
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json)
Hash identifier: tEzZm2ZLrdZBZIU9fh33lRiP3mgHyfJabs5NsGRmioY=
Subject key identifier: D3:D3:8A:68:54:AD:70:B6:54:5F:B4:98:AA:9C:BE:59:F0:05:DC:0C
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01A18118D547EB1F0F293498770E23C97464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
Manifest number: 1AFB
Signing time: Wed 28 Oct 2026 06:00:50 +0000
Manifest this update: Wed 28 Oct 2026 06:00:50 +0000
Manifest next update: Thu 29 Oct 2026 06:00:50 +0000
Files and hashes: 1: 4_Hs_qWX8LMFMBOdMWupc1COrZw.roa (hash: W+UOeuskG88MJklXzCx9HgorURDeXLbXHLC4PO76/y4=)
2: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (hash: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ=)
3: GNYsH8Ssdi0wuq0MtkzjAz5IOK8.roa (hash: YBipqhCas3UTGUmAt3vdoKG8URq62fHTpLk/b0OQbks=)
4: IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa (hash: 73NFHvvBJWv79IwIgmIdvG/jVlcenKQG7sknk8zksd4=)
5: J4UnD7LRScbfxtXWDnuE42uhx3M.roa (hash: 3+wx2BbDUCCwJeiPSbBlAz3h3Fg2LYaejyKVPH0G+1A=)
6: JSSAL1uS2725f7uM8kvYMape7F8.roa (hash: RgB3TBZWhlYpz5IbsQEeSNtJJZhDZHeuEj6Sx1LMl58=)
7: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (hash: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770=)
8: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (hash: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM=)
9: Qw8yTunOSm4ZfBN_EbpBqDPiY5Q.roa (hash: U5GJVvdUQBnMaqa4tufa/PxLgPBUjbU5mqB41CCObCk=)
10: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (hash: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw=)
11: WYo1teZpvwvbF93D39MrwjDyB6c.roa (hash: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=)
12: Y-819dZ70kF1HRfiIjcP_qPwqbI.roa (hash: CUeY5Y0OM0Vapauz3RdME7eF7ehpIWRsUXmM44EGVYg=)
13: armHtzccUgM1BQgqFWfqXr6nmqw.roa (hash: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k=)
14: dJ58BurgqXZpPqkhcT_jaenhUrw.roa (hash: dLxvYlPZ9yGSqG/kGTBaW1RvMYRWO2oTa+cptYPPNrU=)
15: djh44NEuCspUjoveVO9WyVzbtyE.roa (hash: UhrDFHo4jOAfwIxgLYqPYJZDTHc3YAaB74ugwpPJYdc=)
16: fDBKRmseNLtDoz2k-oOaLC8l7LY.roa (hash: n0i6gVg3IW17GGTZZ/RrukXurtJ0nF/r+HpmyPOhljs=)
17: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (hash: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ=)
18: luFncGoOqwf-cVbFDO3bIWW4Do8.roa (hash: x4PEjaapYEKgyJ/2Uzjynby5qWIm0JNE/bTW8Z3cae4=)
19: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (hash: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE=)
20: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (hash: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc=)
21: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: R0zU4WsO8Oj/uc2EwRo6vY5NOCC3/1hfXwlPjJx7tvA=)
22: ph347tnTWIGgg-ume_myaaWDaLI.roa (hash: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0=)
23: syCImBDKif2bUtThCCVdzEwc7QE.roa (hash: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=)
24: uY-98AfhcqBFImjqqm1qmr1pWus.roa (hash: FHlrmScVVNKTLuB/mV9S62/IqQKWmxNjARahgHvZ+Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:18:d5:47:eb:1f:0f:29:34:98:77:0e:23:c9:74:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Oct 28 06:00:50 2026 GMT
