Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
File: nxw1DPVnNF5ddebFPgTfThJBwUA.mft (raw, json)
Hash identifier: PqzhSbuvmDn3PYIYN4WBnEzFxicU5/hNkRkbw3RYFyY=
Subject key identifier: E1:C7:72:93:90:26:5A:17:C5:7E:79:38:71:65:3F:4D:F4:7D:AE:F7
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 01A08C7AF4A84052F64405CABC42E6E03079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:03 +0000
Manifest this update: Thu 10 Sep 2026 18:01:03 +0000
Manifest next update: Fri 11 Sep 2026 18:01:03 +0000
Files and hashes: 1: FqLIW4PnSegriGAsoUoWOvj-rbM.roa (hash: dDwi3hCzr+TxX3FHNgKuGsM5T5Ly/+2qiRSAz8HLBnk=)
2: O_LpxTo7R231ddDcPK4hIGV9iXg.roa (hash: 8m1fk7WYxmCwj0R7yKBqeG1SMElzRX73CuF2TSrZxVU=)
3: jDXTCYklB5PjjPIato0R36g-v0k.roa (hash: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=)
4: kz2jC2-eYjLav30XZt2qH3nW_T8.roa (hash: q4WzBraFqtDEvW1bU/I6/lO7CbkV/QPhBNE+e0HpSUE=)
5: nxw1DPVnNF5ddebFPgTfThJBwUA.crl (hash: Jo7wNpbqMHnpKHY2ad2B2K2XpkAegg8LFtq8JN25zko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:f4:a8:40:52:f6:44:05:ca:bc:42:e6:e0:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Sep 10 18:01:03 2026 GMT
Not After : Sep 11 18:01:03 2026 GMT
Subject: CN=e1c7729390265a17c57e793871653f4df47daef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:44:c6:80:7e:82:77:a8:b1:f2:c8:c7:7e:
bc:d5:b0:59:b5:7e:fb:37:16:dc:f2:86:d0:f5:9d:
18:9c:89:36:8c:7d:54:aa:2b:45:78:30:b1:03:58:
0b:52:91:27:80:57:04:8e:77:cc:ee:41:e9:71:9b:
dc:e9:0a:4f:77:4b:9b:b8:ff:8a:1e:21:4f:5b:34:
b3:72:20:b4:bf:c8:74:58:d1:c9:78:4a:8d:fd:49:
c0:63:71:55:de:3f:78:b1:ab:8d:f4:ed:6e:b1:94:
e2:0e:ad:e2:a5:11:30:4a:e6:ae:46:1b:d7:7d:20:
de:d1:6a:d9:c6:3d:50:8f:28:f5:0f:5c:e2:22:a9:
90:e6:21:fd:a3:0d:e5:fb:62:20:29:1c:48:9b:57:
30:ce:64:17:0a:88:21:bc:8d:60:b2:b5:90:c0:4a:
24:02:af:6c:57:de:27:4d:53:48:62:53:1c:24:7a:
71:7d:62:4b:e1:e2:e1:f5:94:16:c4:08:16:1b:b0:
ea:9c:73:ba:72:f0:03:34:65:59:c8:67:4a:9b:dd:
b5:d7:33:4e:e4:31:25:e1:84:6a:66:68:c1:a9:4f:
b1:1a:d3:ec:d9:7d:4b:04:02:e2:5a:82:ef:2b:aa:
10:cd:ea:1f:7b:39:a4:fb:a5:8e:b8:38:0e:cc:5f:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:72:93:90:26:5A:17:C5:7E:79:38:71:65:3F:4D:F4:7D:AE:F7
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:0a:c5:21:5c:1b:7d:32:28:cd:7e:4b:1c:54:ba:a6:50:
cc:e3:27:44:ff:a6:bd:d1:42:77:d0:b3:d2:1d:70:ca:d0:08:
83:2e:30:a0:7d:8a:55:f1:4f:58:47:cb:9c:24:45:3f:b5:03:
35:6c:aa:8e:17:75:ca:5d:46:65:cc:68:57:a2:c3:e1:c6:d6:
7d:31:a3:82:78:48:c9:9a:2c:0c:34:f3:09:da:fe:7d:84:9b:
a1:60:ef:61:f7:6e:22:61:d2:46:96:29:bf:b3:56:1c:bb:8c:
42:a8:66:08:ef:6c:ca:ce:76:3c:31:7f:ce:28:ec:d8:52:1f:
0c:12:4a:e2:e6:46:19:5d:8b:ce:60:95:97:44:0d:8b:43:6a:
7a:87:7f:1d:b1:57:a2:3a:32:18:91:b4:86:4a:ac:1e:6c:b1:
d7:c2:5f:5e:72:92:ca:10:4e:03:67:d0:a7:fd:55:e5:d1:93:
01:cb:96:e3:c6:a2:22:57:2f:30:7b:d2:dd:54:c9:cf:15:e5:
20:68:6d:ab:8c:4b:f8:cc:13:8a:fb:c1:9a:88:e9:c2:38:01:
31:4f:70:67:97:e6:69:25:66:8d:0a:2e:ec:0a:95:c4:f3:bb:
49:e2:38:ca:bd:cb:45:c1:8a:9e:7a:a8:a9:41:9b:66:cb:4e:
2a:15:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:00 2026 by rpki-client