Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: Y//7ZUrYLF9RdoqQy4EzXQ4rkBuSpwfRjHpxFMCgj3o=
Subject key identifier: 37:70:5B:90:1B:E6:2B:8E:33:76:52:5F:C1:AC:37:23:F4:A0:E2:52
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019F111C7D7988B2612B274B9878DB22EBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 046E
Signing time: Mon 29 Jun 2026 02:01:47 +0000
Manifest this update: Mon 29 Jun 2026 02:01:47 +0000
Manifest next update: Tue 30 Jun 2026 02:01:47 +0000
Files and hashes: 1: DDkvvm20UwOj8A7Y_U-N1JKON2M.roa (hash: CztSHRDK9GU8Z8Q6g/s60OYynXKDEVEnijjY44XdV/w=)
2: II-mNRJBRoH0hQMMKCeCGneFnl4.asa (hash: wCvYKk1XkMB3sVVl14x75GvopO0ZBXWoRhVJ3gqqcI8=)
3: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: i2qwKOUyHXwtJCeLzJetmy5HR023ujSn12PMsMUf+C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:7d:79:88:b2:61:2b:27:4b:98:78:db:22:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jun 29 02:01:47 2026 GMT
Not After : Jun 30 02:01:47 2026 GMT
Subject: CN=37705b901be62b8e3376525fc1ac3723f4a0e252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:6e:79:55:a5:80:78:88:c0:bd:f2:35:91:
86:f8:4f:54:1b:45:47:7e:43:fe:7d:5c:6b:86:a0:
fa:a6:53:33:f7:69:ff:9e:da:35:54:ce:ae:79:ae:
dd:41:2c:2f:36:6b:a0:7b:17:ef:af:c5:9e:16:a6:
2d:b3:3f:58:e3:98:02:62:37:d5:82:84:ac:91:9d:
31:9a:49:d4:7a:63:40:f0:67:56:6f:d0:1d:c1:1c:
52:c3:1a:07:ff:cb:49:cd:ca:9b:8a:59:85:ec:ac:
96:11:2c:03:9d:8b:fb:9a:8d:6f:cc:10:55:ce:f0:
1c:ad:45:f4:83:29:b1:03:a7:46:68:4a:56:4a:a3:
7c:7a:cd:08:de:e8:50:b6:b8:ac:1a:f4:74:f8:68:
61:7f:09:8f:5c:6f:ee:bb:41:af:c6:f8:f1:2c:ac:
85:6a:a5:6a:ca:75:4e:68:47:d9:7a:eb:45:ad:7f:
89:ac:9a:d7:6f:70:1a:9f:b9:b7:7e:3c:65:0c:da:
17:31:be:14:08:3e:74:23:eb:a3:e2:41:64:a5:a5:
79:b7:13:bf:5a:4d:53:f0:95:97:e7:1e:3b:dd:70:
d1:ff:da:bc:8f:b4:04:95:64:8f:a6:41:93:42:54:
23:7e:60:4b:c2:26:28:c3:d5:3e:12:9a:20:62:74:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:5B:90:1B:E6:2B:8E:33:76:52:5F:C1:AC:37:23:F4:A0:E2:52
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cf:ba:a4:af:ab:49:4c:da:4d:ea:93:7b:f2:36:c8:77:51:
71:ba:84:ac:b7:23:47:4d:10:d8:ea:eb:e7:11:06:76:71:04:
02:f2:92:16:82:f0:ac:fa:f2:96:09:3d:8d:c5:2f:df:b4:bf:
24:fe:ef:ba:82:14:21:29:c4:c3:7d:41:af:62:ac:d3:de:ea:
de:95:7c:6e:d8:f6:af:6e:c0:21:dc:a3:65:73:be:53:79:2f:
8e:e5:b9:fa:87:85:3f:4f:58:fd:d2:5f:05:dc:fc:68:20:ea:
89:7f:66:f5:a8:b3:c5:ac:1f:f0:01:6a:6e:bb:bb:f8:01:da:
30:92:af:3d:48:ec:04:6d:a6:55:dc:75:ec:18:9d:fc:b3:1c:
4a:74:c7:78:80:50:28:b4:49:12:17:dc:f4:4a:e1:33:68:8c:
a5:7b:a4:e6:6a:d6:bb:13:5e:20:49:5c:34:42:9a:9c:40:50:
88:67:7a:2a:7b:90:76:6b:54:79:cf:79:07:35:98:21:6f:95:
1a:70:6e:18:a0:89:dd:e4:8a:69:42:a2:4a:88:a2:cf:55:18:
ed:92:0a:f1:8e:f4:ca:7e:e2:d5:5e:b5:c9:76:4a:1c:93:0e:
c6:77:a1:a0:56:64:8b:19:ce:33:ff:f9:86:c9:7d:b1:25:eb:
d8:21:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:49 2026 by rpki-client