Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: kI5pVBgFMxjSCwkf/0GAEkjhb+tMxs9+nDGfbYI/7Y0=
Subject key identifier: 76:74:36:FD:9C:EC:F1:1E:3C:02:AA:77:EB:AA:67:0D:9E:5A:97:C4
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019FAE6428B57619DE614A2D2C18B2FFF9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 09F4
Signing time: Wed 29 Jul 2026 15:00:27 +0000
Manifest this update: Wed 29 Jul 2026 15:00:27 +0000
Manifest next update: Thu 30 Jul 2026 15:00:27 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: M0RZ1FA8ky5vxW1ZfQa+u7Nh5rUoS90Pl2XzqiirXto=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:28:b5:76:19:de:61:4a:2d:2c:18:b2:ff:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jul 29 15:00:27 2026 GMT
Not After : Jul 30 15:00:27 2026 GMT
Subject: CN=767436fd9cecf11e3c02aa77ebaa670d9e5a97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:d0:01:74:58:f2:34:ca:c8:f4:b7:1d:9e:
fb:d8:6b:b4:7d:66:d0:c1:a8:0f:1b:b1:40:8f:55:
e4:81:70:08:64:dc:93:52:11:44:f1:51:43:b2:7c:
28:c9:d1:e3:1a:40:e3:54:8c:c0:11:67:ef:d8:fd:
f8:42:07:3e:38:fd:01:4a:70:a2:33:8a:42:8a:30:
60:83:a8:6a:2c:98:f3:92:b3:a0:a1:db:05:dc:33:
3e:58:d3:19:ed:db:a0:6e:11:bd:2e:77:5a:b8:29:
37:f8:de:52:59:85:08:e7:58:77:38:96:36:d9:9b:
a5:92:75:1e:2f:c6:b0:f3:ce:b0:77:dc:c5:df:e6:
97:60:6c:34:de:38:26:a7:61:79:ef:ee:1f:b9:22:
49:fe:23:6e:5d:1e:80:08:6a:e4:8f:bf:bd:54:84:
96:5c:11:f0:1f:42:4c:1c:e7:f8:42:f1:6d:6b:cb:
43:7f:43:33:cf:cb:eb:fa:3f:5a:bc:de:e3:37:ad:
d8:d4:96:32:18:7e:80:aa:9f:cc:a3:29:b8:f5:54:
57:51:9e:ef:b0:85:c4:6d:b3:4c:69:2b:dd:45:77:
f5:19:07:65:e8:ff:e7:df:91:4a:44:04:54:87:55:
47:4c:35:0f:a4:4f:83:53:26:ca:e0:4b:37:a3:8d:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:74:36:FD:9C:EC:F1:1E:3C:02:AA:77:EB:AA:67:0D:9E:5A:97:C4
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:f5:23:7b:48:cd:51:e0:7f:1c:65:dd:fe:89:77:80:ff:
80:78:06:b3:11:bb:09:9b:5f:13:b4:3a:c2:d0:0b:96:7b:40:
44:7d:e0:65:13:d4:68:ea:31:8d:f7:a0:9e:e4:f9:c5:9c:bd:
ed:26:e4:80:a1:13:98:80:3a:ee:2c:e3:f1:8e:f8:31:d2:1b:
18:81:23:49:6e:04:c7:42:97:51:42:a8:76:19:b4:4e:51:a6:
58:c2:96:c0:4f:02:ad:b0:66:53:51:ce:0c:30:6b:20:b4:7c:
10:5a:e9:0a:61:97:e5:ba:3d:08:5b:0f:24:0b:97:ed:c8:9d:
a7:92:37:2b:d2:1f:d0:3f:e7:ba:bd:a1:d7:34:e9:d9:e8:52:
3a:05:ee:ce:ab:a4:2b:e9:ad:bc:be:96:17:de:17:a9:fb:5f:
1d:79:50:a4:50:8a:d6:fe:8e:f7:8e:f1:9e:8e:6a:27:64:83:
14:d3:4f:24:99:b3:15:f9:6b:5f:ec:6b:b5:f1:be:1f:f1:64:
ad:28:33:b1:da:dc:78:e6:ab:af:41:5a:f6:fa:34:22:b0:35:
f3:0e:4d:fc:e6:48:aa:96:ed:12:62:28:e9:02:45:2c:a7:26:
61:63:fe:ee:59:79:b1:d3:22:1c:79:aa:c7:ff:cc:e4:d1:40:
88:9c:b7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:58:01 2026 by rpki-client