8+A6ywjV5wt4G9H6BEMmgZtrA0Rer7p1E4Lg=
Subject key identifier: 5F:3D:E8:30:2A:06:C2:3D:D5:F7:31:0A:00:9B:80:06:9D:5D:4F:8A
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019D9AABF4E977407E1C6152A638A718FC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
Manifest number: 1191
Signing time: Fri 17 Apr 2026 09:00:53 +0000
Manifest this update: Fri 17 Apr 2026 09:00:53 +0000
Manifest next update: Sat 18 Apr 2026 09:00:53 +0000
Files and hashes: 1: nfWJZyvCo0XcEen_FiUA7BXa3R0.crl (hash: Ghtz6mIJ3QPzksCkaGmZtdjaIGHumHX/GTJsU6XSJ38=)
2: v6gwLEELUcOW8EGrOdAAHovql_o.roa (hash: OVBiXttWtXEViwRttR3M1gCKBS/ptPZBSBfkNvQ8mSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f4:e9:77:40:7e:1c:61:52:a6:38:a7:18:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Apr 17 09:00:53 2026 GMT
Not After : Apr 18 09:00:53 2026 GMT
Subject: CN=5f3de8302a06c23dd5f7310a009b80069d5d4f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:88:c2:79:fa:dd:4b:c0:ed:aa:2c:27:77:
76:3f:24:00:00:5c:e2:d1:77:a3:e8:70:a0:15:cf:
70:ac:95:6d:db:3e:b9:86:b6:ad:79:15:50:ab:5e:
0d:8c:7b:dd:87:4e:2b:20:e8:79:8a:ab:d1:0f:14:
65:aa:c3:ad:05:fd:66:b3:53:99:c0:0a:cd:dc:cb:
c9:e8:be:25:a6:49:8a:8f:33:21:99:d1:b1:f1:09:
25:c2:c6:6e:14:86:9b:b4:27:c2:8b:03:ec:d2:1f:
88:c6:1f:81:4e:02:62:f1:45:a0:b4:bd:fe:74:f8:
44:61:ca:6a:7c:1f:66:eb:87:99:7e:b1:59:42:01:
b6:5d:33:80:3b:f7:e5:e9:db:24:31:a3:07:81:43:
70:97:d0:dd:af:7e:4e:e2:4f:8d:b4:c3:2c:22:fc:
5c:f7:de:ce:ea:8e:be:88:ee:37:32:df:21:49:3a:
ba:f6:b9:71:22:85:fd:29:70:2b:1a:59:f7:50:55:
f7:45:39:68:6e:a9:a7:5f:a3:a8:9b:e7:6d:f1:dc:
e6:a1:c2:af:cf:b6:f7:57:b9:90:a3:74:59:c5:b5:
7c:a0:0e:4b:37:e7:d5:7e:1f:5d:22:ad:c0:83:12:
02:8c:5f:bb:ca:a6:04:f0:65:9c:14:40:35:91:5b:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:E8:30:2A:06:C2:3D:D5:F7:31:0A:00:9B:80:06:9D:5D:4F:8A
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cf:d7:76:3b:8d:47:3b:87:e9:4e:2e:e4:2a:31:23:16:6d:
5c:82:c4:19:64:00:cd:10:31:33:e4:62:04:fe:c8:14:5f:f6:
da:77:e3:27:dd:55:88:1d:cc:6e:d6:45:97:08:10:b7:a2:d6:
48:e7:0b:69:c5:8d:b5:10:a0:10:7a:11:60:63:05:3b:c0:1a:
76:aa:1d:10:65:67:28:1b:2e:46:cc:f3:89:9a:1e:33:d7:32:
09:7f:55:4d:c0:68:0d:90:6c:49:ec:71:86:c6:de:40:70:14:
3d:41:27:e7:f0:7c:5f:9d:aa:e7:b8:74:51:e7:21:fa:7e:af:
63:a2:96:15:34:3c:95:13:0e:89:a2:11:32:2a:6e:a2:49:a0:
29:fe:b4:70:4b:a1:a9:a6:2d:33:e6:42:bb:a7:86:24:da:2b:
10:b8:be:63:14:b3:37:c2:34:05:84:5a:70:b9:a0:4e:dd:41:
6c:fc:b6:74:37:33:9e:3e:c6:14:77:15:1b:6f:ae:c2:5f:09:
4f:f6:19:07:39:b5:71:f6:56:d3:a6:4b:61:00:28:3b:06:cd:
45:0f:6e:ed:65:8c:a7:fa:31:8f:59:ce:05:ac:38:44:ab:ac:
76:e4:1b:22:de:7c:ac:0d:7a:f0:f9:11:d4:e3:6e:2e:f1:65:
7b:f7:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:35 2026 by rpki-client