Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: AEslYllQ6B1r1/1EFSUgcSl9rkau7p9SxMBfU382uj4=
Subject key identifier: D8:8C:2F:3D:8D:9C:46:E6:FF:48:CC:62:1E:87:4A:5A:65:C9:EB:8F
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 019CAB344A1D9B86887B4B5D41B2038C9319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0D40
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: R91GiKKyBrwfLColIYR-nu2XUnc.roa (hash: fqxJrQIzt273Im8ggeZoruR/46fuYNCxgpytjXWqJG0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: qigaOcvoQVhLEpzIoegteCBWQbfFCGwGefP2z6oUSDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4a:1d:9b:86:88:7b:4b:5d:41:b2:03:8c:93:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=d88c2f3d8d9c46e6ff48cc621e874a5a65c9eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:62:c1:d9:8a:66:db:65:cd:14:28:65:07:
a7:d8:6d:8a:dd:62:fb:5c:dc:c5:e2:f3:1e:8b:40:
02:dd:db:9b:27:d4:4e:57:dd:64:b1:1c:fa:21:42:
e7:11:a7:41:be:3b:d9:ae:45:dc:f9:96:6d:b9:d1:
25:2f:31:41:12:cd:eb:b0:de:d5:09:bf:dc:e6:2b:
05:bb:99:ab:89:52:61:8c:d7:e1:53:71:48:93:b2:
f8:29:69:01:33:f0:69:50:84:03:c1:7e:58:d6:be:
a5:93:e9:3a:e1:57:2c:b8:11:75:9f:b0:1c:12:06:
6f:ef:fd:ed:c0:8d:6e:56:68:32:91:61:35:85:10:
78:ca:0c:44:b4:fb:a6:55:7f:5e:bb:df:ab:ab:b6:
8d:b7:75:6d:71:94:73:63:1f:85:07:73:5e:bb:4c:
54:6e:a0:c4:90:7a:0b:bf:d9:ef:5a:50:d3:ac:76:
93:0f:ef:67:50:81:81:e5:d6:06:50:cb:ba:19:17:
da:a0:a8:fe:12:4b:5c:b8:cd:f9:cf:2f:a2:cd:be:
53:26:b4:2a:86:7b:d3:15:24:2e:a0:73:01:1f:12:
21:2a:02:54:59:a5:b0:73:57:79:14:85:e4:f0:00:
34:4b:12:89:8b:de:83:ce:b4:8b:87:77:58:25:8e:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:2F:3D:8D:9C:46:E6:FF:48:CC:62:1E:87:4A:5A:65:C9:EB:8F
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:cb:1c:dc:fa:2d:f4:c1:0f:b3:ce:37:87:4f:de:a3:65:
e3:e0:9c:07:78:67:c0:7c:e2:e5:c1:03:24:b9:6d:ee:24:dd:
a5:3c:4e:fb:f1:cf:72:2f:88:04:64:1a:c5:0e:a9:0f:56:be:
4a:e8:f5:24:38:1c:aa:c5:9e:9f:39:2c:35:60:68:b5:34:b8:
50:7d:1a:b7:76:9a:bf:bf:85:b5:ec:2a:90:3a:b1:07:35:2d:
5e:b2:b4:fa:55:c5:8e:73:1b:5b:fb:9c:3f:ae:57:b5:a7:74:
75:57:35:43:76:00:ab:aa:a1:f2:16:11:ae:ef:43:38:af:46:
46:81:ba:17:8b:b1:48:d5:2d:4b:cb:35:95:dc:e3:1c:11:8f:
ff:59:5a:76:5d:a8:4f:61:9f:d4:4e:a6:f8:97:32:92:7e:57:
16:3f:3f:71:81:ba:72:a8:94:84:db:54:2d:fc:59:17:51:9a:
da:97:09:22:2b:0c:f8:fd:3a:c3:86:6e:af:3f:4c:b9:9a:05:
72:ad:26:c6:77:46:11:ab:f0:74:6b:6c:ac:40:96:3a:67:07:
c1:56:b8:3a:c3:cf:b4:cf:4a:78:64:62:29:cf:36:36:be:13:
bf:7f:22:1e:30:6c:f0:df:fd:ee:7e:f0:94:a2:47:e8:05:d3:
7a:a6:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:23 2026 by rpki-client