Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: DNQaaQvp4Q72N4SZuTZ1O+7z/0roeOCTEn94KWwbV8I=
Subject key identifier: 93:95:87:46:F4:FD:9D:21:90:94:A5:80:37:41:F8:E5:F1:D9:FF:DB
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019D9B50F4DD0F658B378F756CE6E43347D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0CF1
Signing time: Fri 17 Apr 2026 12:01:07 +0000
Manifest this update: Fri 17 Apr 2026 12:01:07 +0000
Manifest next update: Sat 18 Apr 2026 12:01:07 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: yP7g4Rhz+2HOV48t33HmAuUI9HQpxqAMPWzedmlRpk4=)
2: X2dDxuQy5C2iRkWsBYanoWzzFBA.roa (hash: BH0EGwq9/zGZL3BbgmxWs2ULLI0cGkQKECrJ00Vi4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f4:dd:0f:65:8b:37:8f:75:6c:e6:e4:33:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Apr 17 12:01:07 2026 GMT
Not After : Apr 18 12:01:07 2026 GMT
Subject: CN=93958746f4fd9d219094a5803741f8e5f1d9ffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:8e:9c:f1:0b:99:e4:29:32:3d:ad:cf:50:
45:0c:4a:66:3b:d8:67:1b:94:b2:65:d5:d2:fe:10:
ec:19:1d:46:55:6c:2e:61:80:74:61:50:60:a2:ce:
7f:6d:6e:9b:63:07:fa:b1:54:e4:ed:2b:0d:a1:0b:
d6:cd:ef:dc:ac:2d:60:00:07:fb:3d:3a:5a:63:d0:
58:28:35:2b:0c:0e:70:a6:0c:1b:ed:16:50:fc:9a:
61:e3:2e:d5:30:03:49:73:3e:91:30:c2:2e:af:0e:
5c:3d:0a:6e:c9:bd:67:0d:16:36:67:10:bb:c6:1d:
5b:9a:7f:5d:2f:4e:a1:75:46:30:64:cc:8f:0b:a0:
07:f0:0e:4d:db:21:d3:9c:c6:00:9a:90:0a:0f:7b:
24:34:ef:5b:3e:01:05:39:0f:3e:36:fd:8c:b5:ef:
20:c8:5f:4a:06:df:fd:bd:96:3a:04:4a:c4:21:78:
36:c9:ca:2f:de:df:a5:15:d6:0d:53:de:15:2a:58:
f3:62:84:79:b3:00:e5:a6:26:c9:f3:d6:be:2f:b8:
ad:65:43:37:77:47:9c:41:42:63:35:0f:5d:ae:ca:
d0:af:a1:3c:e5:15:3e:16:f7:ea:cc:7d:3f:73:5d:
4b:b1:90:2c:3b:50:2f:ad:84:b9:a8:31:c5:f3:da:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:87:46:F4:FD:9D:21:90:94:A5:80:37:41:F8:E5:F1:D9:FF:DB
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:3e:16:81:c6:d8:49:bc:8d:f5:95:02:c2:1c:03:b8:98:
b7:5d:ae:48:32:35:29:80:0d:64:92:26:f2:8d:6d:8d:8e:fb:
db:e4:1f:0f:a5:26:a4:0b:63:c0:63:a6:33:2a:5c:7f:d8:43:
78:e9:71:ea:ea:ce:5d:8c:e6:99:b3:7b:91:76:f8:37:a4:17:
af:b8:61:d8:2b:9b:6f:c6:ef:27:4b:b0:12:05:5a:1d:a9:57:
7c:c8:3c:ef:94:74:04:f1:e2:87:45:81:86:5c:ba:d8:d5:8b:
dd:14:93:b4:bb:07:2e:ae:e5:a8:70:0c:4b:fa:0f:3d:f6:47:
75:85:be:7b:72:e0:6e:ec:ec:60:f7:18:1d:ce:29:95:e2:24:
da:77:45:44:63:42:69:c9:a7:a6:67:15:79:f9:40:2c:0a:21:
a1:11:d7:7c:06:78:a0:90:f3:d6:f8:4a:20:64:67:32:2e:3a:
74:30:24:a9:e8:4c:26:d5:b7:85:6c:c2:e1:84:4c:ad:5a:76:
6a:b6:a0:c6:40:a6:4c:51:6c:9a:79:1f:6f:12:95:db:f5:77:
43:09:9c:a4:74:7c:a0:0d:13:28:72:ee:97:bc:02:3b:f1:4e:
b6:bc:3c:a6:71:de:b1:41:8a:cc:ca:05:03:8e:b3:ae:5f:db:
24:29:d3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUPTdD2WLN491bObkM0fTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy
MDc4YjYwHhcNMjYwNDE3MTIwMTA3WhcNMjYwNDE4MTIwMTA3WjAzMTEwLwYDVQQD
Eyg5Mzk1ODc0NmY0ZmQ5ZDIxOTA5NGE1ODAzNzQxZjhlNWYxZDlmZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqOOnPELmeQpMj2tz1BFDEpmO9hn
G5SyZdXS/hDsGR1GVWwuYYB0YVBgos5/bW6bYwf6sVTk7SsNoQvWze/crC1gAAf7
PTpaY9BYKDUrDA5wpgwb7RZQ/Jph4y7VMANJcz6RMMIurw5cPQpuyb1nDRY2ZxC7
xh1bmn9dL06hdUYwZMyPC6AH8A5N2yHTnMYAmpAKD3skNO9bPgEFOQ8+Nv2Mte8g
yF9KBt/9vZY6BErEIXg2ycov3t+lFdYNU94VKljzYoR5swDlpibJ89a+L7itZUM3
d0ecQUJjNQ9drsrQr6E85RU+FvfqzH0/c11LsZAsO1AvrYS5qDHF89rx+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOVh0b0/Z0hkJSlgDdB+OXx2f/bMB8GA1UdIwQY
MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt
YmM0OTNkNWNiYjVjLzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj
LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllo+FoHG
2Em8jfWVAsIcA7iYt12uSDI1KYANZJIm8o1tjY772+QfD6UmpAtjwGOmMypcf9hD
eOlx6urOXYzmmbN7kXb4N6QXr7hh2Cubb8bvJ0uwEgVaHalXfMg875R0BPHih0WB
hly62NWL3RSTtLsHLq7lqHAMS/oPPfZHdYW+e3LgbuzsYPcYHc4pleIk2ndFRGNC
acmnpmcVeflALAohoRHXfAZ4oJDz1vhKIGRnMi46dDAkqehMJtW3hWzC4YRMrVp2
aragxkCmTFFsmnkfbxKV2/V3QwmcpHR8oA0TKHLul7wCO/FOtrw8pnHesUGKzMoF
A46zrl/bJCnTjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:47 2026 by rpki-client