Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: /HZSzh1KLOan95lBtalUU/o3mq7QDthScSRhR0LtZFo=
Subject key identifier: 36:11:2E:0F:70:8F:84:4C:1B:DD:94:E4:F4:44:DF:0A:0F:F1:B4:EB
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01A1005AE197760FC129744077D09CD80A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0AA3
Signing time: Sat 03 Oct 2026 06:01:58 +0000
Manifest this update: Sat 03 Oct 2026 06:01:58 +0000
Manifest next update: Sun 04 Oct 2026 06:01:58 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: JSSUlFosj4NBMBWrpjs/OAG9A7K4+sH6/ZV2cEgeae8=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:e1:97:76:0f:c1:29:74:40:77:d0:9c:d8:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Oct 3 06:01:58 2026 GMT
Not After : Oct 4 06:01:58 2026 GMT
Subject: CN=36112e0f708f844c1bdd94e4f444df0a0ff1b4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:1e:9e:24:0b:7d:29:3f:50:a4:71:4f:49:
29:08:2e:32:ff:b3:0c:14:d1:3a:0c:31:4b:76:29:
c4:e3:6f:9a:b3:6b:bf:22:59:fc:69:57:69:88:ba:
3c:62:1a:9f:34:9b:50:73:97:8d:4e:06:bb:24:9c:
97:02:fd:8c:b7:db:10:c7:24:d6:fe:1b:90:24:1b:
a5:f4:16:06:41:13:a6:d5:fd:63:33:78:72:a0:44:
6d:9d:bf:51:c4:3a:eb:ac:02:57:12:7b:46:84:cf:
5a:9b:d4:c4:0d:56:88:ba:ba:06:64:75:dc:9a:d3:
16:5f:9e:a9:6d:06:79:7e:20:fb:20:94:ff:26:a9:
29:b5:07:0d:7f:0c:26:c7:4b:14:61:22:5b:c6:f9:
46:e3:b6:36:c7:24:e4:82:04:24:25:15:78:18:e8:
d9:07:34:20:16:9e:21:3e:96:77:d7:81:8b:d7:82:
44:65:c6:24:ef:b8:1a:fc:7a:f2:70:b2:2d:0c:e7:
95:4d:14:10:17:85:1e:76:ae:51:80:a4:a0:75:f3:
5a:1e:f3:e4:ac:bd:6e:e1:34:bf:4c:0e:f8:10:41:
d5:80:99:a1:6f:50:bd:8d:64:ac:e8:02:f0:3f:4c:
2d:a9:31:ba:99:65:e1:50:f4:4e:a2:76:5b:e4:65:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:2E:0F:70:8F:84:4C:1B:DD:94:E4:F4:44:DF:0A:0F:F1:B4:EB
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:6d:84:9d:a1:b1:e2:dd:8c:83:ce:2e:9f:f7:a7:15:74:
26:80:c7:c9:d0:59:c0:10:68:65:c8:16:b9:66:0d:a5:8d:01:
ee:ef:f0:ff:7a:ee:02:01:c0:bd:10:71:88:82:bc:64:da:f3:
fd:16:c5:58:95:05:1c:0b:77:c9:e7:ac:57:91:01:e6:c0:bb:
e5:10:cc:b9:91:70:86:43:61:20:f7:d8:b9:93:ff:91:f5:cc:
0a:cd:4c:31:20:fb:b5:72:c9:71:e9:6f:25:6d:87:e6:5f:c1:
ce:33:0d:ef:e0:e2:43:02:88:bf:e3:e7:cd:cc:1a:e9:73:0c:
d8:f3:90:d0:e6:65:1c:8e:f3:b5:b0:9e:b6:e9:db:0e:c5:7a:
51:d5:16:62:66:74:6f:fb:34:df:f8:ce:61:a2:a1:2b:e7:e9:
4c:cc:b7:b5:fa:ad:e5:4e:81:71:78:c5:6d:65:30:0b:1d:1f:
ca:7b:48:2a:07:1a:01:49:56:a7:66:bc:92:5a:22:8c:53:a3:
e6:88:e6:c2:db:82:0e:5b:5c:d0:e3:6f:92:04:23:91:6c:a5:
e8:61:68:d1:2e:be:fa:83:af:bf:ab:b8:80:59:e5:7b:c1:90:
6c:7b:ea:31:9f:1f:8a:fd:cc:7a:25:71:13:96:c6:ba:fa:b1:
45:90:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:33:15 2026 by rpki-client