Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: R3PNgzCDnvMEr4rL3nyozpebZm67XRleiqE3KC0ppIE=
Subject key identifier: 07:D1:F1:3E:F5:87:5C:E2:E7:43:5D:66:15:75:8E:FA:71:09:26:73
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01A08A8CED6E40C1221228436B4EA9CD24EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0A66
Signing time: Thu 10 Sep 2026 09:01:26 +0000
Manifest this update: Thu 10 Sep 2026 09:01:26 +0000
Manifest next update: Fri 11 Sep 2026 09:01:26 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: aqKeBuWCPwwfyjKRkkhoImhWfdwLoa78r0+guSUpSMs=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:ed:6e:40:c1:22:12:28:43:6b:4e:a9:cd:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Sep 10 09:01:26 2026 GMT
Not After : Sep 11 09:01:26 2026 GMT
Subject: CN=07d1f13ef5875ce2e7435d6615758efa71092673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:3a:f7:cd:2c:e7:43:62:a8:ca:fb:e0:c2:
10:a8:fb:dd:80:ff:4f:20:f3:1a:12:7b:b8:55:12:
ca:71:08:9b:e7:f7:d0:7a:f6:54:6f:c7:fe:d3:e7:
5a:f8:f2:e8:ad:ac:0b:45:9c:1b:c4:5b:d7:d1:84:
05:bb:53:69:ef:4f:54:14:6d:3a:4e:ba:ce:6a:50:
df:63:ec:35:49:d0:7f:6b:20:f0:6a:dc:64:06:bc:
73:ad:9b:27:df:6e:4c:db:dc:72:81:28:ac:74:fd:
e6:4a:02:40:e7:1d:aa:04:ac:ee:36:16:66:d2:3c:
55:53:b8:32:35:17:d3:cd:ee:ef:51:ea:7b:6e:17:
e6:9a:c6:bd:78:d5:79:71:be:20:08:8d:27:f9:c6:
2b:70:d5:10:ed:af:df:44:8a:ea:b3:b9:35:64:00:
df:dd:49:dc:bf:69:4d:cd:4f:1d:9d:42:a8:72:95:
49:e8:6f:d0:36:14:14:a3:db:6b:5f:c5:37:bd:d1:
d1:e7:f2:28:62:14:c2:aa:5e:78:65:e3:0a:74:bf:
36:1e:99:dd:7d:d9:09:23:ec:1c:f3:8d:f2:14:43:
5f:2a:37:05:b8:92:57:83:3c:de:8e:69:4f:0d:02:
f4:36:b9:1c:ca:83:c5:99:16:95:98:eb:71:5f:86:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D1:F1:3E:F5:87:5C:E2:E7:43:5D:66:15:75:8E:FA:71:09:26:73
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:36:a2:f7:ca:10:68:9a:47:5c:80:4e:9f:c6:0a:3f:ec:
3f:55:aa:a0:09:a5:7c:aa:f9:cd:1e:c0:b6:a6:a1:f0:a3:99:
1a:1a:be:89:c7:db:77:1c:c1:18:d6:9d:3f:95:95:36:95:9e:
bb:aa:8f:b0:99:cf:35:f2:5e:98:18:43:2d:46:10:4b:fc:ee:
ee:c5:54:6f:7d:c6:b3:8e:c3:df:8a:9d:eb:d4:7b:a6:ed:32:
7a:78:68:0d:74:55:ee:d3:02:a2:38:9e:9f:02:3f:84:76:9e:
6f:a8:fc:44:80:e4:09:dc:30:a8:87:38:25:1f:9c:bc:3d:44:
1c:25:5e:86:f4:74:c1:70:b0:66:b1:18:bf:52:e0:8b:85:0b:
7a:de:cd:96:f9:5a:ee:7e:db:df:af:bf:7c:d0:9c:a6:a0:f4:
0e:f9:6f:c1:f9:c8:82:8c:db:67:0a:6f:1e:a1:33:47:82:ad:
66:fa:71:70:85:b0:27:16:b9:e5:05:03:3d:10:85:36:a8:48:
fa:d2:9a:8f:da:64:e8:2d:d2:15:5b:e9:17:31:d6:00:24:ed:
9f:28:12:67:f5:73:52:66:4e:83:6f:31:a7:b5:fb:6f:a7:ad:
58:99:c9:f5:ad:99:ea:65:69:41:32:45:67:5e:69:fa:b1:12:
0e:d5:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:36:27 2026 by rpki-client