Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: /ZrPtI37D/OS4t76tp99aUkjq9EgfA3kaBm/JKf7f7E=
Subject key identifier: 5C:23:03:62:79:F0:5A:C0:C3:A4:68:05:5D:A3:E3:31:6F:4B:17:7E
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01A120F78501CEFE5E4B9D64730806F8DB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1356
Signing time: Fri 09 Oct 2026 14:00:54 +0000
Manifest this update: Fri 09 Oct 2026 14:00:54 +0000
Manifest next update: Sat 10 Oct 2026 14:00:54 +0000
Files and hashes: 1: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (hash: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: 14K91JWqqc5myuZyO0HATaCCDVvYQjveHI+IO9VXthY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:f7:85:01:ce:fe:5e:4b:9d:64:73:08:06:f8:db:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Oct 9 14:00:54 2026 GMT
Not After : Oct 10 14:00:54 2026 GMT
Subject: CN=5c23036279f05ac0c3a468055da3e3316f4b177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:0d:1b:08:eb:a7:8e:b6:47:79:74:cf:5e:
92:7a:83:87:ee:f9:cf:58:80:f4:06:01:a5:df:be:
43:aa:1d:7b:01:e1:03:fa:01:80:d8:59:20:06:24:
c2:4a:8e:92:7a:98:66:14:c3:c7:8f:84:50:a5:5a:
15:5d:24:9b:29:f3:57:5b:05:05:4b:f1:f3:d7:87:
73:ea:62:8c:b7:a8:ea:34:ec:a5:5a:fa:e6:de:17:
f7:de:3d:f5:8c:26:b8:fb:38:e0:ef:69:e9:b0:07:
e2:2c:aa:60:aa:04:94:fd:0e:59:d6:f5:29:45:15:
f1:11:5b:81:00:31:e5:b1:2d:31:2c:d7:f5:f9:75:
07:77:7e:27:5d:b1:34:ba:82:95:b7:9e:85:3c:bd:
78:96:1c:40:79:3d:20:15:c8:c7:40:65:45:f5:3f:
61:33:52:6b:66:b0:71:de:03:00:ab:eb:cc:ce:0d:
49:ae:cd:dc:46:5d:e0:59:9c:1c:84:99:90:43:45:
13:9c:df:29:74:53:75:a0:0d:af:9f:f2:75:40:58:
36:42:fa:9f:ef:82:44:22:fb:c1:c7:5e:a1:07:13:
84:13:58:87:6b:13:01:9d:ac:7e:3a:24:c9:41:43:
22:f4:14:90:46:dd:ed:61:b6:f0:e2:d7:f8:ad:d0:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:03:62:79:F0:5A:C0:C3:A4:68:05:5D:A3:E3:31:6F:4B:17:7E
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:52:cf:57:9f:38:5f:73:80:02:e3:15:ea:e8:9d:45:4c:fc:
6f:57:93:d6:c2:4a:cf:12:1f:c6:84:16:ae:32:2b:75:d6:63:
c9:8e:03:03:0e:02:27:a3:08:95:82:11:f6:89:90:5c:72:d7:
64:70:47:75:96:a0:ed:c6:b5:8f:4e:c7:10:42:91:f7:5d:da:
63:de:13:f5:c1:cb:71:db:cd:0b:15:66:28:8f:98:85:6a:22:
9e:74:ec:fa:44:18:e1:a8:c2:58:a4:92:9c:61:26:27:5f:b2:
75:42:a8:78:82:2b:28:46:74:51:bf:85:06:cc:42:43:93:aa:
81:9f:e3:65:ef:a5:2f:46:69:cb:ad:de:7a:ba:76:02:c9:8e:
2b:3c:b4:fc:aa:3d:18:ad:49:ea:c8:1e:0a:ea:1d:d7:9b:96:
7c:a4:be:c2:7a:5c:60:82:b9:ff:a6:72:0a:a0:91:ef:45:5b:
a2:92:bb:0e:9a:4a:0a:a4:2a:1a:eb:a7:d1:f2:c8:5e:9f:a1:
11:b1:20:75:70:fd:90:14:48:99:75:e6:6c:1e:7f:21:00:83:
8b:88:b4:92:96:0a:01:61:2d:06:85:0f:7b:a5:80:27:0f:1c:
6d:aa:ed:65:4d:cf:0c:08:00:7b:90:97:0f:05:d6:7b:39:5a:
4c:bc:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:17:20 2026 by rpki-client