Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: daA+tfTkHXqp82LmsogG+sHjXymP4Y9xtXXZ9SDZ5bs=
Subject key identifier: 7E:96:66:3F:34:25:76:F7:FF:D4:0E:3E:1E:87:41:F7:E0:C1:3F:F1
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01A11DF675B20649F7BABB33405B6C014587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 057E
Signing time: Fri 09 Oct 2026 00:00:53 +0000
Manifest this update: Fri 09 Oct 2026 00:00:53 +0000
Manifest next update: Sat 10 Oct 2026 00:00:53 +0000
Files and hashes: 1: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
2: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (hash: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: ++v8bosJ+APhUlKzQNNxo6EysjObSgZVlqUPKBvRjHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f6:75:b2:06:49:f7:ba:bb:33:40:5b:6c:01:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Oct 9 00:00:53 2026 GMT
Not After : Oct 10 00:00:53 2026 GMT
Subject: CN=7e96663f342576f7ffd40e3e1e8741f7e0c13ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:c4:ec:f5:ad:4c:0e:64:cb:e4:f2:c8:7a:
fe:dd:93:a5:15:79:e6:19:5a:8d:90:e2:09:2a:d2:
32:1e:70:e3:ec:db:a8:82:02:da:34:84:92:80:95:
aa:19:e1:98:ee:6d:f8:5c:e3:92:12:29:2d:cd:c8:
9b:b1:bd:52:ba:0d:21:bb:c9:7d:a8:cb:8c:36:1f:
84:81:ba:01:f2:d9:2f:2f:98:5b:99:0b:36:94:31:
f8:cc:8c:2e:50:ce:41:53:7a:ea:57:19:92:0c:42:
b6:30:7f:79:c5:92:64:96:20:8c:db:31:93:9b:e9:
de:4b:94:b5:95:de:80:e3:67:b7:74:6c:7b:1a:28:
ee:10:d4:82:7d:97:70:06:27:2f:73:c0:47:ab:22:
96:8a:ee:c8:b8:b0:39:ce:01:64:9f:91:81:8b:06:
2d:d8:ca:52:7c:23:25:61:10:ae:fb:be:9a:4f:5d:
96:03:2e:e1:ec:3e:e2:8c:06:92:ab:44:69:84:2c:
6e:2d:af:06:05:2c:e8:f7:00:fc:15:ac:89:c5:38:
2b:bb:52:56:4f:e7:5b:0a:20:99:20:c2:84:4b:ea:
80:f0:a0:9e:31:0f:59:33:d2:1b:64:64:91:20:78:
24:37:10:04:87:a5:c9:94:78:5a:3e:8b:3b:fa:ef:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:66:3F:34:25:76:F7:FF:D4:0E:3E:1E:87:41:F7:E0:C1:3F:F1
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:9a:74:20:41:6c:34:f0:6e:f5:be:23:70:60:32:d9:94:
42:75:be:d3:ef:f1:0e:2f:92:3a:d3:be:4f:50:8f:bf:f7:a3:
ac:02:d7:19:bf:a5:9d:c2:6e:25:3e:6c:79:70:3a:0a:8e:e5:
1e:e5:37:1e:d6:b0:09:27:52:cc:a9:38:37:e8:51:4a:fc:96:
f6:26:45:52:3e:d0:e7:6f:82:9e:2e:6d:de:6f:fb:4f:24:c2:
9c:ed:bd:a3:5e:94:4d:54:b2:0a:44:56:c3:e2:e0:a4:f5:33:
dc:55:3e:a1:4a:0e:85:e7:5d:7a:76:3b:a2:31:fb:e5:f6:2b:
c6:66:8a:1b:8b:fa:5f:4c:01:bb:57:ce:bc:20:50:2e:13:4d:
92:55:08:ec:33:99:3c:61:2a:f7:a6:1e:0a:51:43:75:e5:79:
a5:4a:8a:5f:ce:52:ae:01:2b:97:48:17:1b:64:7f:bf:43:4e:
74:fb:c2:bb:78:6e:2d:c9:26:ed:35:44:fc:18:11:1b:c8:73:
c7:19:d3:2b:f6:73:5c:e8:b3:f6:ce:f7:c7:bf:0e:87:aa:db:
11:80:91:cd:d1:ae:42:5d:74:84:3d:1d:a3:e2:69:fe:4b:64:
d4:b2:cf:1e:37:09:18:00:1e:0f:4e:ee:0d:2d:f9:63:12:89:
61:3e:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:27:13 2026 by rpki-client