Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: rtyfGLOnQ6ToXTlYsCEmWGCWAZKxRnJhT4q0v2SXGZI=
Subject key identifier: F8:C2:8E:B0:93:8A:A4:EE:59:B6:F0:A7:87:DC:13:E3:60:EA:71:E8
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01A0BF5584954ED1A9AA9857533E439E1E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 054D
Signing time: Sun 20 Sep 2026 15:00:47 +0000
Manifest this update: Sun 20 Sep 2026 15:00:47 +0000
Manifest next update: Mon 21 Sep 2026 15:00:47 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: VYr+0g4JzEEdLCFeY62Gh7lr/lPa+zUsZaAfnK18FSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:84:95:4e:d1:a9:aa:98:57:53:3e:43:9e:1e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Sep 20 15:00:47 2026 GMT
Not After : Sep 21 15:00:47 2026 GMT
Subject: CN=f8c28eb0938aa4ee59b6f0a787dc13e360ea71e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:52:f4:51:94:7d:6b:97:d4:5c:59:ae:13:
3a:a0:bf:7f:14:d8:fa:80:80:b7:a2:13:dd:f1:d9:
5b:ca:04:a8:77:dc:a6:db:2e:55:c6:e3:05:75:e8:
71:fd:03:5c:70:1e:7e:c3:ce:ad:ed:92:7a:f2:3e:
32:ef:6d:2d:47:26:84:9a:4d:b1:f6:9f:46:e9:c5:
44:f2:af:34:ab:91:5b:9d:2a:b0:37:ed:2d:05:3f:
7a:6d:1f:1c:fa:0c:dc:70:1b:db:76:ba:6a:3b:10:
82:34:15:22:21:1e:8b:a9:c4:ca:dd:9a:7c:44:30:
8c:15:9c:b3:3b:b4:0e:9e:ea:c6:72:35:fb:1a:b2:
52:62:85:19:11:04:5d:86:eb:c2:0a:a2:7f:3b:1f:
db:04:5a:40:b9:79:ff:fe:28:f2:48:6a:5e:bc:9f:
f3:90:6f:8f:51:82:4e:81:4a:0f:17:20:7e:c9:1e:
51:51:22:e3:53:19:66:33:1e:f1:1f:09:5b:93:76:
13:14:84:93:3c:17:5f:fc:42:dc:b0:c8:d1:8b:f8:
91:f6:71:7f:89:0d:54:29:87:53:26:61:d9:69:74:
16:9b:d3:2c:ba:48:c1:2d:a6:fa:21:14:38:6f:ce:
90:5b:7f:10:cf:0e:d9:03:96:c0:02:64:36:a8:39:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:8E:B0:93:8A:A4:EE:59:B6:F0:A7:87:DC:13:E3:60:EA:71:E8
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:b5:15:61:2f:98:52:50:53:a3:d9:39:5e:7f:95:d1:24:
c1:8b:e3:70:3d:cc:6b:1f:ab:6b:fb:d3:53:42:eb:e3:45:72:
c4:4e:9d:f7:46:05:5f:82:c5:59:a9:5d:90:3c:f3:ad:f9:f1:
15:c2:47:b2:99:4e:ce:c3:e0:1a:8f:ba:3f:3d:d8:50:c5:3f:
9c:e1:9e:e6:54:18:80:48:85:d1:5f:40:dc:23:e7:49:4b:86:
d8:88:01:5a:01:69:03:33:d8:86:b0:dd:f0:d8:59:76:65:ea:
f2:b2:9a:8e:9e:17:1c:a2:eb:96:d0:8c:59:b9:be:2f:e8:71:
c0:32:cd:69:88:00:a9:a5:5d:77:97:c2:6a:2b:ed:d9:b8:14:
23:c9:18:04:3b:35:06:22:58:65:81:76:73:1a:3d:17:6b:32:
e8:61:d2:31:82:ce:32:df:d7:b5:4a:f9:63:d8:95:ff:98:a6:
1d:2c:0a:31:c5:b0:9e:7a:1c:1d:6a:4a:9a:a2:52:99:0d:dd:
4e:ce:e0:d8:09:c1:ad:cd:03:4b:42:31:5d:f4:eb:e5:fe:a2:
36:0c:5f:fd:08:10:19:93:cd:03:9a:8c:fb:9f:7d:03:ec:24:
98:23:9e:12:61:65:4a:e5:4d:b6:a4:bd:1a:d8:31:db:89:06:
26:2a:23:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/VYSVTtGpqphXUz5Dnh5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl
OTI3NGIwHhcNMjYwOTIwMTUwMDQ3WhcNMjYwOTIxMTUwMDQ3WjAzMTEwLwYDVQQD
EyhmOGMyOGViMDkzOGFhNGVlNTliNmYwYTc4N2RjMTNlMzYwZWE3MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oJS9FGUfWuX1FxZrhM6oL9/FNj6
gIC3ohPd8dlbygSod9ym2y5VxuMFdehx/QNccB5+w86t7ZJ68j4y720tRyaEmk2x
9p9G6cVE8q80q5FbnSqwN+0tBT96bR8c+gzccBvbdrpqOxCCNBUiIR6LqcTK3Zp8
RDCMFZyzO7QOnurGcjX7GrJSYoUZEQRdhuvCCqJ/Ox/bBFpAuXn//ijySGpevJ/z
kG+PUYJOgUoPFyB+yR5RUSLjUxlmMx7xHwlbk3YTFISTPBdf/ELcsMjRi/iR9nF/
iQ1UKYdTJmHZaXQWm9MsukjBLab6IRQ4b86QW38Qzw7ZA5bAAmQ2qDnjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjCjrCTiqTuWbbwp4fcE+Ng6nHoMB8GA1UdIwQY
MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt
MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3
LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWC1FWEv
mFJQU6PZOV5/ldEkwYvjcD3Max+ra/vTU0Lr40VyxE6d90YFX4LFWaldkDzzrfnx
FcJHsplOzsPgGo+6Pz3YUMU/nOGe5lQYgEiF0V9A3CPnSUuG2IgBWgFpAzPYhrDd
8NhZdmXq8rKajp4XHKLrltCMWbm+L+hxwDLNaYgAqaVdd5fCaivt2bgUI8kYBDs1
BiJYZYF2cxo9F2sy6GHSMYLOMt/XtUr5Y9iV/5imHSwKMcWwnnocHWpKmqJSmQ3d
Ts7g2AnBrc0DS0IxXfTr5f6iNgxf/QgQGZPNA5qM+599A+wkmCOeEmFlSuVNtqS9
Gtgx24kGJiojYA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:10:28 2026 by rpki-client