Not After : Oct 29 06:00:50 2026 GMT
Subject: CN=d3d38a6854ad70b6545fb498aa9cbe59f005dc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:97:f4:84:80:c3:31:47:d9:b2:f5:c4:de:
20:75:04:85:24:16:d8:d8:f5:30:02:b9:c5:a3:9f:
52:4b:07:3f:0f:fc:5c:d0:d6:41:db:23:8d:11:4d:
cf:2e:23:35:86:56:d5:e1:af:b6:93:fc:39:57:51:
86:11:ee:37:07:e1:5b:46:bd:62:bf:c0:bc:3a:95:
56:be:ef:50:6e:eb:82:90:e9:d3:9e:45:dc:1e:83:
2a:48:e5:07:4b:fc:a3:05:51:a6:4e:6a:74:04:39:
40:f2:b3:ff:25:9d:3a:e4:76:f6:b5:61:b4:97:52:
96:6d:40:fe:ad:88:e7:1e:82:a1:f5:79:e2:84:88:
60:e8:48:2f:71:83:84:79:10:63:09:b9:fe:63:5e:
25:27:aa:c4:87:28:dd:68:53:d6:b8:2b:ac:c7:e4:
b9:dd:a3:f2:7f:67:bd:d4:a1:5e:87:a4:16:56:d7:
54:29:79:1f:a2:fd:02:09:eb:c2:98:2e:49:74:e4:
a5:5c:eb:3e:01:bd:42:20:3d:fd:08:65:c2:1e:8b:
40:cc:2a:c0:5f:49:11:5f:76:a2:3c:07:b0:fc:79:
dc:9e:45:93:fd:39:5e:cc:b0:3f:fe:ec:72:95:9f:
f1:91:42:77:0e:48:de:c8:7d:5f:cd:d0:3f:66:cd:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:8A:68:54:AD:70:B6:54:5F:B4:98:AA:9C:BE:59:F0:05:DC:0C
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ba:61:81:6e:53:c5:2e:23:84:7f:e6:84:ed:a8:9b:a3:c9:
26:99:bf:5f:f9:bc:f5:13:0b:d2:62:ba:21:76:26:28:b6:a7:
4e:0d:f4:85:be:23:c6:73:f0:a2:e9:f7:f6:a3:3d:51:7e:4f:
68:63:fc:54:ae:ed:b9:49:68:00:a7:a4:37:46:d3:3d:7e:18:
c8:e7:56:ba:7f:e0:a1:ae:38:5a:0e:59:a9:1f:2f:b6:a2:0e:
81:86:2a:f5:f4:c0:95:ee:d9:53:2f:7f:1c:5e:27:06:19:24:
b7:33:e5:e3:80:83:36:4b:c0:13:28:c7:d0:63:4a:8a:9a:5d:
88:4f:cd:03:81:87:4f:6e:1f:67:96:72:33:00:2c:b7:80:8e:
8d:b9:00:c5:9c:e7:d4:05:82:7d:92:98:e5:a4:19:85:4f:d6:
f6:3d:7f:42:6e:8f:be:c9:a6:c8:b2:33:e4:1b:ac:fd:7f:e9:
83:a7:af:08:fd:2c:72:12:cd:e2:99:45:3a:d4:be:45:7e:9e:
b1:02:9d:14:bd:2f:e2:0f:d3:cd:e5:2e:8e:1e:23:ff:d1:64:
7b:64:24:ae:f8:86:7e:d6:5c:64:64:54:af:5e:d0:39:17:bc:
ac:ea:ce:fd:b1:2e:67:69:ce:8d:ea:8e:7e:5c:95:de:fe:b3:
bf:9a:27:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGNVH6x8PKTSYdw4jyXRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjYxMDI4MDYwMDUwWhcNMjYxMDI5MDYwMDUwWjAzMTEwLwYDVQQD
EyhkM2QzOGE2ODU0YWQ3MGI2NTQ1ZmI0OThhYTljYmU1OWYwMDVkYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0eX9ISAwzFH2bL1xN4gdQSFJBbY
2PUwArnFo59SSwc/D/xc0NZB2yONEU3PLiM1hlbV4a+2k/w5V1GGEe43B+FbRr1i
v8C8OpVWvu9QbuuCkOnTnkXcHoMqSOUHS/yjBVGmTmp0BDlA8rP/JZ065Hb2tWG0
l1KWbUD+rYjnHoKh9XnihIhg6EgvcYOEeRBjCbn+Y14lJ6rEhyjdaFPWuCusx+S5
3aPyf2e91KFeh6QWVtdUKXkfov0CCevCmC5JdOSlXOs+Ab1CID39CGXCHotAzCrA
X0kRX3aiPAew/HncnkWT/TlezLA//uxylZ/xkUJ3DkjeyH1fzdA/Zs019QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPTimhUrXC2VF+0mKqcvlnwBdwMMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7phgW5T
xS4jhH/mhO2om6PJJpm/X/m89RML0mK6IXYmKLanTg30hb4jxnPwoun39qM9UX5P
aGP8VK7tuUloAKekN0bTPX4YyOdWun/goa44Wg5ZqR8vtqIOgYYq9fTAle7ZUy9/
HF4nBhkktzPl44CDNkvAEyjH0GNKippdiE/NA4GHT24fZ5ZyMwAst4COjbkAxZzn
1AWCfZKY5aQZhU/W9j1/Qm6PvsmmyLIz5Bus/X/pg6evCP0schLN4plFOtS+RX6e
sQKdFL0v4g/TzeUujh4j/9Fke2QkrviGftZcZGRUr17QORe8rOrO/bEuZ2nOjeqO
flyV3v6zv5onZw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:48:16 2026 by rpki-client