Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: cd+9+mHqTDwx0UXgLPEjNDdTL5z6hKSlDHB/0HAz6/4=
Subject key identifier: CB:63:EF:D5:6E:5B:68:E0:02:97:5F:9D:3E:71:14:56:AD:4E:0C:FC
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01A1893FEA24CABFC19994BEC2F9418C1B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 138C
Signing time: Thu 29 Oct 2026 20:00:29 +0000
Manifest this update: Thu 29 Oct 2026 20:00:29 +0000
Manifest next update: Fri 30 Oct 2026 20:00:29 +0000
Files and hashes: 1: 9ZT-jtuvuyChWGhqzx6bDw_rL-A.roa (hash: wIGBfgZvSDRH5lC7Lt7B+TOaBYWXsMviGDk54gwrBVY=)
2: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: RFI/q5WHFHkJn4/m8TWISImdwd3Hjj/Hx8SqgvMeFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:ea:24:ca:bf:c1:99:94:be:c2:f9:41:8c:1b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Oct 29 20:00:29 2026 GMT
Not After : Oct 30 20:00:29 2026 GMT
Subject: CN=cb63efd56e5b68e002975f9d3e711456ad4e0cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:50:1b:d1:92:c7:a6:20:24:8b:ee:8e:ee:
e0:ce:1a:1f:43:66:a5:8d:2d:1a:d4:58:11:a1:4a:
61:41:2c:f3:9a:0d:58:70:d9:1e:f9:9e:c8:c0:3b:
e1:90:17:01:6a:78:6d:99:19:1d:38:58:4e:25:11:
f9:70:aa:9a:f0:57:69:93:9c:b4:07:40:27:69:32:
e0:3b:f4:26:84:47:07:c6:38:00:83:90:b0:69:9c:
4f:8e:01:8e:38:9a:10:cb:bb:7f:47:91:41:68:3a:
43:1b:31:ad:e4:a3:3b:2f:83:cc:b2:86:03:27:ce:
40:52:35:81:a5:af:25:b0:0f:b0:61:12:7b:7e:de:
0e:1d:7c:7c:b9:f1:89:a9:84:43:78:57:b3:bf:29:
41:04:f1:70:59:10:1a:6a:d8:ca:99:ca:aa:2e:46:
20:3e:27:6f:f8:5e:ad:e7:4b:ab:45:b1:6f:52:e1:
ca:4c:7b:89:6a:04:fb:88:5b:40:0b:44:86:00:eb:
98:f2:99:fd:4c:34:38:8a:f1:69:cf:1f:00:d8:31:
4d:6d:55:8b:ca:79:1e:a0:79:62:ac:75:d3:10:15:
87:e4:19:da:49:ec:57:e6:82:07:0d:da:69:29:5b:
da:52:ba:cd:90:4d:a7:9d:a6:d2:6e:37:4a:20:ad:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:EF:D5:6E:5B:68:E0:02:97:5F:9D:3E:71:14:56:AD:4E:0C:FC
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:50:ca:2f:7b:9b:57:66:01:d2:1d:a5:9d:cb:59:44:ed:
fc:c1:db:e0:5c:72:04:be:b5:f3:82:23:7b:c9:24:6f:89:e0:
8c:2c:72:55:10:81:71:2a:b4:14:0d:ad:18:6c:c2:1d:bb:a4:
a9:1c:ec:ea:8b:78:6b:a1:12:73:b4:4f:21:41:dc:c9:20:33:
7c:29:8a:48:78:89:01:2b:9c:a3:34:72:39:68:d3:bf:1a:7d:
fe:5c:8b:81:ee:1f:8c:e5:40:87:be:83:7e:70:4c:02:22:35:
2a:c4:f7:6f:ce:1d:19:20:62:73:8f:bd:96:53:1f:28:e4:21:
74:d9:cf:41:a6:90:c6:43:10:bf:f2:21:8a:05:a9:d7:b3:41:
aa:73:b5:f1:56:fe:12:00:a7:07:28:dc:0d:3c:43:57:a5:64:
7a:5d:3f:fb:74:97:13:93:87:89:84:d2:87:25:9d:0c:6b:48:
7e:25:b7:13:c0:b6:98:a8:3d:37:8c:b5:ab:f3:8f:49:16:dc:
7a:b4:7a:ce:f8:e0:ff:b9:dc:3d:1f:95:8e:69:79:42:e2:8e:
4e:a6:cd:49:49:a2:05:54:22:64:57:47:67:d4:64:40:57:a6:
cf:12:70:7c:d8:a6:c2:8e:9f:9f:6a:b3:8b:20:7a:80:e0:50:
e1:47:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:49 2026 by rpki-client