Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
File: nwAKfifXFIcphPrjeIda9lvkBWw.mft (raw, json)
Hash identifier: z/mKv42UNDhC2TdOp6SJdoFgMsE83GK6pGG1X8czjq4=
Subject key identifier: 74:6C:4F:63:BE:28:0E:10:8C:95:B6:41:59:FE:99:F9:07:F5:62:AE
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Certificate issuer: /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial: 01A0E4AC149AB715727641C9508B870D31F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
Manifest number: 04CC
Signing time: Sun 27 Sep 2026 21:01:17 +0000
Manifest this update: Sun 27 Sep 2026 21:01:17 +0000
Manifest next update: Mon 28 Sep 2026 21:01:17 +0000
Files and hashes: 1: MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa (hash: wfWinCwDhzmsC0zOg51AT7GSB/rtsiDVC/qy5SZCJIw=)
2: nwAKfifXFIcphPrjeIda9lvkBWw.crl (hash: Gfm28YD0VU1I8QEgtgZLCvF8hTQ8QLPHiPGMHUkm7gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ac:14:9a:b7:15:72:76:41:c9:50:8b:87:0d:31:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
Validity
Not Before: Sep 27 21:01:17 2026 GMT
Not After : Sep 28 21:01:17 2026 GMT
Subject: CN=746c4f63be280e108c95b64159fe99f907f562ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:d0:5e:bd:46:95:e4:5f:b4:64:70:b6:ea:
18:97:8f:95:f3:fa:51:dd:82:fe:1c:58:43:54:21:
b0:70:ac:4f:d2:78:71:a9:45:af:d0:3c:fb:26:c7:
64:2b:58:7f:00:7f:12:eb:af:9c:a8:84:bc:ef:4e:
2d:ba:27:a7:fa:58:b8:1a:b3:2f:de:c7:54:54:16:
3c:40:81:d2:f5:03:71:4a:3c:1b:54:52:42:45:95:
6e:ac:68:45:23:f4:13:3d:39:ed:da:77:9f:83:a1:
31:a1:82:96:27:2f:5f:68:75:75:a8:b3:e4:db:89:
b8:0b:05:10:c3:1a:c5:fd:42:30:a7:1b:84:8f:bc:
e0:cc:93:2b:a2:af:b5:e8:18:3d:09:1b:27:45:a8:
28:18:91:4c:39:e6:ba:ac:09:b0:1f:aa:d2:7f:c1:
0c:33:cb:0c:c3:a8:00:0b:e6:14:6d:98:3b:7a:6f:
c8:ac:79:95:c4:d9:20:92:66:b1:9c:33:58:0a:8a:
a7:6a:19:1d:90:3d:d0:02:5a:6c:b7:9d:e1:dd:65:
62:73:4f:30:0b:bc:0f:01:2f:11:d0:be:1d:b5:6e:
cc:ea:4d:21:16:17:6c:f7:d2:3e:80:cc:64:90:2b:
fd:ea:bb:64:68:01:83:5e:b5:9a:f4:32:4e:0e:a5:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:4F:63:BE:28:0E:10:8C:95:B6:41:59:FE:99:F9:07:F5:62:AE
X509v3 Authority Key Identifier:
keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6d:22:f9:5d:8d:70:b8:c1:4f:03:ee:50:4f:e5:8d:67:3e:
b0:4d:5e:1e:ed:75:20:55:da:d7:1d:a8:39:22:da:6d:3e:d4:
74:fa:a8:ec:79:4b:ac:61:e1:aa:12:6b:28:cf:80:80:af:c0:
45:50:24:b3:7d:6c:d2:01:76:ff:7d:85:97:88:ab:9f:ee:d1:
88:1e:2b:c5:99:ab:ee:06:33:e1:97:be:87:c2:9b:1f:4d:da:
34:03:b6:69:62:84:9b:f7:aa:e5:23:fd:11:fc:9d:f6:69:51:
fc:24:8a:e4:46:09:08:b1:53:60:70:fa:41:10:ff:4a:b6:44:
43:d3:85:0d:96:f9:8a:6e:73:6b:1e:e1:7f:ab:05:9b:4b:21:
66:01:32:e0:2c:b1:bc:7c:28:37:cb:01:47:25:2b:62:a4:b5:
0c:3e:04:26:27:1d:c3:2e:ab:0c:81:5e:6a:be:a1:39:b8:99:
c5:53:37:8d:9b:30:e7:a7:7c:dc:74:27:9f:1e:b1:d2:e5:8e:
c1:e4:59:74:f2:4f:49:93:fd:2b:33:63:94:67:b9:b5:79:20:
b6:a1:15:a3:fc:2f:55:15:28:ae:c6:31:4f:0d:ea:48:92:38:
aa:26:bc:dc:51:6b:9e:9a:c4:a5:a8:49:85:32:2b:ba:59:ea:
84:7d:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:39 2026 by rpki-client