Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: qFNpro8nhfD8w7BqXb6vFJ3GDz/ZWAFtiWhSoW3GrqI=
Subject key identifier: 37:D4:77:6A:8C:CB:74:E6:17:5F:25:2C:38:F1:42:ED:06:2E:81:BB
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019CADFE84754301F57D6FAE546176CF24EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 12EA
Signing time: Mon 02 Mar 2026 10:01:04 +0000
Manifest this update: Mon 02 Mar 2026 10:01:04 +0000
Manifest next update: Tue 03 Mar 2026 10:01:04 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: pEzvlROI9oG5HeIH3iRZmiNXT2nXyxBU4DcdFCZFuNc=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:84:75:43:01:f5:7d:6f:ae:54:61:76:cf:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Mar 2 10:01:04 2026 GMT
Not After : Mar 3 10:01:04 2026 GMT
Subject: CN=37d4776a8ccb74e6175f252c38f142ed062e81bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:50:8f:3a:a0:99:6d:87:92:fc:46:f6:6d:
57:24:f0:37:a2:79:0d:25:63:1b:88:11:2f:fb:f6:
b5:44:1a:1b:81:90:14:4e:89:05:f5:b2:48:08:29:
be:b7:b5:42:fc:a5:a0:8b:e5:e6:53:3a:bc:4b:ea:
96:3a:8e:67:9f:9b:b0:50:55:16:bf:49:42:b6:32:
89:0d:ed:7a:e8:8e:72:51:8a:9e:66:26:b7:71:20:
4e:8e:3f:1a:2b:9e:9e:31:46:28:bb:58:e0:a6:c9:
3e:35:7f:25:f4:3c:14:85:62:1c:32:7b:d3:45:78:
2d:19:0b:80:b5:68:bf:fe:c1:c0:7e:88:c2:ac:16:
fb:63:ee:fa:9a:12:3f:96:f5:59:ba:1e:64:c1:52:
cd:4a:77:27:77:58:ba:26:c1:c1:90:53:b5:85:46:
af:8e:9f:cd:5b:f6:c9:f0:97:ab:8e:b5:9a:6c:66:
52:e1:a7:7e:b8:56:77:9a:db:66:42:08:41:3e:fc:
0a:c5:b8:21:79:2f:b9:ba:64:7e:5b:a6:ed:06:2d:
96:6a:a7:5a:34:74:3b:2f:6a:a4:1e:51:08:5e:2a:
1d:c9:e2:f4:0c:fc:06:c0:f2:3e:d8:99:bf:6e:a6:
3f:20:35:96:6c:e9:f7:5a:20:f4:fc:ad:3b:ef:d6:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:77:6A:8C:CB:74:E6:17:5F:25:2C:38:F1:42:ED:06:2E:81:BB
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:3b:47:11:4d:7a:33:b8:8c:5e:fb:52:31:67:8e:f9:99:
55:bc:40:78:ec:17:ec:4f:25:99:41:cc:f7:e9:a7:50:b7:6c:
54:d0:5c:97:c0:22:ec:50:19:98:5f:40:bc:19:60:20:8b:b7:
57:92:0e:75:95:0a:87:cb:03:cb:7b:af:0c:50:58:38:b6:ab:
6a:6a:18:47:54:93:a1:0b:79:f9:f4:9e:d2:ce:2b:3d:f7:7e:
a4:e3:a5:2b:21:bb:0f:05:85:ca:3b:bf:b6:69:e9:d1:ae:16:
00:8e:01:6a:2e:79:a8:d3:a9:c1:47:9e:2a:ef:73:5a:cd:37:
a9:36:1c:37:af:bf:05:0a:1d:c7:bb:c2:69:17:c0:75:1d:d3:
8f:76:34:ae:58:ed:a0:a9:17:4b:79:52:85:40:a4:e2:3c:79:
8f:81:5a:bc:ae:14:cc:11:f9:aa:bd:2f:f3:dc:01:b2:c7:05:
36:3b:51:aa:d5:65:89:26:d8:5f:b5:b9:e3:ef:fc:f5:73:b6:
e2:dd:54:97:95:e8:28:a1:2b:6d:99:ba:d8:99:5e:91:b5:12:
a1:05:64:ce:17:ce:db:fa:8e:57:7d:38:96:c7:02:46:62:e4:
d2:7a:e7:22:bd:8b:cf:18:97:7a:c8:fe:4d:75:fe:02:7c:80:
16:6c:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:47 2026 by rpki-client