Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: ndkpMUdoBn/uBdRUjBFB5q2WK6McJy1cbTxDgZJuXWc=
Subject key identifier: 68:FC:2B:DF:F4:4F:50:18:98:EA:2F:BA:48:54:F3:D8:34:12:97:03
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019EBE10E8E548FD04A707A28984451BB90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 0443
Signing time: Fri 12 Jun 2026 23:00:39 +0000
Manifest this update: Fri 12 Jun 2026 23:00:39 +0000
Manifest next update: Sat 13 Jun 2026 23:00:39 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: pP6jTzCOKoB24e8i0V2gJCJa1OcxrggHxuUDNNhlBDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:e8:e5:48:fd:04:a7:07:a2:89:84:45:1b:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jun 12 23:00:39 2026 GMT
Not After : Jun 13 23:00:39 2026 GMT
Subject: CN=68fc2bdff44f501898ea2fba4854f3d834129703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:15:ba:9d:59:4e:7f:31:64:31:a6:e8:fe:
54:15:4d:84:da:19:b7:2e:e5:73:b1:00:dc:b4:36:
c8:81:b5:27:1f:4c:5d:89:27:6e:c3:43:4e:e0:ef:
fc:3b:91:94:06:60:99:a9:c3:f2:6c:72:d2:66:b0:
8c:03:83:28:ef:0a:36:1b:52:47:9e:16:67:27:0a:
28:50:89:d1:3e:63:8c:33:d6:60:3b:49:3a:8f:a5:
aa:ea:54:32:46:ed:d3:29:16:8d:95:a6:45:f9:73:
ff:58:21:b1:b1:5c:dd:03:7e:48:06:8b:f3:54:3d:
09:e8:df:89:d1:df:48:6b:4b:f3:55:d9:cb:c2:da:
28:43:c9:67:4c:3a:b9:c6:ff:5a:75:ca:91:4f:12:
87:3f:be:23:f2:d0:6c:10:eb:c2:02:6d:98:81:dd:
60:de:5b:cc:44:47:b8:99:ba:c8:d9:25:1c:33:d9:
e3:b3:4e:4f:c6:ec:a2:84:60:68:a5:9f:79:e7:80:
f5:d2:f5:d6:09:18:65:24:c9:b4:d0:f5:ff:93:0e:
91:e0:66:48:a2:67:01:73:c9:3b:d7:17:6f:a5:26:
91:75:ab:71:bd:26:9e:0c:79:e3:0c:e0:6a:ff:d0:
ef:c1:ef:5a:8d:4d:d3:d5:1d:20:be:89:bc:7b:42:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:2B:DF:F4:4F:50:18:98:EA:2F:BA:48:54:F3:D8:34:12:97:03
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:25:3f:e1:3f:e3:ad:ad:29:8d:72:f3:fb:39:d0:39:62:dc:
7a:f7:1d:31:4a:d0:ee:91:4a:4f:40:5e:3f:90:ad:c0:af:5e:
bc:2e:b7:ff:0a:ea:00:05:04:40:0f:56:ca:53:47:d0:a2:3a:
e1:de:26:e6:d7:7a:15:5a:40:19:c8:33:06:bb:2a:8b:0d:3d:
1b:b8:83:01:ef:f2:6c:09:7e:ff:b8:d6:35:15:1c:f6:30:e5:
7f:6d:05:da:88:3b:a1:7e:98:a9:33:92:19:e9:b3:d3:24:84:
ef:00:f4:ed:c5:dc:93:1c:a4:f6:38:55:35:b6:76:35:c0:ac:
d6:d5:46:04:56:7c:62:b1:f6:c4:41:a2:9f:b1:2f:52:76:d2:
db:09:ca:72:62:f6:5d:b9:98:f9:c7:92:cb:2f:1b:98:44:30:
e8:28:25:c5:e4:8c:b3:d3:4c:ad:3d:fd:e7:53:2f:7a:5a:c9:
79:97:a3:d3:94:b3:c7:33:df:f9:3f:22:db:3e:39:46:dc:0b:
a4:31:f5:6a:86:07:25:c0:1a:6e:15:63:08:2a:10:ed:08:2f:
88:34:af:21:55:81:6f:5f:2e:c2:98:01:14:99:4e:22:c0:6e:
3b:de:60:bb:de:50:a1:4e:a2:88:55:7f:95:cc:b3:e5:5b:62:
b8:a1:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:22 2026 by rpki-client