Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: rAxq6CYy2VWVpxA95B3BsICd9O9C4+FfNccmSoM/jyY=
Subject key identifier: 2C:F9:F1:55:7B:6C:5C:C7:41:6C:84:C9:74:87:5D:43:26:C6:08:E5
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019EC4B7DD3F543A8DFB7771E55456479309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 097B
Signing time: Sun 14 Jun 2026 06:00:44 +0000
Manifest this update: Sun 14 Jun 2026 06:00:44 +0000
Manifest next update: Mon 15 Jun 2026 06:00:44 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: C6SPdZJZPLdiujpQnb1nDyt4dWNYcXt3GJQrV+V4b/A=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:b7:dd:3f:54:3a:8d:fb:77:71:e5:54:56:47:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jun 14 06:00:44 2026 GMT
Not After : Jun 15 06:00:44 2026 GMT
Subject: CN=2cf9f1557b6c5cc7416c84c974875d4326c608e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:70:9f:cd:44:ef:03:27:b7:c5:cf:6c:ac:bd:
dd:48:b9:b0:e1:03:a0:06:b2:13:6f:10:8c:79:ce:
8b:87:f5:7c:67:09:a9:40:91:05:c1:cd:f2:58:c9:
50:bf:59:a6:92:3a:63:a1:62:d1:da:9c:a1:d3:10:
62:67:77:61:63:ac:31:8c:3c:81:fc:2f:34:94:b7:
1d:d5:08:02:4b:8f:9e:42:98:3e:60:db:d6:f8:b0:
ca:5a:86:40:e3:38:55:da:b9:8e:c3:d2:c0:4e:e3:
c2:31:d0:e2:cf:d8:7d:45:a4:39:3a:4e:6d:1e:bc:
86:00:d5:8f:86:fb:31:2e:01:76:62:8b:34:7d:d1:
cc:67:4b:90:76:d9:f0:ca:f2:76:2f:01:3b:ff:0f:
35:87:78:ce:15:6c:e2:28:0d:ee:bc:4f:fa:f3:09:
84:9d:20:5d:14:4e:e5:d0:4f:02:ff:e0:44:31:02:
17:34:c0:bb:bb:9f:89:c8:86:da:57:e7:2d:9d:31:
63:fc:05:ae:71:3a:28:26:5a:7e:31:4a:4a:65:b6:
e2:cb:4c:a3:4e:f1:96:24:3b:82:77:4b:65:9e:0e:
28:ec:15:26:a9:39:ea:8c:34:71:6f:e2:49:77:bf:
bf:29:9b:03:ae:52:08:e2:f6:8d:d4:26:f4:50:50:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:F1:55:7B:6C:5C:C7:41:6C:84:C9:74:87:5D:43:26:C6:08:E5
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3b:6c:19:04:4b:ba:2f:c0:44:96:2a:fd:eb:d4:ba:3f:22:
d7:a6:2c:3e:b6:1b:82:e9:56:62:99:a0:bb:3b:22:70:8e:48:
48:e0:46:02:16:4a:80:d8:8a:45:87:32:e1:b9:13:d9:fe:06:
e9:23:2f:c0:d5:15:bf:80:a0:3d:dd:0e:f8:a6:16:04:97:66:
6e:a3:cf:a5:a2:17:05:06:c3:7a:7a:49:e5:92:16:90:65:ba:
fe:b9:03:77:ce:da:e2:9c:36:e4:ac:ba:01:74:f0:e3:74:35:
d5:dd:65:5e:0d:5a:5d:fa:20:9a:67:f3:48:6b:c9:d6:5f:6f:
74:b5:a5:52:ca:11:1f:d0:69:9f:52:09:2d:42:7c:9d:76:04:
fb:1f:2d:cc:c6:51:f6:81:00:7d:5d:09:63:eb:e6:04:5e:7a:
9d:79:7b:32:05:ff:96:61:79:86:21:eb:88:0e:4f:fb:d0:52:
1d:a8:ab:1c:fa:44:db:a2:dc:1d:04:ef:16:98:55:d5:24:81:
8e:7c:8e:8a:7d:b5:c5:39:21:58:36:85:47:00:85:3c:b8:15:
e1:66:42:2e:28:43:25:0a:f1:06:ed:2b:27:d8:14:09:d5:a9:
32:55:2b:6e:35:f3:40:a2:70:68:4c:37:97:0c:3e:6e:cc:51:
3b:09:2b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Et90/VDqN+3dx5VRWR5MJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5
NDhhMDUwHhcNMjYwNjE0MDYwMDQ0WhcNMjYwNjE1MDYwMDQ0WjAzMTEwLwYDVQQD
EygyY2Y5ZjE1NTdiNmM1Y2M3NDE2Yzg0Yzk3NDg3NWQ0MzI2YzYwOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43CfzUTvAye3xc9srL3dSLmw4QOg
BrITbxCMec6Lh/V8ZwmpQJEFwc3yWMlQv1mmkjpjoWLR2pyh0xBiZ3dhY6wxjDyB
/C80lLcd1QgCS4+eQpg+YNvW+LDKWoZA4zhV2rmOw9LATuPCMdDiz9h9RaQ5Ok5t
HryGANWPhvsxLgF2Yos0fdHMZ0uQdtnwyvJ2LwE7/w81h3jOFWziKA3uvE/68wmE
nSBdFE7l0E8C/+BEMQIXNMC7u5+JyIbaV+ctnTFj/AWucTooJlp+MUpKZbbiy0yj
TvGWJDuCd0tlng4o7BUmqTnqjDRxb+JJd7+/KZsDrlII4vaN1Cb0UFCH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz58VV7bFzHQWyEyXSHXUMmxgjlMB8GA1UdIwQY
MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt
N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj
LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjtsGQRL
ui/ARJYq/evUuj8i16YsPrYbgulWYpmguzsicI5ISOBGAhZKgNiKRYcy4bkT2f4G
6SMvwNUVv4CgPd0O+KYWBJdmbqPPpaIXBQbDenpJ5ZIWkGW6/rkDd87a4pw25Ky6
AXTw43Q11d1lXg1aXfogmmfzSGvJ1l9vdLWlUsoRH9Bpn1IJLUJ8nXYE+x8tzMZR
9oEAfV0JY+vmBF56nXl7MgX/lmF5hiHriA5P+9BSHairHPpE26LcHQTvFphV1SSB
jnyOin21xTkhWDaFRwCFPLgV4WZCLihDJQrxBu0rJ9gUCdWpMlUrbjXzQKJwaEw3
lww+bsxROwkrkw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 10:48:16 2026 by rpki-client