Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: xwwlm9sBhP9EOpZRjCLjuOyc9jAmMMTINTT6J28T5WI=
Subject key identifier: 47:4D:B7:66:30:24:8A:BC:E4:22:3D:B4:4A:2E:CF:B1:19:D7:75:1F
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019EB9213F78DED3246B4611741AD01FB47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0975
Signing time: Fri 12 Jun 2026 00:00:24 +0000
Manifest this update: Fri 12 Jun 2026 00:00:24 +0000
Manifest next update: Sat 13 Jun 2026 00:00:24 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: +QHtfORbWSfX4sPoKL6id2o34Rf5X/UfWwskfZyetFA=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:3f:78:de:d3:24:6b:46:11:74:1a:d0:1f:b4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Jun 12 00:00:24 2026 GMT
Not After : Jun 13 00:00:24 2026 GMT
Subject: CN=474db76630248abce4223db44a2ecfb119d7751f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:04:11:3a:d5:60:f1:a2:39:40:08:89:53:
84:a4:d0:3f:98:8a:1b:4f:1b:bf:79:4b:65:17:f2:
5d:8f:cf:7a:b4:96:26:e2:b0:d5:08:cc:77:07:e3:
fe:49:bd:99:ce:3c:ff:41:00:ab:b9:64:84:c9:da:
88:32:2d:b5:1d:14:66:89:f4:d7:d7:35:ae:0b:ca:
6f:67:8e:24:9b:f9:a9:c6:91:19:f2:3c:a7:66:1f:
fe:30:25:e9:22:6f:f5:7e:da:33:49:e4:a7:a8:49:
92:95:b0:e2:ab:2b:88:2c:fa:29:50:26:f4:f8:d6:
e8:e7:ae:96:bd:3f:c2:dd:8d:78:1d:bc:36:c4:4b:
c5:c0:ad:37:f5:d9:3e:20:0d:88:76:8d:56:0e:d1:
64:b1:ea:55:de:20:8d:2e:53:19:02:df:ed:2e:62:
ec:dd:a6:d9:50:13:9c:3c:be:6f:69:ef:ae:38:b2:
3b:95:41:1b:76:7c:6e:00:56:22:bd:06:c7:ba:61:
15:56:a9:c9:a2:44:3a:1a:97:fb:48:81:10:c5:a9:
b0:b1:e1:97:0e:b9:28:1b:fb:cd:74:e9:a3:4a:81:
ab:d6:12:f1:73:cc:49:84:94:9c:c8:7d:d8:b8:95:
8f:6b:cf:e0:5e:f0:4b:de:6e:19:2c:e3:b5:76:a6:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4D:B7:66:30:24:8A:BC:E4:22:3D:B4:4A:2E:CF:B1:19:D7:75:1F
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:13:de:1c:6f:5b:76:e5:2c:7b:b0:67:fb:15:e1:36:36:90:
86:03:91:36:8a:6a:9a:a8:5f:e1:45:b1:1a:07:39:b4:24:b4:
24:b5:f9:08:3a:85:42:fc:de:ec:ed:4f:b3:f3:7b:fd:8f:1c:
2d:5c:32:6d:d9:b9:7f:73:ee:99:65:a1:39:6e:66:62:2c:73:
3f:94:49:87:b1:7d:4b:16:01:3a:8a:bc:83:67:82:4a:19:4a:
95:22:f5:1e:56:06:f5:4c:02:04:2a:49:f2:e4:ed:d1:76:92:
86:66:c4:ce:a3:86:35:eb:7b:af:ae:e0:62:db:b0:0f:4f:33:
a0:39:56:d8:8c:8f:83:38:1a:da:3f:f8:c2:0c:14:78:8e:3f:
49:76:34:20:15:6c:85:08:75:77:75:9e:b5:41:9b:96:a3:e7:
92:cc:18:45:75:ef:65:1a:21:00:cc:0b:cf:93:b2:31:8f:2e:
23:4f:9b:75:5d:d4:76:1e:30:b3:d6:0f:3d:db:01:72:8d:55:
2c:b6:55:f3:43:c2:5b:89:39:37:74:63:7e:9c:df:30:32:88:
5f:ab:b0:a5:68:2d:0d:73:50:36:4e:57:c7:8d:64:b9:03:b0:
e6:58:b9:62:49:38:30:8f:86:ee:f7:92:02:39:51:d6:db:08:
8e:f0:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:00 2026 by rpki-client