Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
File: Nw9PXYTCtc7jxukDy1MNapH0BLo.mft (raw, json)
Hash identifier: 9D97m0E635Lw5Cq332ThYpO946Y1rOpeiPQBtu+LZN4=
Subject key identifier: 82:3C:A6:77:34:43:BD:D5:EB:F0:88:8D:A9:14:68:2A:B4:DE:31:35
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 01A0C17AE0D596A764AB891A4A8406B0C9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
Manifest number: E3
Signing time: Mon 21 Sep 2026 01:00:50 +0000
Manifest this update: Mon 21 Sep 2026 01:00:50 +0000
Manifest next update: Tue 22 Sep 2026 01:00:50 +0000
Files and hashes: 1: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (hash: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=)
2: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (hash: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=)
3: Nw9PXYTCtc7jxukDy1MNapH0BLo.crl (hash: HeO5nS2cuTkwQM3RTvvQlt+R0VAm8qtJVIP1MyKK2uI=)
4: etGPt2jesAgywvKvXb4eae0QhGs.roa (hash: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=)
5: jBFBWWjIaJu67xGcpk1-p45qsdU.roa (hash: THJXMMGpVdQhi29jGrWB/2bHfOqzvnHxTtQk9TgxUsc=)
6: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (hash: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=)
7: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (hash: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:e0:d5:96:a7:64:ab:89:1a:4a:84:06:b0:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Sep 21 01:00:50 2026 GMT
Not After : Sep 22 01:00:50 2026 GMT
Subject: CN=823ca6773443bdd5ebf0888da914682ab4de3135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:f0:68:2b:18:98:69:02:12:44:69:2a:73:
15:b9:f7:a4:02:ce:36:53:83:32:96:bb:5c:34:91:
de:db:3d:27:05:16:7b:f4:ed:28:ae:f8:97:4c:57:
2f:a9:6f:ee:0e:98:a1:63:11:a4:10:14:1f:b0:1c:
20:6e:a5:91:4d:85:0b:4a:31:29:c6:47:7a:3d:5a:
19:2c:f7:ca:61:50:01:b1:e4:0b:25:7d:88:59:9a:
b3:a0:bb:9b:20:cd:d1:e0:3d:ae:18:e8:57:14:7a:
fc:0c:62:93:f5:77:3c:9f:8a:b7:7b:65:fc:d1:1a:
21:6c:9b:b1:ca:cc:8c:4f:f6:13:7e:f5:f9:95:c5:
ea:e8:55:65:86:2a:90:40:34:4b:28:91:a1:9c:c5:
85:8e:c2:db:23:8f:1e:bc:3e:a8:34:54:16:4d:6c:
6c:30:ff:1b:1a:2c:bb:18:76:1d:21:02:2d:46:ce:
15:13:ee:48:45:0c:a1:5c:0f:d6:2c:07:d3:28:3b:
01:50:78:40:de:35:ed:6e:b9:f2:1c:93:3d:af:7a:
f0:b1:af:92:2a:35:d0:e0:b1:7b:7a:68:a7:d9:8f:
e6:8f:55:8c:e9:46:3d:54:f7:c7:7b:a0:1b:04:62:
51:da:16:89:95:ac:76:b9:00:ec:66:8b:ed:01:88:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:A6:77:34:43:BD:D5:EB:F0:88:8D:A9:14:68:2A:B4:DE:31:35
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:97:0c:50:6a:12:91:05:c0:12:dc:f7:28:e7:d0:f2:26:7c:
42:c7:11:d9:79:5f:1a:38:23:db:c7:73:f9:75:57:69:36:42:
c7:90:b6:d9:db:ff:f8:fa:3f:f2:60:37:12:a9:5b:47:d0:c8:
d8:eb:ff:ed:b5:14:fe:76:1b:c8:f3:8a:6c:ed:cf:a4:d5:02:
90:17:3e:c8:42:6f:3b:60:b0:04:6b:f1:dc:de:2f:9f:2c:cb:
c0:73:e7:ab:c1:ed:d3:33:66:32:67:04:6d:29:a2:a1:47:0c:
b2:a9:31:03:61:d1:09:17:04:e6:6a:d5:84:38:c8:93:ad:bd:
be:29:90:61:1f:cc:f0:2e:5f:b7:8d:4c:21:20:75:36:e9:b1:
d7:0b:c6:af:3a:72:e4:a4:ff:dd:97:48:dc:ff:23:15:5a:dc:
06:c5:ef:5f:79:20:bc:a3:93:b2:e5:68:db:4f:25:de:67:61:
24:f2:7a:24:54:80:52:fd:5a:a6:0f:ee:40:9f:e5:2c:b8:fe:
c5:76:99:e3:0e:58:fc:cd:35:fa:1b:35:24:ba:5b:5f:b3:69:
3f:05:eb:eb:d5:9e:1d:39:b1:58:99:05:9d:ba:a1:5b:62:d0:
bf:0d:4b:8d:b8:bf:1e:20:55:c5:20:1c:51:8a:70:2e:3a:a0:
a8:a9:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:20 2026 by rpki-client