Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: 6OWlvFywbVxpcCpnwaP+TfRYokuKBZ1Bpn8MKSSFo+g=
Subject key identifier: 98:7E:1F:0B:75:83:57:3D:9A:0A:BF:43:FC:62:C5:E6:1B:62:BA:0B
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019D9B50582F0284A51063D3B896826A3B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 08E1
Signing time: Fri 17 Apr 2026 12:00:27 +0000
Manifest this update: Fri 17 Apr 2026 12:00:27 +0000
Manifest next update: Sat 18 Apr 2026 12:00:27 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: ZzONxiVRvpIOyYX53Gr7eaF80YnAFBbakf91C8Ns4B8=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:58:2f:02:84:a5:10:63:d3:b8:96:82:6a:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Apr 17 12:00:27 2026 GMT
Not After : Apr 18 12:00:27 2026 GMT
Subject: CN=987e1f0b7583573d9a0abf43fc62c5e61b62ba0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:da:07:99:1a:98:8e:62:fe:de:9b:78:ef:e5:
1d:ba:97:68:82:aa:40:b8:3c:da:5d:0e:dc:41:03:
c0:ab:64:99:ea:df:23:f8:ac:42:3e:80:94:47:73:
ca:43:93:2d:ab:17:f7:16:db:9c:0d:67:66:5f:8b:
cd:9f:2a:76:60:69:e4:a0:4c:e5:2b:5b:d8:06:56:
95:4b:db:53:8a:ac:5a:d4:9f:20:55:77:20:ee:f1:
16:a0:ad:20:9d:f0:c6:50:96:d3:52:56:7d:02:1d:
d1:56:fd:97:29:51:07:5f:07:12:50:c1:5d:e2:b3:
8f:b2:92:18:90:13:21:c3:ef:26:34:92:22:6e:ba:
f9:17:f7:40:9e:9a:3e:6f:36:6b:ba:5f:fd:b7:29:
cb:f4:65:49:f7:42:c2:b5:5d:a2:28:82:f8:81:cb:
24:c4:48:1e:b3:bf:10:ed:ef:ed:1f:52:32:c8:34:
fe:22:ea:cc:d8:a0:f2:93:04:f5:17:f3:7e:2a:93:
7f:fc:a9:09:cb:f3:de:0b:7d:33:fb:4b:d0:0c:1a:
20:13:98:fa:37:dc:18:1d:ca:dc:60:db:ce:d1:16:
02:21:91:01:a3:db:24:fe:9d:f7:b8:d7:3b:2f:01:
f4:47:88:3d:37:16:1b:1d:cb:63:13:bc:e7:68:f6:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:1F:0B:75:83:57:3D:9A:0A:BF:43:FC:62:C5:E6:1B:62:BA:0B
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d9:b7:56:59:d1:a3:aa:cd:7f:d8:86:7b:56:a2:25:29:a0:
b6:0b:7a:59:f8:0f:51:38:6f:0e:84:9a:9d:75:95:28:e4:ef:
19:38:73:5b:73:ac:f6:89:8f:6e:71:40:b0:ce:10:b1:e0:4c:
11:de:cc:a6:50:97:39:d6:cd:a0:f7:6e:ad:1d:57:b5:c8:23:
16:82:87:1b:41:fa:a5:60:24:50:21:02:7d:7f:02:a0:69:d5:
ee:86:5d:6c:aa:8e:8a:f7:55:dc:f7:cd:f0:5e:6c:af:57:f7:
c8:45:12:ad:6d:09:fe:74:3f:16:9a:ff:1e:ef:e2:fe:77:64:
c9:5d:85:a3:e2:0a:18:fa:2c:ed:84:50:13:89:d9:ad:95:99:
2b:8b:65:06:17:3a:46:fe:50:93:c9:be:86:6c:7b:41:10:de:
76:9c:fb:3e:91:89:74:ac:cf:63:57:32:15:8f:d9:6b:48:7d:
8a:8e:b4:ad:4f:66:b8:79:5c:36:11:f7:68:80:bd:08:30:a6:
d5:68:7c:e3:ad:bf:c9:26:9e:ef:d9:ee:8b:5a:a5:e3:9e:2c:
42:f8:01:39:8b:ac:5f:cc:be:5b:23:f5:ad:a6:a1:69:44:7b:
e6:07:7b:5a:6c:5e:7a:9b:f1:68:55:25:e1:e5:39:ca:51:ed:
1f:6d:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:47 2026 by rpki-client