Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: aAZs6Db1KjAjgNtLizzcQJAEshrCK//IkKM3sC+luzQ=
Subject key identifier: 6C:27:C0:42:16:A3:CE:6B:BB:BB:02:98:1C:C4:D1:7F:C7:8C:75:4A
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019D38D35741EDB73C8E8C65E44E13E71A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0CBE
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: 4uh606MyeVpnn/WlWmqyQkIwMM4GymzjaAh4cK04YUI=)
2: X2dDxuQy5C2iRkWsBYanoWzzFBA.roa (hash: BH0EGwq9/zGZL3BbgmxWs2ULLI0cGkQKECrJ00Vi4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:57:41:ed:b7:3c:8e:8c:65:e4:4e:13:e7:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=6c27c04216a3ce6bbbbb02981cc4d17fc78c754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:74:7a:f3:4b:10:23:e6:52:83:8b:5d:39:
e9:78:31:d2:3e:7e:ce:0d:3e:12:a3:bb:cf:6b:91:
22:35:e0:28:ce:ea:51:e0:4c:be:da:21:9e:6c:d5:
88:99:f6:25:b2:22:c1:bc:9e:7c:78:12:b4:30:07:
2e:40:29:07:56:24:24:e2:32:d5:88:9a:26:58:a8:
46:47:1f:46:0f:5c:ef:18:fa:49:b5:f5:5f:9c:0f:
34:8b:e7:21:5c:c5:62:4e:b5:a1:11:34:d0:a6:55:
b8:f2:b0:82:04:7d:40:68:7d:40:c1:fe:0a:b6:d8:
cc:d0:f9:5c:ed:3c:e6:4b:e6:ea:68:0d:bc:8b:02:
fd:d3:8a:da:56:31:05:d2:b8:64:c0:49:0f:6f:d1:
de:f8:9a:5e:f6:ba:98:d9:d8:60:31:f0:15:ae:08:
45:aa:50:e7:a4:c6:7e:0a:6f:30:91:d6:3b:ac:bd:
3f:01:df:9a:24:49:61:2f:f1:1b:2f:3c:ea:2b:3e:
dc:d4:2b:4a:1c:0c:df:3e:60:7d:c7:08:a7:c2:5a:
26:f3:1a:b0:e1:48:e9:95:dd:3e:c1:52:4e:ec:0b:
17:57:56:3a:26:ce:6d:b2:51:67:5c:81:7d:c4:e7:
16:59:c8:f7:eb:27:dc:85:50:0b:d4:da:ab:4a:88:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:C0:42:16:A3:CE:6B:BB:BB:02:98:1C:C4:D1:7F:C7:8C:75:4A
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:92:69:a3:41:48:7b:5c:1c:53:9b:b0:1d:97:71:0a:da:
89:9a:df:5e:5c:a9:3b:0a:05:bc:f3:f0:d7:75:79:d7:2b:ff:
4f:bf:32:9c:fb:80:d2:ce:c8:9c:12:cf:2d:b6:bb:39:c3:de:
64:61:33:0e:94:57:74:54:35:3c:84:00:ad:46:3c:fc:0e:50:
f7:96:32:80:9a:4a:ff:31:c5:71:c4:ae:d4:d1:1e:d8:7e:ee:
65:03:39:9d:13:13:08:c5:cb:b7:c2:52:d1:4a:d5:8e:69:5b:
5a:42:03:e4:6b:8c:03:4d:0b:ea:b0:49:5d:53:ca:5a:b3:10:
c9:7c:b6:d8:32:e5:9e:27:f5:19:4b:d8:5e:ee:5c:0a:a1:50:
a4:f1:9c:34:d6:ca:3d:47:68:8f:f9:c8:19:0c:75:19:63:e7:
b3:56:28:d0:ad:d0:19:38:30:0e:0a:e6:8e:29:47:44:a7:ce:
0c:54:15:4c:6f:c8:93:2e:7f:1e:d4:02:fa:67:18:dd:24:13:
38:b1:f4:23:8d:a3:81:94:42:1a:7a:8d:07:98:c5:ff:e0:1b:
c8:45:8d:32:2c:76:b4:c6:96:06:5f:4d:4c:59:3b:6e:64:91:
6f:56:35:50:ba:73:8f:1a:a8:49:33:7d:1f:73:c8:4f:0a:ba:
73:ea:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:16 2026 by rpki-client