Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: LMZppW5/Zl4KmErcONu309XkzC9aE5CSTF7qtAwaNlI=
Subject key identifier: DC:92:12:C2:55:EE:A3:72:FF:E1:70:C6:19:D5:C6:AC:54:57:C1:07
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019D9999996274E1979FD615A0862559D423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1364
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: CLrtai0Ma1T03+DiMVglz6AfLYWi6URXZM2ZpA+nsV4=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:99:62:74:e1:97:9f:d6:15:a0:86:25:59:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=dc9212c255eea372ffe170c619d5c6ac5457c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:0a:85:d7:13:34:5c:94:a6:be:57:6a:f6:
ac:0a:02:dd:14:50:59:59:c8:79:d2:bd:c2:41:a8:
72:81:6b:69:fc:6c:3f:e4:27:fa:4f:ec:63:09:aa:
20:2a:75:b0:6a:ff:ee:86:d7:4f:93:91:f3:1b:29:
6f:8f:b9:68:ea:1c:f1:c6:1a:15:23:c4:60:d3:63:
69:2f:00:89:6e:52:c1:15:b1:c2:dc:35:52:cd:63:
1a:e0:3c:d0:7f:94:b4:e2:4e:eb:62:c9:ae:7b:d9:
94:ab:30:a3:bf:86:a7:19:cb:ef:c1:b8:19:cb:d9:
cb:83:01:b4:86:97:ad:41:41:c9:ba:44:6b:cf:8b:
3a:df:fc:fd:65:a6:24:68:5d:1d:35:d0:4f:82:24:
94:6b:91:be:8e:95:a5:cb:b1:ad:dd:84:59:64:1b:
52:5e:b5:9c:aa:73:64:c3:90:f1:8b:d4:34:6c:9f:
66:2b:c7:e8:49:5e:e7:5e:a2:76:d0:e0:65:79:2a:
f4:62:4b:34:8c:47:41:62:d3:1a:6a:19:7e:a0:09:
26:bb:d8:3b:60:ba:86:ba:3f:e9:19:ad:40:33:86:
eb:ca:3b:c6:56:b1:28:a1:b9:06:82:aa:82:b5:f3:
d3:1f:47:ce:3b:bc:61:ee:08:83:61:6a:10:4b:15:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:92:12:C2:55:EE:A3:72:FF:E1:70:C6:19:D5:C6:AC:54:57:C1:07
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a1:83:e6:16:52:d0:a3:11:b7:70:d2:b1:25:f2:ca:1a:91:
60:72:8f:91:79:07:1b:be:4e:42:91:c8:73:df:37:55:31:a0:
40:35:f1:78:0b:17:8f:93:00:eb:e7:45:fb:65:4f:ec:e5:c6:
9a:d1:0e:f7:d0:2f:71:d9:07:40:30:0e:7c:07:40:7c:04:c2:
50:d4:a3:06:99:f6:09:47:58:d1:6c:16:4c:25:13:a8:ba:90:
4d:f9:67:f4:e2:01:b4:cf:43:dd:fe:a3:4b:c6:04:8e:d4:8a:
e6:42:c9:4d:66:85:5e:91:ab:59:d4:48:84:62:b5:0e:4c:b2:
31:7a:24:90:01:04:ed:0d:73:f7:43:dc:c4:a2:d0:ce:d2:ac:
bb:73:d8:c5:43:09:4c:11:91:88:b8:f3:9e:36:7e:6d:38:24:
83:72:a3:a5:96:5f:5b:3d:ce:88:62:ea:97:5f:03:35:09:f7:
79:a3:02:62:0f:24:2b:93:c3:cf:7d:10:8a:53:e7:dd:d7:8e:
ea:a8:b0:80:d3:a3:b8:6a:cb:a9:a1:af:3d:71:87:92:61:3f:
36:28:f9:10:f9:d9:08:28:9b:32:b8:d7:30:c7:f4:43:fe:8a:
b1:9d:c3:23:fa:85:c3:14:d2:8d:6f:b9:63:d4:96:ef:56:c2:
73:9e:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:08 2026 by rpki-client