Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: Ok7TJ6VW9dEJPUmMVhqXetFmuzA4pTQRA1dNbGVyPo0=
Subject key identifier: DB:F1:DF:76:BD:08:4F:72:40:8D:20:BF:C6:6C:CE:9C:B0:6B:FB:6E
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019EC30023315BE7E0E956E76A3EDEFF5D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 13FE
Signing time: Sat 13 Jun 2026 22:00:26 +0000
Manifest this update: Sat 13 Jun 2026 22:00:26 +0000
Manifest next update: Sun 14 Jun 2026 22:00:26 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: nO658v13N47HkVj7+HadIvjrPsIQeKEVENbsqazO7vo=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:23:31:5b:e7:e0:e9:56:e7:6a:3e:de:ff:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jun 13 22:00:26 2026 GMT
Not After : Jun 14 22:00:26 2026 GMT
Subject: CN=dbf1df76bd084f72408d20bfc66cce9cb06bfb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:3a:64:f5:25:51:76:be:f5:0b:cb:06:6d:
01:da:cf:46:6e:9e:1d:78:17:d8:c1:e3:90:1d:ac:
24:39:11:98:f4:dd:72:39:d7:67:c1:03:78:02:65:
3a:e2:66:4b:88:18:e4:a3:ef:e0:7a:45:ec:44:8d:
76:0a:c7:ef:82:97:67:6c:26:58:c2:47:3f:09:85:
b6:1d:83:03:9c:6c:d6:a5:e4:3c:99:ab:ff:59:ec:
21:9b:71:e1:8e:0b:8a:8c:f0:3f:08:43:18:a5:84:
2b:4c:d0:ad:62:da:af:5f:f4:eb:ce:3e:88:2f:01:
9e:cd:1f:41:f5:ae:2a:7c:7e:1a:ad:5b:66:03:78:
d0:93:b5:10:12:2a:e7:bb:74:ab:15:e4:3e:f4:dd:
ed:9d:13:65:a6:5b:be:b3:1a:22:40:1d:e5:52:bb:
61:19:de:e7:92:e9:3b:a9:aa:14:e2:02:61:d9:26:
e6:e5:51:8b:27:f6:7e:f4:db:60:79:61:75:1a:4d:
fb:19:a3:ef:83:24:04:3b:f4:7f:99:7c:52:b6:17:
ba:ce:b6:69:71:41:13:81:ef:50:f0:30:d3:03:c4:
10:1e:6f:7d:2e:6a:7c:41:a7:e7:7a:3e:6b:c5:2e:
b8:c2:69:b3:63:7a:13:2a:d2:94:ce:96:88:14:b4:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F1:DF:76:BD:08:4F:72:40:8D:20:BF:C6:6C:CE:9C:B0:6B:FB:6E
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9e:92:d5:46:ed:0f:74:3f:40:7f:ed:9a:7b:29:6e:90:b1:
29:3e:45:d3:9e:c6:1e:f4:72:e4:b8:58:86:31:79:a5:36:bb:
41:9d:3a:59:16:56:c7:b6:13:7d:f9:14:a8:ab:93:83:09:be:
80:84:68:8b:ff:40:2c:5a:66:e6:b5:d1:d9:76:b6:1f:47:0f:
78:68:74:92:3f:70:c0:ee:85:e9:5f:ff:39:96:48:f1:b5:7c:
d5:cf:10:8c:65:d1:2d:bc:6f:de:ad:cd:8d:77:61:93:98:ed:
bd:95:d9:9f:00:95:b6:1b:9c:e1:f0:09:75:64:bb:e8:d6:b6:
6a:da:0d:0a:7c:15:9c:14:bb:95:c6:29:81:74:fd:5a:d4:c1:
74:ec:fa:6f:99:0b:ce:cc:c7:11:ef:c5:5c:aa:96:5b:46:44:
82:d0:b6:9b:46:65:30:df:6a:27:32:d0:28:84:52:63:c6:77:
65:a3:1d:35:86:e9:ea:df:b7:72:9e:3a:61:13:dc:f3:7e:ba:
3a:b8:4d:d2:12:3e:fa:e7:c0:ad:fc:ad:ab:56:7c:de:ca:92:
6b:1c:fd:7b:42:fd:77:b7:47:e4:1e:8a:14:4c:7f:20:62:4c:
d0:03:89:9c:56:50:a2:97:47:c1:98:4a:f9:87:2b:0a:b8:64:
3f:46:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:20 2026 by rpki-client