Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: jHki24TggjYIB0MW3ZyCaQEsR69kcCQLVryMiqbtFg0=
Subject key identifier: 7C:CD:A7:EC:95:B2:58:A6:C1:15:4B:48:1C:63:43:8A:FF:BF:0F:BF
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 019D9AAC38ECB60EA3402758A445CE1D6EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0DBC
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: R91GiKKyBrwfLColIYR-nu2XUnc.roa (hash: fqxJrQIzt273Im8ggeZoruR/46fuYNCxgpytjXWqJG0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: QkpSvHRDo07W+bsLeI3OyVWArIpRCMxpJz90wqP3a0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:38:ec:b6:0e:a3:40:27:58:a4:45:ce:1d:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=7ccda7ec95b258a6c1154b481c63438affbf0fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:6b:c9:51:ae:2b:57:88:16:59:55:7e:4b:
6a:d4:e0:bb:19:e1:f9:94:85:38:bc:3d:f8:09:89:
3c:41:59:fd:f4:0c:9f:27:5c:9f:ab:fd:4d:9f:9a:
65:ae:5c:a0:90:65:7a:19:e3:03:fe:57:bd:04:f3:
f5:55:97:ec:09:0e:de:08:66:df:25:3d:13:4c:61:
04:70:e8:a1:20:7b:ac:35:10:5e:19:32:da:c8:63:
b3:71:e3:43:3d:5c:4e:5f:21:94:21:f8:e6:72:ca:
48:2f:49:c8:7d:6c:ac:90:c0:fe:2e:13:bd:91:66:
05:42:9c:ad:e7:b2:62:6d:cc:0e:25:b5:f0:05:9f:
7b:ef:5a:a5:12:fa:ce:4b:e5:95:31:b9:32:d9:ea:
5b:0e:16:8e:6a:c7:7c:51:b5:16:d7:2b:7d:87:50:
9a:ab:f6:fe:5c:9f:36:34:48:e4:77:fd:c9:5a:7b:
91:24:56:b0:72:e1:f6:88:14:3c:bf:5d:86:52:ee:
a7:dc:c9:16:76:9f:d0:82:94:cb:6f:7b:1d:73:22:
ac:3b:c4:9d:33:93:89:fd:be:fb:05:c0:dd:ca:62:
94:6c:d7:82:ff:bb:c1:b0:fb:99:28:a3:2e:06:89:
88:d4:46:fb:19:75:50:71:4a:f0:f7:df:a7:d9:3c:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:A7:EC:95:B2:58:A6:C1:15:4B:48:1C:63:43:8A:FF:BF:0F:BF
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:a9:51:12:45:ea:d6:87:d7:56:68:d7:5f:9f:b5:7a:27:
df:22:9d:8d:55:9b:4f:5b:9b:21:95:4a:91:aa:88:6f:1a:41:
7a:e8:19:fe:bb:e3:6c:7d:28:56:b8:01:c6:2c:b6:6d:b2:e4:
3a:47:3d:c6:c5:f0:5f:f1:bd:1d:88:3c:b2:74:ef:11:26:a4:
52:e1:73:ab:9f:59:cb:48:c8:ae:ac:1d:d9:bc:05:aa:55:1e:
7e:c3:25:b3:d8:5d:ff:79:c5:15:f0:f8:fe:c9:c6:c3:e6:07:
0a:a5:9e:5a:74:6a:d9:48:b1:a2:60:c0:0d:d5:28:b2:bd:71:
bf:5b:6a:3f:9f:7c:9f:24:96:64:02:4b:c0:c7:77:73:eb:ff:
5e:2c:4c:c1:14:86:2d:0b:bb:38:38:49:81:72:b4:b3:2b:ad:
dc:6b:66:ea:50:d0:65:ac:8e:e7:bc:16:57:b4:4d:6c:e5:bb:
a3:e5:fc:fc:9a:79:65:aa:f0:06:36:64:54:82:91:e2:b1:e2:
1b:90:3f:7e:e0:ed:f0:fd:4d:b1:41:32:81:0a:46:d6:88:5c:
ee:2a:52:13:5f:17:48:02:d9:9e:45:f8:a1:5c:51:27:02:b1:
d0:74:37:a2:a5:6b:56:4a:1e:05:3d:7b:8d:3e:39:19:a2:b9:
c2:e2:3a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDjstg6jQCdYpEXOHW6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw
ZDgxOGUwHhcNMjYwNDE3MDkwMTExWhcNMjYwNDE4MDkwMTExWjAzMTEwLwYDVQQD
Eyg3Y2NkYTdlYzk1YjI1OGE2YzExNTRiNDgxYzYzNDM4YWZmYmYwZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTFryVGuK1eIFllVfktq1OC7GeH5
lIU4vD34CYk8QVn99AyfJ1yfq/1Nn5plrlygkGV6GeMD/le9BPP1VZfsCQ7eCGbf
JT0TTGEEcOihIHusNRBeGTLayGOzceNDPVxOXyGUIfjmcspIL0nIfWyskMD+LhO9
kWYFQpyt57JibcwOJbXwBZ9771qlEvrOS+WVMbky2epbDhaOasd8UbUW1yt9h1Ca
q/b+XJ82NEjkd/3JWnuRJFawcuH2iBQ8v12GUu6n3MkWdp/QgpTLb3sdcyKsO8Sd
M5OJ/b77BcDdymKUbNeC/7vBsPuZKKMuBomI1Eb7GXVQcUrw99+n2TwTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzNp+yVslimwRVLSBxjQ4r/vw+/MB8GA1UdIwQY
MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt
MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk
LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4WpURJF
6taH11Zo11+ftXon3yKdjVWbT1ubIZVKkaqIbxpBeugZ/rvjbH0oVrgBxiy2bbLk
Okc9xsXwX/G9HYg8snTvESakUuFzq59Zy0jIrqwd2bwFqlUefsMls9hd/3nFFfD4
/snGw+YHCqWeWnRq2UixomDADdUosr1xv1tqP598nySWZAJLwMd3c+v/XixMwRSG
LQu7ODhJgXK0syut3Gtm6lDQZayO57wWV7RNbOW7o+X8/Jp5ZarwBjZkVIKR4rHi
G5A/fuDt8P1NsUEygQpG1ohc7ipSE18XSALZnkX4oVxRJwKx0HQ3oqVrVkoeBT17
jT45GaK5wuI6Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:45 2026 by rpki-client