Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: ZHisyF0izE0DbrZSWhuZp3SZlkIUCgU5aWPZalIOOfQ=
Subject key identifier: 70:AC:73:CE:8B:34:27:F9:52:A2:50:2C:97:77:C9:C7:54:E3:E1:33
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019FA74FEB1D84597785492386872FCC149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 04BC
Signing time: Tue 28 Jul 2026 06:01:00 +0000
Manifest this update: Tue 28 Jul 2026 06:01:00 +0000
Manifest next update: Wed 29 Jul 2026 06:01:00 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: rgMPYRrUKEjV2xylF/RaH66uDUMIG7Nf9yEOCF38QvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:eb:1d:84:59:77:85:49:23:86:87:2f:cc:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jul 28 06:01:00 2026 GMT
Not After : Jul 29 06:01:00 2026 GMT
Subject: CN=70ac73ce8b3427f952a2502c9777c9c754e3e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:fc:b8:5e:a1:23:2b:1d:79:9a:5b:b4:87:
47:1a:ca:7a:95:3c:1c:78:2d:f7:d2:d5:e3:8b:7a:
dc:d6:22:90:22:8f:1f:9a:1a:04:cd:36:ca:4f:fe:
4d:fc:6e:71:9f:78:58:af:b2:51:47:d6:0e:55:85:
97:e6:c6:eb:48:71:f5:6a:f2:e8:a6:03:a2:e5:b4:
37:50:59:78:98:18:8f:95:99:1b:f5:81:6e:19:9b:
fd:87:ff:d9:24:20:25:2d:bb:23:5b:68:e4:65:ca:
85:22:3e:9d:eb:97:5b:1d:1a:ed:59:8c:bc:02:d5:
3c:b7:64:13:0f:55:e1:33:88:d5:56:02:5f:c4:89:
40:8c:9d:49:a3:36:c1:65:c1:59:ab:b9:98:dd:03:
7e:5c:1a:8c:7e:f8:e8:1c:35:62:8d:fa:58:64:2e:
85:c8:c4:64:8d:2f:9c:ee:73:76:1f:7e:4c:90:39:
33:1a:43:06:56:84:82:dc:90:d0:e7:05:4f:43:09:
ff:71:97:82:9b:c2:08:7c:67:38:74:fe:01:98:8f:
a9:dc:64:9a:1f:f2:38:8d:5c:66:03:e7:50:81:b6:
55:a4:b7:40:bc:5f:6c:14:ea:6f:13:1b:cc:9d:0e:
05:b1:c3:ae:32:23:bc:b9:a9:22:63:ea:7c:45:d2:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:73:CE:8B:34:27:F9:52:A2:50:2C:97:77:C9:C7:54:E3:E1:33
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:91:ce:02:7a:52:a8:81:51:b3:d4:57:60:44:63:17:47:
c4:1c:68:e0:73:53:c4:de:3c:1e:3c:c5:a7:0a:40:6f:d1:47:
c4:83:89:3b:8d:83:b8:01:46:37:5f:d8:65:dc:1f:21:b2:f4:
a6:6c:e8:0f:15:9b:99:97:2e:6a:94:10:96:b5:4e:2e:e8:a4:
4e:d1:5d:91:5f:0f:ff:53:f6:81:05:27:64:c2:70:c6:a4:59:
2a:d2:96:95:7f:24:34:9b:c2:79:47:d2:be:cc:4e:7f:eb:57:
b9:15:9c:f0:01:2d:54:9d:a1:89:00:ca:b8:55:8a:00:48:4e:
26:41:05:6e:1f:58:22:82:e1:fa:47:0d:d7:8a:64:b3:33:39:
d9:48:f0:6c:c3:7b:5e:5d:60:b5:0f:2f:0c:30:49:43:19:b5:
95:27:4c:d8:76:ae:94:91:99:4e:9a:d4:8b:91:17:6a:de:7e:
9e:58:69:c1:16:56:29:0a:c3:8a:e7:12:08:7a:fb:89:85:c9:
f7:cb:fe:2b:a5:e1:c4:59:be:31:2d:88:26:6f:de:8e:cd:b6:
d1:ec:47:ca:7e:5b:47:79:20:fc:3f:ed:2d:b7:cc:b7:73:2b:
f4:7d:f4:b3:7c:96:f1:a4:46:d9:a5:ed:73:2d:1c:e2:ac:80:
5a:9a:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:54 2026 by rpki-client