Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: Rq6h1yLEKes5640V/z52tvbY3EW3SXIK/NtVwCq43Kc=
Subject key identifier: E3:BD:56:49:10:00:44:59:00:4A:C9:20:B1:B7:AC:42:3D:DF:E5:9F
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019D38D336EF5B2C1558D203ADB0C124BDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 08AE
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: Fsi0oy/hqvcikeH1X2E7X5M7lizJSkdqzAHS7SsxZhw=)
2: pWavHUUzAwxTJRX5MQB2UnJBUSU.roa (hash: Ea1t0eFORl+Vva1qLechf5+/3bT67LM0/+CaezCZsSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:36:ef:5b:2c:15:58:d2:03:ad:b0:c1:24:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=e3bd564910004459004ac920b1b7ac423ddfe59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9c:78:52:5b:9f:4a:ae:e6:68:24:64:c3:ae:
e5:74:cd:bd:4e:f6:ec:e2:1f:4c:93:ae:97:89:1c:
b0:95:25:72:83:0c:fc:fc:e4:41:42:93:d6:45:e2:
27:84:ec:a0:6f:e8:c3:72:ce:b5:2f:7b:54:b5:88:
3e:3e:6e:c7:2e:dc:cc:89:e4:71:04:50:b6:98:0b:
8f:c9:7a:43:c7:d4:4b:b3:3e:e1:49:f8:4b:1d:7f:
01:57:f0:53:04:4f:1d:dd:a0:36:df:7d:ea:d8:d9:
ca:ba:1a:6e:e2:9a:33:18:e6:59:74:a7:d4:10:e3:
b8:59:77:5d:2c:c9:89:93:f4:22:da:8c:a2:26:1c:
6d:7e:2d:11:0f:91:1a:e4:82:33:48:36:63:e2:f1:
dc:54:5f:19:9e:7b:8e:62:5e:a9:59:6a:62:c6:59:
2d:fc:7f:1a:3a:ea:de:f4:93:b1:3c:0a:75:67:ab:
61:66:68:b4:60:2b:dc:08:f6:91:48:a2:ff:9b:d2:
7d:e0:7b:2f:5f:35:b8:cd:de:11:1a:8a:de:4c:42:
3b:2e:a0:07:60:41:8c:67:92:2b:0a:4f:e4:46:59:
da:63:de:fe:55:5a:4a:5e:d4:00:02:13:2a:83:18:
5e:e8:db:a9:f7:bf:18:ce:02:07:3d:cd:e1:30:11:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:56:49:10:00:44:59:00:4A:C9:20:B1:B7:AC:42:3D:DF:E5:9F
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8f:11:13:3a:64:f8:8c:a8:10:f0:ed:73:15:db:7e:e4:0a:
40:76:94:03:85:84:42:6a:c1:f2:1a:56:18:a2:fd:65:5f:02:
1b:01:3c:3d:9d:6c:c7:ab:1f:65:8f:12:e9:5b:c8:38:c3:c4:
a5:7f:7d:1d:79:43:60:75:02:71:2f:9b:4f:4a:e8:a3:2c:67:
f7:03:4c:31:56:61:3a:9b:a5:ce:ab:29:58:dc:d0:45:92:73:
43:31:17:5a:4d:c5:50:fe:86:72:f8:aa:30:db:c1:4e:f1:9f:
0f:cf:dc:40:95:57:c8:b6:78:ce:37:26:f7:f1:b2:b4:68:c3:
13:62:7a:8c:4c:09:c2:9c:d5:1f:5d:59:21:72:63:41:9c:02:
64:31:4a:95:31:93:f2:c4:41:1b:ad:41:dc:06:98:f8:54:08:
83:5d:17:61:ea:51:85:b8:b9:ab:75:b1:9b:3a:20:a5:72:27:
c2:9f:9b:6e:75:2a:03:66:f1:bd:f1:a3:e8:60:0a:73:ed:5e:
cf:b2:7f:63:c2:e5:a3:4c:c4:1e:bf:a5:f6:51:64:39:72:ed:
39:46:96:4b:97:34:78:0b:4f:7b:9e:4a:02:3e:57:7a:5c:99:
df:eb:df:20:4d:84:7d:42:08:45:70:2d:4b:89:a9:90:89:1e:
cd:7e:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:14 2026 by rpki-client