Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: Y4cm9j8dG5Uuf/aC0swaeCNfuNDflOwNXFMSDHGu/T0=
Subject key identifier: 38:EB:AB:94:14:72:9E:87:B3:B0:6E:26:42:23:4D:D4:24:AD:DC:E0
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019CADC8084592C1B4CD829D191625E59FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0866
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: XKizWFGrKf4HNc/gv+3pPRuPDjyYLHKk1D0TvLwuUIk=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:08:45:92:c1:b4:cd:82:9d:19:16:25:e5:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=38ebab9414729e87b3b06e2642234dd424addce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:06:b7:e6:90:36:07:e1:e6:16:dc:c8:c6:
85:2a:34:61:b7:cb:de:b2:dd:d8:55:24:d9:9e:88:
8d:22:77:8f:6d:66:da:7a:ce:39:64:2a:0d:0e:82:
7b:fe:dd:e7:e3:cb:e7:39:81:e5:a8:d3:b0:0a:91:
58:e5:03:bc:dd:c0:45:ab:6c:63:26:1c:ec:d8:40:
70:e6:ae:7e:b2:84:7c:1d:7e:6a:c9:d4:5e:48:c5:
b2:a9:e4:60:0a:3d:0f:2f:b6:65:e8:c0:5d:98:69:
6f:7a:44:8b:d3:60:e8:05:a3:23:ae:1d:4d:8a:6f:
53:17:29:2f:f2:01:25:d9:b6:ca:2f:cf:91:e4:37:
40:ad:fc:da:72:e9:83:10:52:7c:7b:44:b8:a2:d5:
e0:26:04:84:4f:eb:ea:db:24:cd:ed:a5:6a:35:a0:
4a:96:52:dc:4e:59:e1:ee:ad:97:f0:e6:15:7f:bb:
cf:71:1d:31:d5:c0:31:01:a0:21:95:4e:a4:bd:d9:
4d:4d:a5:98:cb:3a:7f:ee:60:4b:cd:d6:b5:52:54:
28:81:41:56:9a:04:2b:00:f7:44:49:2a:b0:8a:2c:
e2:35:00:4c:b9:c1:14:7b:1b:36:61:f4:59:5f:30:
da:21:a7:3f:50:00:1f:2b:f6:89:db:33:8e:0a:e0:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:AB:94:14:72:9E:87:B3:B0:6E:26:42:23:4D:D4:24:AD:DC:E0
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:63:ed:bb:4b:f0:d6:18:81:35:b5:df:39:e5:68:dd:7d:57:
05:39:49:7f:e9:6b:08:0a:87:9f:f4:cc:17:72:de:8b:83:52:
f5:9f:e5:39:0f:14:8e:2f:b1:a8:19:60:f4:6e:f0:c2:54:6d:
a1:4b:48:9a:64:a4:77:86:a2:cb:2f:30:89:84:48:43:47:79:
00:7d:8a:c9:83:d3:80:47:a3:98:19:dc:ca:16:1e:ab:22:6b:
a4:27:3b:62:97:e2:2b:f2:d8:33:0b:e2:71:67:7a:a7:02:9d:
39:6a:68:f5:2a:b2:64:a6:6d:cb:db:e6:54:c1:e9:bf:38:a3:
c5:8b:aa:72:dd:a2:da:6b:c1:aa:0d:8c:f4:6f:0e:15:c6:06:
57:8b:71:c0:63:c9:86:9f:53:c6:de:5b:0f:1f:e2:bf:19:6c:
b7:22:8f:70:59:46:6d:bc:de:c2:3a:55:ad:d8:25:e0:25:ae:
6c:9d:eb:65:20:36:81:88:0b:e0:89:a4:80:53:bd:1f:8b:d4:
10:64:3f:44:f7:2e:b0:e3:42:b8:73:06:10:e6:52:b8:5c:24:
c8:1b:73:94:90:27:1a:35:89:22:91:78:34:79:91:e9:96:0d:
5d:6a:45:2e:19:17:ba:c5:fb:df:f7:88:9b:46:b9:3b:52:fa:
65:cc:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:04 2026 by rpki-client