Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: euKlfcDSm+YrFfWo969jebQ0/zzprc0oDWOOuBGjhf4=
Subject key identifier: A6:64:57:FC:63:D8:4B:5A:E3:D3:09:E5:78:24:03:A8:CB:1D:BD:59
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019D39E58AEF4E72F702FA738D0C9611842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 037A
Signing time: Sun 29 Mar 2026 14:00:37 +0000
Manifest this update: Sun 29 Mar 2026 14:00:37 +0000
Manifest next update: Mon 30 Mar 2026 14:00:37 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: iKV/fZY3/WF4hLcDjtZqhuzH8HfvI/0UKa+FfIvw270=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:8a:ef:4e:72:f7:02:fa:73:8d:0c:96:11:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Mar 29 14:00:37 2026 GMT
Not After : Mar 30 14:00:37 2026 GMT
Subject: CN=a66457fc63d84b5ae3d309e5782403a8cb1dbd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:f7:9f:67:1c:31:c5:b1:20:96:c6:e1:bc:
af:36:8b:02:09:22:41:30:1a:ea:8d:cb:eb:50:5f:
a1:e8:b2:92:9b:ad:48:37:89:7a:80:00:a2:96:64:
b3:b5:7e:80:56:ab:fc:66:c9:22:58:f8:b7:a2:ad:
c8:7f:4f:2f:fa:b5:63:e6:c4:91:8e:65:38:36:8a:
1c:73:28:19:d7:47:dc:3e:50:1d:36:5b:ad:03:80:
ce:6c:6b:dc:d7:16:6a:e2:67:69:a0:e9:23:0b:ac:
57:69:3c:67:23:df:b7:f5:73:9c:53:75:c5:37:37:
5b:f9:5e:b2:41:4b:29:a3:47:c6:73:42:5f:e5:79:
8f:88:cf:09:2b:4a:bc:44:cb:78:69:7a:a7:b5:c3:
16:3e:cd:11:04:53:de:8d:09:4c:f5:1f:f9:cd:57:
ea:ae:e6:d6:fc:c9:3e:f8:a7:8d:e9:49:40:4d:ff:
28:96:f8:50:90:7b:ae:3e:cf:51:98:29:f4:6e:61:
22:0b:a0:ed:51:27:13:b7:25:99:f8:da:15:a0:d4:
9a:7d:75:de:6b:13:1b:0c:1c:b0:6e:74:44:d5:45:
ee:6c:71:4d:3d:83:4f:77:ca:d0:a8:0b:be:05:06:
e8:d9:51:cb:a3:14:e4:d7:88:f3:02:89:cb:50:ef:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:57:FC:63:D8:4B:5A:E3:D3:09:E5:78:24:03:A8:CB:1D:BD:59
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0b:b4:ba:b5:c8:44:fa:6d:c5:3f:ae:83:31:2b:f6:26:e0:
c3:a3:3f:a9:2b:a4:ee:65:89:f6:97:cf:0f:11:29:6d:ed:25:
d3:46:fc:03:37:33:87:ea:67:71:d9:4a:08:47:01:05:9f:a6:
9a:78:dc:bb:0a:69:c0:75:f1:d1:f4:13:b0:20:a7:cd:67:62:
a3:fc:c2:e1:ce:16:f8:38:f1:a4:fe:c7:0c:66:83:e5:5a:b6:
0a:04:94:14:84:4f:8d:73:9b:ad:e2:e4:b0:d6:59:9e:cf:fe:
36:bb:cf:9c:33:b4:37:f3:31:4f:04:30:24:31:5c:c3:99:4a:
70:ce:72:7c:c7:4c:c0:61:e0:ed:d3:76:bb:ec:95:d1:7d:85:
a0:1a:b7:d4:d3:c9:ed:45:3c:2f:1e:91:4b:46:27:00:b6:1a:
7c:5e:f4:6a:77:87:c7:08:8b:50:78:d5:69:23:a9:d1:e8:54:
ec:6e:24:1e:1b:73:10:1b:63:96:de:14:58:7c:b8:82:07:df:
0c:5d:9d:b8:40:0f:93:7a:b4:3d:c3:1e:c7:05:83:23:86:1d:
a2:db:73:5e:4d:76:7a:a2:0b:43:87:62:bb:70:15:aa:7e:fc:
49:56:98:3e:16:47:9e:38:96:21:d5:c3:27:02:1f:73:e5:8b:
bb:e7:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client