Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File: nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier: oLuYAZ1aJz5wceJrmMGpTla/fGSYDjsNtoHL8b/YYGM=
Subject key identifier: DB:58:5C:10:89:17:BE:30:ED:A0:2F:03:F4:41:D0:41:AD:3C:C5:9E
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 019DCDBD46882DCCB25C5068B9B46192BFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number: 140D
Signing time: Mon 27 Apr 2026 07:00:26 +0000
Manifest this update: Mon 27 Apr 2026 07:00:26 +0000
Manifest next update: Tue 28 Apr 2026 07:00:26 +0000
Files and hashes: 1: 62kCfgONuAvqW1NUbM9Iz08pfMI.roa (hash: fIRjeYSveZsnghNhWxl6roWSFefdl9H5Q1zHdhCDvwE=)
2: 6HVpZjDJK-JDd4JLU8A4rcuFHLs.roa (hash: kIuNG7jafmgHvYNR9Juw4bgFLOduPI1o7DgjWmXFliU=)
3: 9KvmlPKsY8w8aZTFNLv0zg38axY.roa (hash: E6UjIGV/KuRgFN4UQnHUeYYcpZAFdXo3JairE/1g8kE=)
4: CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa (hash: hbMTywJkxAoG5vlp7Fd9e3h3SO2hZD0EHWgX/IJxhMw=)
5: ELUa2vRm_h_Z93KcCk-HcWekDRU.roa (hash: ZBi1wRd/swMpVPnmEQ6bKzd+xCPdQKaLoo/Wn1BWpb8=)
6: J5ItodHrRCheXviqPMZtDDHgoRU.roa (hash: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg=)
7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: DbQAtt8/zyqyiox97/401HcjwO+tFEs6JtKtlNNF0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:46:88:2d:cc:b2:5c:50:68:b9:b4:61:92:bf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Apr 27 07:00:26 2026 GMT
Not After : Apr 28 07:00:26 2026 GMT
Subject: CN=db585c108917be30eda02f03f441d041ad3cc59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:e4:5b:f5:da:6c:97:4d:b6:10:64:6c:68:
67:0d:4a:da:b7:b3:3e:ec:84:f7:23:aa:14:2d:24:
a9:19:60:ef:5c:eb:95:83:3c:5e:2b:b1:df:4f:af:
b3:52:f2:8d:ea:b1:72:cc:7a:44:3d:d6:17:48:36:
5e:b0:5c:fd:76:bd:a3:9b:4e:08:30:c9:74:81:06:
42:31:2f:f6:f3:2a:c1:9d:01:65:a1:67:37:2d:fd:
51:65:5d:c6:74:0a:84:0a:86:39:fb:1a:fd:81:9b:
f2:1f:64:f9:69:0e:f4:63:d1:41:2a:a0:97:9c:83:
43:7c:54:c2:51:1b:9c:25:25:a8:34:63:38:b9:e5:
b3:3f:f1:51:e7:65:b7:c4:59:fd:32:19:93:4d:a5:
bf:01:b4:a9:21:51:26:5e:dd:52:18:50:78:64:e1:
30:d2:98:8c:00:29:6f:01:31:fb:67:77:ea:79:40:
a2:98:2e:5e:c1:7f:c5:d6:68:03:43:76:07:9c:9e:
27:7a:ba:91:6b:db:e9:07:24:7d:9b:8d:d2:67:ae:
9e:48:b1:09:8c:b1:13:91:81:1e:e3:63:1d:d2:40:
33:9f:00:56:60:29:03:d1:54:8f:23:e3:a0:f1:69:
46:c0:75:f9:d7:29:bf:8d:60:c1:4e:dc:91:c3:ca:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:5C:10:89:17:BE:30:ED:A0:2F:03:F4:41:D0:41:AD:3C:C5:9E
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cd:2f:ca:75:e1:24:32:f7:f4:d6:9b:3b:d2:01:61:ae:1b:
4a:45:be:a8:30:9d:62:73:87:15:ca:91:b7:e7:ac:24:73:ac:
05:1e:c7:4b:2c:dd:8a:3a:f6:82:37:dc:7c:a6:38:bf:c5:58:
1d:d8:0a:74:76:64:3f:ac:b8:1a:7b:af:02:3b:e4:c1:ac:9a:
34:b8:6b:7a:4a:88:7e:00:27:3d:3a:41:e5:bc:81:e0:eb:e5:
6f:6b:56:b9:e5:6a:24:f8:a8:c0:62:6f:c1:97:b6:91:8a:f3:
0b:4c:80:40:d1:68:99:d2:0d:40:f8:03:23:65:0c:42:93:6b:
a3:64:fb:8e:5c:89:63:a9:53:6e:4d:0d:1c:a7:bc:75:50:78:
c0:9c:1c:af:b0:0c:58:fe:2f:52:fb:28:b8:65:46:b0:6e:b2:
fb:80:fe:04:f2:50:e6:ad:f6:c7:a7:5d:78:9c:e9:14:62:0c:
61:91:ae:3b:e3:93:c3:af:41:86:11:f0:00:b3:c2:f7:21:df:
d5:80:07:94:bf:bb:86:0a:b8:56:15:ca:41:f7:70:e6:46:fb:
ec:6b:72:85:82:c3:a7:7b:90:1c:fd:88:11:eb:69:a2:e3:2b:
41:3f:f5:1f:3f:36:66:a0:5d:1a:81:a5:31:ba:7a:e9:f4:f3:
f9:8d:ed:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvUaILcyyXFBoubRhkr+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjYwNDI3MDcwMDI2WhcNMjYwNDI4MDcwMDI2WjAzMTEwLwYDVQQD
EyhkYjU4NWMxMDg5MTdiZTMwZWRhMDJmMDNmNDQxZDA0MWFkM2NjNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXHkW/XabJdNthBkbGhnDUrat7M+
7IT3I6oULSSpGWDvXOuVgzxeK7HfT6+zUvKN6rFyzHpEPdYXSDZesFz9dr2jm04I
MMl0gQZCMS/28yrBnQFloWc3Lf1RZV3GdAqECoY5+xr9gZvyH2T5aQ70Y9FBKqCX
nINDfFTCURucJSWoNGM4ueWzP/FR52W3xFn9MhmTTaW/AbSpIVEmXt1SGFB4ZOEw
0piMAClvATH7Z3fqeUCimC5ewX/F1mgDQ3YHnJ4nerqRa9vpByR9m43SZ66eSLEJ
jLETkYEe42Md0kAznwBWYCkD0VSPI+Og8WlGwHX51ym/jWDBTtyRw8p0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtYXBCJF74w7aAvA/RB0EGtPMWeMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI80vynXh
JDL39NabO9IBYa4bSkW+qDCdYnOHFcqRt+esJHOsBR7HSyzdijr2gjfcfKY4v8VY
HdgKdHZkP6y4GnuvAjvkwayaNLhrekqIfgAnPTpB5byB4Ovlb2tWueVqJPiowGJv
wZe2kYrzC0yAQNFomdINQPgDI2UMQpNro2T7jlyJY6lTbk0NHKe8dVB4wJwcr7AM
WP4vUvsouGVGsG6y+4D+BPJQ5q32x6ddeJzpFGIMYZGuO+OTw69BhhHwALPC9yHf
1YAHlL+7hgq4VhXKQfdw5kb77GtyhYLDp3uQHP2IEetpouMrQT/1Hz82ZqBdGoGl
Mbp66fTz+Y3thg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:02:43 2026 by rpki-client