Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: FM45ygsSnrXIkzI6peMjxAwpvg8hScgC3k/uKRJfAZg=
Subject key identifier: D0:7D:D3:DA:82:0F:B0:3D:7C:7F:B6:DD:E4:8F:9D:22:68:27:88:23
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019DA41CD77AC47E065D60D1FD26B9347B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 03B1
Signing time: Sun 19 Apr 2026 05:00:46 +0000
Manifest this update: Sun 19 Apr 2026 05:00:46 +0000
Manifest next update: Mon 20 Apr 2026 05:00:46 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: steOD1zaakU+bv8sEnMWBm7yymgAo1TN6BSiSWQOoa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:d7:7a:c4:7e:06:5d:60:d1:fd:26:b9:34:7b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Apr 19 05:00:46 2026 GMT
Not After : Apr 20 05:00:46 2026 GMT
Subject: CN=d07dd3da820fb03d7c7fb6dde48f9d2268278823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:7e:93:24:85:4d:8a:66:b9:4c:23:0e:d5:
10:45:71:8d:ac:c6:40:49:fa:7d:d9:53:aa:9c:0f:
4b:8c:bc:c7:0d:31:a5:31:7a:08:e0:0e:23:21:70:
d8:d6:f3:31:e7:99:5c:6f:95:39:56:a5:b9:c3:b2:
44:69:e4:bd:42:96:2d:6b:21:c2:79:c5:af:61:e0:
b0:b5:ed:b4:b5:59:87:e6:03:f8:06:d8:33:83:15:
4c:da:62:f5:a8:a6:71:58:72:4d:76:be:f1:f2:7b:
83:fd:bc:d5:d1:08:0b:18:3e:3e:3a:4c:ab:1d:82:
7c:5c:d7:58:37:02:7a:bb:f7:4c:6f:c3:19:89:9d:
7c:db:d5:2c:11:2a:2e:dd:1b:ee:fe:82:93:59:92:
bb:2a:67:19:94:df:e9:dd:81:f9:4c:93:39:97:30:
31:63:30:f3:1a:34:3f:0f:48:1b:16:32:82:af:5f:
47:04:ba:c3:f7:85:a3:0d:f2:3c:0e:51:f5:f5:d7:
94:4e:03:fc:96:42:40:9c:8e:1d:84:1f:2d:d1:4f:
54:1b:a3:66:e3:e0:af:0d:2c:e9:7a:cf:cd:2e:d5:
a0:85:40:cb:82:e9:b3:a3:3f:d0:a7:8a:85:b8:36:
ac:0c:32:43:f0:91:0c:74:28:2d:43:ae:4d:6b:7c:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:D3:DA:82:0F:B0:3D:7C:7F:B6:DD:E4:8F:9D:22:68:27:88:23
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:ed:1d:f0:e9:b6:26:be:bd:cc:51:8f:69:53:a1:12:d6:
87:25:42:d1:27:6d:ec:c4:c1:4c:d4:c5:7a:3b:71:29:c2:48:
3a:0f:a9:07:55:a9:5b:3c:e6:74:7b:18:a2:af:fc:ba:9b:b9:
12:82:bb:36:a4:51:f2:22:1f:b2:3d:17:cd:6e:08:60:6f:f8:
cd:80:15:ef:fd:af:b2:e0:8f:e5:2c:ed:92:d4:cc:b3:c7:16:
cf:91:cb:75:e8:b4:17:e4:8e:79:9e:8d:3f:1d:60:3a:05:38:
48:fd:ae:90:fe:ae:06:62:5c:c9:14:80:46:bd:92:39:43:b9:
ca:29:1f:22:cd:c6:3c:c4:8d:7b:d5:b2:5e:0b:de:5b:8e:1e:
24:fe:80:7f:96:29:66:5e:b8:1f:5b:9c:b2:ee:3c:db:57:19:
07:b5:c8:e9:b0:03:d5:c8:7c:b2:42:61:29:1d:4d:63:78:89:
b2:da:25:30:b8:cd:e1:d3:1a:37:f9:b5:70:52:c8:6c:65:b2:
17:7b:39:62:2f:e2:64:3e:5a:ea:ec:06:8b:15:e6:cf:4a:b6:
f2:b2:e8:84:9b:a5:fa:93:f0:04:6a:8c:4a:bb:f7:3c:a0:48:
a7:1a:2e:ea:7f:08:5f:00:69:de:6f:7f:7f:74:a5:f1:77:03:
92:4f:51:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHNd6xH4GXWDR/Sa5NHtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl
OTI3NGIwHhcNMjYwNDE5MDUwMDQ2WhcNMjYwNDIwMDUwMDQ2WjAzMTEwLwYDVQQD
EyhkMDdkZDNkYTgyMGZiMDNkN2M3ZmI2ZGRlNDhmOWQyMjY4Mjc4ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS1+kySFTYpmuUwjDtUQRXGNrMZA
Sfp92VOqnA9LjLzHDTGlMXoI4A4jIXDY1vMx55lcb5U5VqW5w7JEaeS9QpYtayHC
ecWvYeCwte20tVmH5gP4BtgzgxVM2mL1qKZxWHJNdr7x8nuD/bzV0QgLGD4+Okyr
HYJ8XNdYNwJ6u/dMb8MZiZ1829UsESou3Rvu/oKTWZK7KmcZlN/p3YH5TJM5lzAx
YzDzGjQ/D0gbFjKCr19HBLrD94WjDfI8DlH19deUTgP8lkJAnI4dhB8t0U9UG6Nm
4+CvDSzpes/NLtWghUDLgumzoz/Qp4qFuDasDDJD8JEMdCgtQ65Na3yQ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB909qCD7A9fH+23eSPnSJoJ4gjMB8GA1UdIwQY
MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt
MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3
LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0vtHfDp
tia+vcxRj2lToRLWhyVC0Sdt7MTBTNTFejtxKcJIOg+pB1WpWzzmdHsYoq/8upu5
EoK7NqRR8iIfsj0XzW4IYG/4zYAV7/2vsuCP5SztktTMs8cWz5HLdei0F+SOeZ6N
Px1gOgU4SP2ukP6uBmJcyRSARr2SOUO5yikfIs3GPMSNe9WyXgveW44eJP6Af5Yp
Zl64H1ucsu4821cZB7XI6bAD1ch8skJhKR1NY3iJstolMLjN4dMaN/m1cFLIbGWy
F3s5Yi/iZD5a6uwGixXmz0q28rLohJul+pPwBGqMSrv3PKBIpxou6n8IXwBp3m9/
f3Sl8XcDkk9RGg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:22 2026 by rpki-client