Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: KKGG702g77XBT/vncQ+56QPkChABRHwtbRLbeS2K8OA=
Subject key identifier: 9B:6D:39:58:44:E9:AE:83:21:11:C5:62:AC:B7:E5:CC:40:88:D8:58
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01A00213E87A56B94385B2F148B06E49E400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 04EB
Signing time: Fri 14 Aug 2026 21:00:54 +0000
Manifest this update: Fri 14 Aug 2026 21:00:54 +0000
Manifest next update: Sat 15 Aug 2026 21:00:54 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: ASqWLof0ZUIJ8AMTG09s+afcp3VWpqIOO+XH0CxtwzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:e8:7a:56:b9:43:85:b2:f1:48:b0:6e:49:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Aug 14 21:00:54 2026 GMT
Not After : Aug 15 21:00:54 2026 GMT
Subject: CN=9b6d395844e9ae832111c562acb7e5cc4088d858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:3d:97:d4:4e:4c:1e:0e:e5:67:03:8d:33:
f7:65:16:67:14:98:0e:da:03:0a:f0:3a:68:d9:35:
3d:1c:10:4a:a8:09:a3:7f:44:ef:93:94:b9:25:ff:
f4:24:9d:88:c1:90:7e:ae:9f:0b:78:04:70:ab:85:
34:07:88:cd:91:ac:c2:62:87:85:8d:64:4b:86:d1:
1f:0a:03:42:8c:e8:09:12:88:66:0c:f4:c5:60:0f:
f5:48:ba:1f:d9:40:c7:99:a8:bb:67:30:69:f3:d7:
8b:c1:bf:6e:35:4f:05:ad:fe:94:fb:93:37:01:de:
f1:86:08:38:3f:31:b5:19:a0:a3:52:4b:dd:f8:27:
44:69:b6:3d:2a:53:c5:46:03:c6:2f:50:b6:a2:a1:
2a:b5:cc:30:62:9b:59:c5:75:e3:0b:25:6c:c0:4a:
ac:0b:6e:1f:0b:c7:96:88:77:7b:73:d0:a5:f1:c1:
31:f0:3e:71:c8:24:72:54:c7:b4:1f:51:84:9a:70:
28:4e:28:60:13:b0:c4:ac:d8:9a:d2:c3:31:24:d7:
4d:88:35:1e:74:6d:a3:40:f9:27:34:cd:66:08:c1:
79:89:b9:69:ab:79:8d:fd:a0:bc:71:2d:7b:d8:26:
5f:d1:14:56:9e:ac:34:3c:5f:fa:55:b0:6a:f5:93:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:39:58:44:E9:AE:83:21:11:C5:62:AC:B7:E5:CC:40:88:D8:58
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:41:59:6a:a1:49:5d:11:1e:e3:88:50:35:32:c9:02:56:
14:39:1b:82:35:fa:1f:84:20:cb:89:14:58:d1:62:37:7e:e9:
8c:63:1f:91:e5:5e:26:64:d8:e6:61:a1:38:47:ff:e0:76:91:
7d:74:45:20:b8:87:3a:c9:20:12:fc:7b:8e:a0:85:fd:5c:1a:
22:67:90:f8:ba:12:69:5c:1e:66:19:95:1a:d7:b5:86:1c:da:
8a:1d:4f:2f:3e:05:54:00:a4:03:9e:3c:f2:2a:99:7b:27:d6:
68:23:78:8d:1f:af:b4:b6:f2:b8:ca:9b:32:bb:44:09:ab:97:
47:1a:d4:ef:f5:42:b0:74:06:52:63:24:02:84:df:06:d3:11:
0f:b5:79:50:6b:98:02:33:d1:2d:a5:83:28:14:7d:d6:da:27:
ba:d5:e4:4a:a6:42:73:d5:13:a9:55:b0:e1:37:c8:6e:85:f5:
29:9d:30:c4:84:70:cc:9c:c0:f6:e6:6d:ba:62:33:dd:29:c7:
3b:8d:33:5c:7c:c2:c5:a0:19:6e:1c:5d:c7:d5:10:cc:22:ff:
7d:7a:de:ae:8b:65:75:8d:1d:11:67:d2:4d:9a:49:7e:9d:46:
dd:2a:43:e2:77:0b:5f:5f:53:b8:28:c1:bd:e5:5c:49:2b:48:
63:78:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:38 2026 by rpki-client