Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: opPCna6TivuMX9bWLv3amwMcCj6+nSiQhCtniNbm69A=
Subject key identifier: 54:4F:10:32:2E:66:C3:FA:86:2A:71:60:18:D9:83:4F:1B:66:9E:E5
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 019CAAC6E449EDD5FE5E6F60816A29750C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1106
Signing time: Sun 01 Mar 2026 19:01:26 +0000
Manifest this update: Sun 01 Mar 2026 19:01:26 +0000
Manifest next update: Mon 02 Mar 2026 19:01:26 +0000
Files and hashes: 1: EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (hash: F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: JjSWGSgdKXV9ueSmfVSyec+S5+OuxY+6e6qKIwmbE04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:e4:49:ed:d5:fe:5e:6f:60:81:6a:29:75:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Mar 1 19:01:26 2026 GMT
Not After : Mar 2 19:01:26 2026 GMT
Subject: CN=544f10322e66c3fa862a716018d9834f1b669ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:04:44:98:f9:a3:fb:1b:68:23:13:13:ee:
ff:60:5f:cd:9c:01:8e:a8:18:8a:17:a3:95:39:c5:
6b:3a:05:7d:4b:3d:6d:5b:5a:36:d6:b2:dc:68:2b:
57:8c:6b:3c:d2:82:db:52:96:5b:70:12:50:8d:11:
b3:ab:da:15:e8:60:fa:52:99:e2:6c:d9:44:4f:7d:
77:e4:b2:23:ef:f3:5f:46:ad:26:9e:c8:c6:db:48:
c7:3c:0e:7d:aa:7a:d1:4f:55:75:7a:bd:c4:b1:07:
85:24:af:a7:e5:29:92:95:54:1d:13:21:0a:65:ae:
59:65:42:14:b9:70:7d:d1:0f:3f:cd:8a:02:64:11:
90:f8:e6:26:9f:db:89:df:ab:0d:41:55:da:40:a1:
14:53:d2:89:58:d9:4e:d1:4b:5e:1a:08:e7:a6:f6:
72:e6:6c:63:1b:50:d8:41:bf:63:d1:15:82:df:33:
e7:76:e3:aa:c4:2a:6e:65:e6:f3:9a:6f:d1:ae:c3:
74:2f:a0:19:97:a3:66:e8:6e:6f:b9:b2:9a:42:96:
8d:86:2a:9b:03:ca:16:ab:4d:6f:68:a7:e4:e0:4f:
81:18:43:27:ac:0e:1c:92:11:ad:ea:8d:f1:bb:84:
3f:19:fb:08:14:c9:ed:c1:27:fa:25:55:93:2a:c7:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:10:32:2E:66:C3:FA:86:2A:71:60:18:D9:83:4F:1B:66:9E:E5
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:a0:51:5f:35:21:10:08:e8:e8:5b:bf:d0:20:76:35:0d:
72:7a:48:29:74:b4:b9:85:90:20:2b:db:99:ca:de:fd:05:a0:
a5:83:d2:b7:6a:a4:eb:2e:c0:c8:05:d7:a3:3b:b9:ba:41:45:
77:17:cb:d5:de:8c:1f:9c:d2:81:d7:32:8e:cf:31:b2:8f:e1:
d9:9c:8c:d7:24:aa:a8:ca:c9:b6:f6:b4:fe:22:cd:24:d2:db:
09:48:44:98:03:94:2f:7a:6c:e4:3c:bc:5b:63:b7:98:cd:6a:
4b:c6:90:9b:14:1f:f1:12:52:f0:f0:38:cf:b4:2c:ea:ed:b3:
3d:7c:3b:d9:e6:b3:98:2d:0a:70:f9:05:26:c4:85:ac:64:4d:
7e:c0:b3:85:f2:bd:4d:3d:b9:38:b4:61:45:74:a4:05:93:f2:
ef:06:e5:5f:15:f0:9b:36:bd:71:81:28:33:74:ec:39:8c:90:
00:7f:fb:9a:a4:54:cd:56:9a:d6:ae:5c:5e:f0:97:3e:27:a7:
de:06:b6:f0:86:cf:43:23:57:03:9a:82:7a:aa:cc:f2:2f:e0:
d2:79:76:0d:e7:58:1e:2c:3b:8e:d6:a3:2d:3f:ea:4c:e5:6f:
3f:58:eb:76:57:d0:35:9e:a9:98:ac:7c:aa:fa:d0:85:bf:8f:
00:38:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:14 2026 by rpki-client