Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: 2Q/fMHyJIlAGk3mxohk923Nt700CrhFin8l38HEFWLc=
Subject key identifier: 70:A6:8C:4B:AC:4E:FE:8C:AA:57:D9:0F:C1:2E:5F:D5:D0:C1:8F:D6
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01A08C43DB605A76BBADC865EA147D1032DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 1309
Signing time: Thu 10 Sep 2026 17:00:52 +0000
Manifest this update: Thu 10 Sep 2026 17:00:52 +0000
Manifest next update: Fri 11 Sep 2026 17:00:52 +0000
Files and hashes: 1: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (hash: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: g7rd+WJ+gQwhHvqltqfb7MQ8xlit6IH3Fu+21jk5gto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:db:60:5a:76:bb:ad:c8:65:ea:14:7d:10:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Sep 10 17:00:52 2026 GMT
Not After : Sep 11 17:00:52 2026 GMT
Subject: CN=70a68c4bac4efe8caa57d90fc12e5fd5d0c18fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:f2:a7:3d:fa:b1:f0:76:06:16:e3:e5:4f:
77:19:3d:f4:ca:a2:c3:ac:72:98:d9:8e:10:12:e7:
86:d6:9a:46:35:14:ed:6d:42:cb:d8:4e:0c:7d:22:
cb:fe:cc:91:9d:e0:b2:64:34:40:7b:c2:7b:b1:81:
3c:ed:df:45:63:b2:ac:ee:17:f0:ec:cc:fa:25:5c:
51:b4:3b:7d:e8:c9:e0:63:d0:d5:19:70:2c:d7:95:
8c:bc:c7:08:3f:93:3d:57:d4:9f:d5:a1:e7:e1:7a:
76:5b:8b:75:90:4a:8c:30:94:d2:fe:b6:9d:36:e2:
f7:20:a6:61:a5:75:8b:6f:e3:60:4a:44:83:dc:c2:
19:4a:85:97:3f:8e:20:21:50:02:1d:d5:20:71:0b:
c1:77:f5:a3:b6:ca:aa:8e:e4:3d:56:f9:de:f1:10:
5b:68:7f:f2:1e:f2:b3:9d:6e:8c:92:cd:e7:55:62:
fe:4e:0a:79:98:fd:bb:1d:a7:12:a2:68:97:18:7c:
39:cf:da:fb:10:6f:99:e1:08:c7:9f:b8:e6:4b:ad:
d7:92:75:66:c8:be:a5:7d:42:72:d3:f4:36:aa:5b:
a4:12:43:6a:93:8c:4b:20:9e:04:fc:36:55:b2:e0:
be:23:eb:d4:c6:1a:f0:1e:fe:54:68:6a:4d:ba:b5:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:8C:4B:AC:4E:FE:8C:AA:57:D9:0F:C1:2E:5F:D5:D0:C1:8F:D6
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:bc:ef:f7:08:79:91:f6:9e:38:82:7e:39:3d:a5:03:5a:
e2:87:09:4d:0f:73:ef:55:c0:9a:21:13:ce:4a:eb:69:a2:31:
91:1a:79:76:02:74:81:31:d2:45:5b:2c:48:5b:96:09:9d:be:
86:1e:2f:1a:df:70:12:e3:d6:dc:ea:5b:27:cc:8c:22:07:d6:
4d:25:b3:68:28:84:de:83:8c:69:5e:24:33:09:a5:0c:ff:e1:
40:6f:61:82:0b:b4:22:bb:9f:f5:9d:65:2e:86:8f:a6:2b:2c:
f5:cb:11:f3:56:c1:98:f8:fd:59:25:40:fd:9b:8d:4b:25:3c:
09:cb:ca:cb:3c:87:9f:73:1f:54:f2:42:b6:6d:44:c1:51:67:
59:22:47:7d:73:7b:e1:69:5d:dc:c1:76:aa:92:b2:39:cd:93:
9d:9f:94:dd:77:96:4d:0a:62:65:c9:01:1a:a3:29:c0:54:22:
bc:ab:bd:b7:c4:63:f5:22:ec:16:8c:cc:c2:92:b0:f0:fd:af:
cc:7f:37:ae:49:68:9f:f3:a7:ee:92:dc:91:73:69:48:8b:e1:
50:7c:4e:ca:f6:a0:a1:25:fc:fa:35:90:51:22:38:64:1a:68:
e0:b7:5e:67:ce:16:89:f2:52:c2:c8:2c:d8:e9:35:75:70:ec:
0d:27:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:18 2026 by rpki-client