Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: ChoLVBGm0G5q9IX2YVWdjTlUcR1IMjZUYzIg4TboOdM=
Subject key identifier: 86:32:8D:33:F7:8D:BB:AC:52:B7:F4:8B:9F:05:2A:4B:A6:5B:9D:E4
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 019D9A74B1E6750C74FC259E64EC57B01D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 11EE
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: h1IjapSG0fsMltoCuENyqLemwjxsw69ZMytzZAwr2kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b1:e6:75:0c:74:fc:25:9e:64:ec:57:b0:1d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=86328d33f78dbbac52b7f48b9f052a4ba65b9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:0e:83:70:0d:d3:ac:df:c2:67:83:06:1c:
1f:90:e3:9d:f5:70:78:37:bd:91:e9:93:82:6e:de:
0b:90:93:d2:7b:94:7f:b0:24:c7:c5:07:73:ee:17:
1e:0e:3b:bb:cd:12:af:2a:bf:3e:b8:8f:37:83:83:
fd:d4:46:a8:02:aa:61:a0:b7:43:fb:6a:4e:f8:a4:
50:e7:03:e7:91:fa:80:85:3f:ea:04:81:cd:0f:a5:
93:a8:5b:23:34:f9:9d:5c:7e:83:3c:ac:71:c3:9a:
f0:26:b2:e5:c2:0d:92:92:5e:11:b9:52:5a:ed:79:
1e:cf:4a:db:62:0e:22:68:5e:f4:fb:4e:2b:c0:e4:
55:0b:0f:48:ef:8b:61:03:72:2c:eb:ce:d1:ca:f2:
21:36:06:6a:4b:ff:87:74:0e:66:f3:4f:15:41:70:
a2:e4:6a:74:0a:bb:02:7e:f2:61:2e:71:0e:ff:ef:
dd:6a:1b:75:d2:af:ed:1a:43:ab:ac:95:6f:d2:d7:
26:a2:53:95:7a:b6:ae:ec:7d:38:cf:fe:8f:22:35:
0a:81:26:27:cc:9c:65:a2:07:79:fe:1f:8b:b0:02:
3f:21:3b:31:82:d0:80:3a:fc:38:c8:51:03:da:08:
e7:11:57:81:b2:19:51:e5:33:d9:f3:57:a8:20:2d:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:8D:33:F7:8D:BB:AC:52:B7:F4:8B:9F:05:2A:4B:A6:5B:9D:E4
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:4e:e2:a4:dc:28:15:a4:b5:58:a8:0d:06:4f:62:a3:e2:
85:69:62:a6:c5:3f:37:cd:1c:e3:29:21:05:a9:91:6f:e9:cb:
14:d4:1c:2a:e7:41:78:70:39:a4:e1:46:75:ac:6f:5a:41:d9:
fe:f5:a9:16:ad:3c:8d:78:ee:d4:2b:58:67:30:1b:86:0c:4f:
58:16:b5:fa:fa:35:e2:07:f0:c4:ee:ed:55:c4:f5:1b:58:ca:
3e:d4:b4:d1:d1:7c:da:0c:60:41:df:01:ae:ae:15:26:68:86:
cb:d9:e1:b7:4b:24:d9:45:42:23:37:bc:53:89:15:ed:e9:70:
9b:02:21:69:31:07:b4:bf:1d:12:1e:be:29:20:1a:50:03:31:
32:47:c1:4e:ec:44:f0:aa:4b:f9:9e:58:32:ca:ad:2f:3b:1b:
b1:18:eb:79:d9:d3:0f:c7:fb:b5:d0:3a:44:8a:5a:91:bc:54:
bd:2b:50:b5:da:67:d3:f9:62:4e:1a:ca:25:b7:6f:51:13:b8:
d3:32:a3:61:d4:e9:5f:12:74:70:d3:f0:d6:04:cb:56:c3:97:
9c:4c:c6:e9:4a:69:77:a7:dd:96:17:99:25:f0:a2:88:f8:7b:
46:14:db:62:4d:2a:65:71:a4:9f:db:7c:bc:5d:c0:f7:35:b0:
e0:08:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:10 2026 by rpki-client