Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: QMT222/2GR5o3FUqoVOMyOZ9sfSyxejTiPwM8OS1cFc=
Subject key identifier: 14:11:06:FA:24:87:90:22:52:48:08:BD:78:0C:E9:F3:D3:00:DE:B4
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019CABD8EF6F76B6C1FC26126B4623EB40CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 0330
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: HfFz20LKRSEnghYhQTCk0iQfHRidTryo7gYfl7RwuuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ef:6f:76:b6:c1:fc:26:12:6b:46:23:eb:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=141106fa24879022524808bd780ce9f3d300deb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:2e:b4:c4:91:85:e3:79:a4:d3:7d:00:fb:
6f:df:aa:0f:5c:b5:f1:95:04:3d:fa:9d:d1:8f:b4:
40:dd:67:16:60:6d:54:dc:4f:2d:39:f5:63:c2:c2:
9d:0f:0c:d8:37:18:6c:af:bb:26:1f:ad:1e:50:8c:
02:ca:c7:cd:5a:4e:01:70:c0:f1:39:7c:5c:12:d5:
bb:d0:cc:e5:b3:96:9b:01:2b:d5:7c:46:0d:11:2c:
56:8b:84:d1:54:53:b2:49:96:68:6b:88:ea:6f:b4:
1f:13:a8:d8:b9:69:79:21:a7:1e:d1:e3:26:58:7d:
b1:a0:40:04:41:cc:b9:e3:c3:00:06:8b:a5:43:98:
72:22:27:71:e7:a3:d5:e0:cb:91:c8:ae:89:3c:43:
bd:5e:73:fa:6d:c1:a0:a1:60:ed:fe:aa:f3:bb:34:
d3:b9:b7:eb:e7:0f:53:33:c0:5d:44:ae:7d:7e:ba:
2e:f3:59:1b:e6:6d:02:3c:93:50:43:cb:8a:fe:bd:
2d:ea:23:ae:3a:18:c3:0c:1a:22:28:19:f3:c2:ed:
13:6c:ea:29:02:17:a9:74:53:03:68:b6:65:49:58:
bf:57:eb:f8:b6:63:36:0b:9c:2a:91:86:54:00:99:
f6:9b:9a:ed:bb:45:31:fe:9c:aa:db:74:e7:2b:32:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:11:06:FA:24:87:90:22:52:48:08:BD:78:0C:E9:F3:D3:00:DE:B4
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:75:ec:aa:2c:f7:7c:a6:c1:40:81:a4:0b:65:ce:a5:47:
56:b6:1f:19:da:c8:b5:58:51:f2:90:cf:4e:41:55:dc:bb:9a:
80:8e:ab:80:14:21:f0:c5:d2:0d:05:c0:58:40:dc:aa:2e:d9:
13:b4:35:f1:91:3b:3d:7c:17:4e:f8:72:03:47:79:ae:c5:08:
af:ef:09:6d:92:d4:cd:1d:25:dd:63:98:ac:f5:8a:f8:c7:65:
69:89:be:e5:27:8f:86:d9:f9:4b:37:85:d5:5c:30:5a:1a:d0:
68:72:73:79:6d:f9:12:b0:81:b7:f4:7d:bb:2e:1f:4e:99:99:
8e:a9:1b:cb:0a:07:68:74:0c:d2:7f:f6:74:b5:aa:ec:04:35:
77:66:3f:3f:8b:70:b4:52:1a:70:fb:93:19:69:54:16:fd:a9:
f3:f3:46:e1:69:a2:7f:4a:c9:95:64:d4:87:cd:73:cc:5a:80:
fb:64:21:4a:da:0c:19:6a:2a:2c:26:8d:33:b2:76:c1:ea:8a:
af:6f:d2:05:6c:c5:50:ef:e6:d5:1a:2a:ae:2c:eb:f8:8b:39:
79:bf:97:76:38:52:a2:0d:b9:e7:bc:c6:ed:97:b0:d2:16:2c:
63:2a:36:fb:f5:52:ba:e0:76:de:e3:6e:f8:96:e9:db:dc:0f:
07:ce:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:12 2026 by rpki-client