Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: h2Z7PIpLYJHDjlIbV1JHzvJfOhxgMtNbwVJWtz22BMk=
Subject key identifier: 9F:B0:23:F1:87:E4:8B:99:3C:C4:3A:D8:C5:8C:7B:7B:85:58:2F:5B
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 01A1931FE649259C716BDCB9368D472471C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0AEF
Signing time: Sat 31 Oct 2026 18:01:43 +0000
Manifest this update: Sat 31 Oct 2026 18:01:43 +0000
Manifest next update: Sun 01 Nov 2026 18:01:43 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: /Wway3FytuY750ATZWNLbQjeo9sBtStcekMb15VEwVs=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 18:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:1f:e6:49:25:9c:71:6b:dc:b9:36:8d:47:24:71:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Oct 31 18:01:43 2026 GMT
Not After : Nov 1 18:01:43 2026 GMT
Subject: CN=9fb023f187e48b993cc43ad8c58c7b7b85582f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:be:eb:b3:4c:30:9a:02:a1:9f:ce:fb:ea:
fa:b7:05:6d:9c:55:e6:5a:57:13:a3:f8:4d:c4:f5:
3a:6c:92:03:8c:04:09:a5:86:b5:33:94:f0:fe:6c:
4c:f5:eb:16:1c:0a:9c:f4:46:4f:25:3d:1a:c9:31:
e0:3e:3a:e6:94:55:29:cf:06:b5:d9:e7:b1:ff:ff:
51:52:7d:86:85:ef:0a:4f:81:49:28:d0:9e:16:f0:
cb:c1:0f:8d:12:80:ba:69:c7:71:06:89:51:a5:87:
19:78:30:0c:e0:20:ba:cc:61:ac:e8:05:b2:5a:fd:
36:f1:a0:a9:06:0c:bd:36:6e:fe:a6:82:a2:09:67:
12:c7:36:3a:34:e2:e4:7e:42:3d:05:d9:a5:26:28:
cf:87:ca:b0:f4:05:08:3d:55:ef:d9:8b:cd:1f:29:
1e:31:c5:bd:29:02:44:0d:f3:71:34:58:63:1f:59:
9c:d7:29:e5:49:16:06:99:9e:5e:5a:cf:4b:e1:4f:
89:7b:08:3d:5d:41:b9:a6:9e:80:9a:23:cd:03:54:
78:fa:bd:85:7e:c1:07:f2:41:5e:f4:f4:e1:ee:20:
53:bb:45:f7:42:9a:1d:f7:68:28:03:db:21:01:1d:
57:9b:67:e0:47:b7:8e:47:f8:c9:eb:e3:68:a1:59:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:23:F1:87:E4:8B:99:3C:C4:3A:D8:C5:8C:7B:7B:85:58:2F:5B
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:dc:c5:d6:64:c1:6b:8b:5d:37:45:7a:af:1a:c6:7b:bc:
53:b6:85:4c:56:4b:7a:da:02:b8:99:98:d8:a8:51:64:69:fa:
8f:07:eb:38:72:12:fd:8a:9d:59:b6:0f:cf:6a:0d:54:ad:54:
c4:69:aa:2e:a9:53:5b:8c:17:0f:9f:86:8d:17:43:c5:d6:b9:
dd:ef:5b:14:88:c4:19:bd:3e:b4:39:ae:94:2c:51:83:d0:93:
90:66:82:06:f8:e3:eb:3d:5c:7d:49:c5:8e:0b:8e:49:9b:df:
28:a7:3c:e9:7a:12:e9:2f:38:69:b5:96:60:89:32:47:9c:32:
4c:31:e1:de:87:e2:6f:54:ba:76:82:34:92:49:84:81:8f:40:
8c:6c:bd:fb:ff:d7:f7:fe:59:13:e7:89:42:cd:d5:de:15:31:
8c:93:cf:dd:35:09:15:46:cb:54:07:1f:73:04:be:d1:e0:00:
a9:da:9a:37:35:52:e8:d2:e4:da:05:73:31:1f:f0:70:05:82:
ff:3b:a1:3e:81:28:89:a4:5d:3a:81:36:fd:fb:28:94:ff:88:
c4:7c:47:81:b6:62:d3:50:05:d5:fd:f6:ca:32:11:91:64:a8:
8d:3d:ba:4f:11:a4:ba:79:41:d8:a5:f1:56:90:ec:0c:db:a6:
4d:dd:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:54 2026 by rpki-client