Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: T4KCLQ6g+jMEek5d2S8W2xcb2BzK4SWka6dNrWhlVm8=
Subject key identifier: 5B:4F:0E:17:6C:39:FC:9A:D2:03:40:24:2B:86:12:05:93:62:41:AB
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019CABD92586200D49DB9876673C3D02278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0C75
Signing time: Mon 02 Mar 2026 00:01:00 +0000
Manifest this update: Mon 02 Mar 2026 00:01:00 +0000
Manifest next update: Tue 03 Mar 2026 00:01:00 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: xU/pK5KfCNiEPSsnDaZQl3ZdXVA0O9jx6MKvlfoCiUE=)
2: X2dDxuQy5C2iRkWsBYanoWzzFBA.roa (hash: BH0EGwq9/zGZL3BbgmxWs2ULLI0cGkQKECrJ00Vi4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:25:86:20:0d:49:db:98:76:67:3c:3d:02:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Mar 2 00:01:00 2026 GMT
Not After : Mar 3 00:01:00 2026 GMT
Subject: CN=5b4f0e176c39fc9ad20340242b861205936241ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:63:1e:96:56:4d:c0:7e:8e:6e:5c:6c:9d:
48:f9:f6:ee:58:6a:04:7f:f6:d1:6f:5b:a9:16:26:
cc:c7:c8:1b:04:8e:d2:53:cb:66:f3:c2:d7:49:77:
a3:12:08:68:65:d6:1f:dd:94:92:a3:b2:91:57:b6:
2c:b3:d0:95:03:85:9c:ab:4a:18:f8:cd:1c:e7:de:
d1:b2:4b:67:25:35:7a:59:40:c7:ee:23:0a:b9:38:
7e:b0:2a:77:9e:cb:47:a3:37:9f:e7:aa:1a:58:7a:
ba:01:68:e9:a2:f9:1b:94:05:3c:df:cd:4e:ef:fd:
ab:9a:63:95:4e:10:4e:e4:fb:ee:46:3c:38:95:ea:
99:bb:36:56:e1:ee:97:ff:ee:bc:10:72:07:cd:3a:
0a:9e:2f:f3:1a:4f:a7:7f:8e:4c:b5:0f:3f:99:42:
81:3b:f2:b1:bc:c1:a4:f0:57:c7:b9:9b:b2:26:df:
b6:80:d9:2b:3d:12:da:e1:16:35:db:3c:d3:17:de:
64:ae:93:40:c1:88:ef:f1:3e:18:e6:94:c0:09:5f:
78:fb:5f:46:7c:29:25:b8:24:5a:17:43:34:a5:ba:
23:f8:be:c8:c1:e8:73:a5:98:5a:32:7f:6f:b4:56:
df:33:d9:cb:f1:65:12:d1:03:62:42:40:b3:af:11:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:0E:17:6C:39:FC:9A:D2:03:40:24:2B:86:12:05:93:62:41:AB
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:2e:36:fc:2a:c5:9f:38:3e:d5:f9:f2:d2:a1:ff:50:77:
ff:fa:62:f9:1f:37:c0:f0:01:52:a2:4a:1b:44:58:ad:20:cd:
05:27:8e:5d:69:1d:68:07:10:24:45:e7:73:c6:de:33:d0:60:
d3:5e:f7:d2:01:22:52:cd:6f:d7:84:2a:2d:80:5e:3e:1b:1d:
c9:81:3a:32:0b:ff:90:76:15:a0:d1:ac:ab:a9:29:e1:66:81:
44:a1:25:52:b9:aa:36:2a:69:16:a0:0b:2f:34:f2:61:55:a3:
7e:9a:e4:0f:aa:23:79:85:ce:5a:a6:d3:66:f3:1c:ae:0d:09:
f7:6a:bf:ac:04:21:29:33:22:95:19:40:19:94:8b:54:c0:72:
ee:cd:57:82:88:63:64:9c:16:d5:46:95:52:4e:1e:8a:b1:1d:
61:b5:d8:6c:6a:3d:1b:ef:5c:54:aa:38:88:97:1d:e8:fb:e9:
bc:64:93:57:61:67:5f:8e:13:92:56:2b:3c:71:88:45:5b:e0:
ba:a5:97:59:a6:3f:b9:05:ab:af:dc:af:b8:72:fa:03:f6:1c:
bc:88:28:29:15:04:6f:b9:65:3b:57:38:45:3b:4c:15:bd:e9:
ee:da:4d:a6:50:b5:0c:04:d7:11:6d:6a:1b:ff:10:24:0a:19:
d4:27:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:36 2026 by rpki-client