Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: GzFi+bZLPFbKodv+KZ/fqPLLZDx96o9vfA6PlrENK+s=
Subject key identifier: 45:EC:8C:C8:AA:09:0B:CE:4E:1E:7E:D4:9C:48:87:41:4A:58:FB:53
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 01A08979DA0D3B4E0623D61BE9608FCF20E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 0CFE
Signing time: Thu 10 Sep 2026 04:00:59 +0000
Manifest this update: Thu 10 Sep 2026 04:00:59 +0000
Manifest next update: Fri 11 Sep 2026 04:00:59 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: qrZkP2sWoQ3wCkckkaSniISCyMShhJt0T798QSLC5ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:da:0d:3b:4e:06:23:d6:1b:e9:60:8f:cf:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Sep 10 04:00:59 2026 GMT
Not After : Sep 11 04:00:59 2026 GMT
Subject: CN=45ec8cc8aa090bce4e1e7ed49c4887414a58fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:4e:8b:a4:00:cb:3d:27:ed:a7:43:8b:2c:
be:67:1e:c0:18:58:94:7a:46:4f:94:e7:88:77:50:
22:b5:68:23:af:d5:e0:39:ff:4a:e9:7d:bd:07:d7:
c6:68:29:92:cb:18:e1:07:08:90:e5:5b:70:39:6b:
c4:1c:ad:2d:da:a0:b9:ea:2c:74:83:42:3c:1a:3e:
29:26:9c:ed:a5:95:51:8d:00:77:9f:2a:93:61:3c:
11:1c:87:62:3a:d4:7c:6e:06:e7:41:eb:82:29:38:
3e:ad:91:b8:e4:6e:e5:53:68:d8:21:bd:a5:ce:c1:
ca:02:8b:0d:5e:b2:cb:4c:d3:ba:49:89:c4:99:3c:
72:4b:4c:20:c1:81:1e:32:89:4c:b0:63:c5:0b:b5:
4e:2b:58:3c:f0:8b:4e:74:91:56:11:12:2f:16:cc:
82:47:ad:b4:67:ba:2c:74:5d:87:4d:8c:80:6f:87:
80:d3:22:26:e1:68:c9:3b:14:c9:b7:ce:11:6e:aa:
2b:25:1f:63:61:51:53:51:aa:96:b3:9e:2d:85:a7:
f7:41:19:8a:88:da:89:e3:62:06:36:6f:8f:f7:56:
8b:da:9d:1e:67:6f:6b:2c:4a:d2:1c:c1:7a:1c:b2:
39:fd:0e:3d:f1:98:dd:5a:97:de:7b:7e:73:da:6d:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:8C:C8:AA:09:0B:CE:4E:1E:7E:D4:9C:48:87:41:4A:58:FB:53
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:41:4c:1f:e4:dd:d7:b1:35:6c:97:28:4e:a7:4b:12:ef:
0f:9e:80:47:e4:92:57:44:3f:88:61:b5:20:33:ee:00:a6:49:
ff:1d:ed:b7:0c:76:27:85:53:67:e5:ee:8c:32:90:74:10:43:
0c:f1:75:fc:e5:b4:cd:81:4c:24:1a:dc:8b:53:df:a9:86:95:
a8:d5:ab:83:a0:8e:81:45:3e:df:f6:48:df:62:f6:3e:b1:af:
80:6d:93:50:14:98:7a:54:94:83:71:34:3b:ab:44:88:8c:7b:
58:71:f4:14:d8:b2:64:cb:77:6a:09:05:93:00:65:68:78:e0:
7d:df:53:82:d1:40:e4:db:43:84:40:1d:41:bf:80:78:56:de:
70:94:f1:d5:25:41:a5:23:be:54:38:c3:3f:7a:fc:61:8f:f0:
34:3f:a0:f5:60:23:86:f3:de:ae:a5:82:70:b9:05:d2:73:b6:
70:2e:f7:c6:4f:a5:a6:5b:53:31:74:62:77:2f:9e:f5:a0:93:
1d:52:db:5c:79:46:b7:e5:74:08:a9:05:7e:d2:ca:99:05:90:
e4:d1:2e:ed:ed:df:88:97:f5:07:83:2f:fd:1a:1a:1b:e2:0c:
f5:b9:13:90:c9:c8:ef:9c:fa:4b:bd:80:42:7f:93:fa:c8:6b:
a6:fe:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:12:30 2026 by rpki-client