Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
File: Nw9PXYTCtc7jxukDy1MNapH0BLo.mft (raw, json)
Hash identifier: /bV3J0KpmnxY+y1NRjdR8WHZzeEHixJBzJBlxP4FoJM=
Subject key identifier: 21:C9:AC:C0:60:24:A1:E4:4E:26:F4:5E:F1:34:D4:C3:F5:3D:DB:FA
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 01A06E3992B48BC4160FE0DD23443B8D73CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
Manifest number: B4
Signing time: Fri 04 Sep 2026 21:01:01 +0000
Manifest this update: Fri 04 Sep 2026 21:01:01 +0000
Manifest next update: Sat 05 Sep 2026 21:01:01 +0000
Files and hashes: 1: Akpbd9-vKBYgSBLEtd2w4KsvGx4.roa (hash: p8sAzT87uCiO5lnenDGKFMx6AhGEdEoqJ/Myeptn3ZU=)
2: HUTjNxMDyTWfIeACtHVXKD8A41A.roa (hash: JXFmwel69gCfyCsynPXE0VRtMMoBcAjcMhowe4HtpoI=)
3: Nw9PXYTCtc7jxukDy1MNapH0BLo.crl (hash: 1av4t0IGdPuwLDhwd4XICPCi4LIX7T+NHui/gFrFxYc=)
4: ZL6zrkemzEADAhC0Fi3nhK_pom8.roa (hash: vHAbtfbPDaOsa5CvBYtUditrWJEPKQpb6oj185KbRTc=)
5: etGPt2jesAgywvKvXb4eae0QhGs.roa (hash: O32NEww1ELuE+mxxWCi+G2R5kqYIhKJafeEnMHRBI8I=)
6: jltpBKXiQBCP3TAqLQdxnsIEzXE.roa (hash: G4dhanvX94kK84q1bgMQYY5NYjqmSMrIZgDUfvnVnxI=)
7: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (hash: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=)
8: zgvEdMDZHbRR3S85g3W5-vdoz24.roa (hash: gVCQ/4xNYvogByqiF6Uw696rFdgMuXOWFwRJziSooto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:92:b4:8b:c4:16:0f:e0:dd:23:44:3b:8d:73:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Sep 4 21:01:01 2026 GMT
Not After : Sep 5 21:01:01 2026 GMT
Subject: CN=21c9acc06024a1e44e26f45ef134d4c3f53ddbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:f9:20:80:c0:a5:66:36:25:50:a3:2d:99:
3e:b7:cd:65:13:ec:b8:d6:27:17:42:88:86:54:ec:
89:a8:ae:ca:6f:3a:53:c6:11:dc:ab:e6:cb:c6:12:
c4:55:fb:2f:40:7b:09:0e:6e:c1:bb:d1:4d:03:6c:
06:27:5b:11:6d:f6:d9:ca:50:4c:68:48:8b:65:53:
3c:09:3e:ff:42:59:bf:44:bd:ab:70:64:85:63:e3:
1c:73:d2:a3:10:97:b7:05:78:22:02:61:4d:7a:ca:
df:fd:ca:79:6f:a3:4b:f2:96:0c:f5:18:fa:44:a4:
53:22:8c:69:06:bc:1e:10:31:7c:b3:c0:28:9e:81:
9a:51:0a:46:3e:b9:a9:59:32:86:c6:ab:52:a6:8d:
bd:ed:57:c2:15:c1:61:dd:33:70:7e:74:ca:bb:83:
16:b6:0c:dd:c4:bb:5f:a1:34:1e:92:ee:c8:d3:87:
67:35:bb:30:4f:7a:c9:d2:81:5e:29:5c:d3:b3:32:
51:5e:d2:85:ac:83:17:82:6e:26:e1:9b:cd:c4:40:
3c:e6:8d:11:7b:57:87:26:61:71:dd:8f:7c:e9:aa:
6d:38:30:77:34:c4:09:9f:60:6e:17:4b:a4:5c:cd:
b2:d0:d0:f3:40:30:43:db:51:71:23:d5:d4:36:97:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:AC:C0:60:24:A1:E4:4E:26:F4:5E:F1:34:D4:C3:F5:3D:DB:FA
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ce:8a:8c:3b:52:e7:41:fc:96:ab:fe:69:8d:aa:24:98:32:
bf:bc:1b:94:77:da:1c:e7:e5:82:2d:96:74:5d:0d:be:9e:8a:
0e:f5:86:f9:3e:59:67:1f:cb:8a:e6:ee:f2:3f:9d:80:1a:2a:
2d:a8:f8:1c:6a:9a:d0:78:8b:21:cf:e2:bf:b9:b3:e7:23:d8:
bb:7c:b5:40:fc:0b:37:9a:48:8d:3f:46:2c:91:18:7c:1d:7d:
a2:7e:0c:5e:3e:fc:66:2f:22:e9:55:f1:4b:de:56:56:83:d0:
4d:89:ee:9f:7b:58:29:55:99:45:94:e8:db:10:ea:df:86:42:
09:d6:f7:6c:9a:37:44:ae:dc:84:a6:88:db:a1:6d:d7:01:c3:
0b:85:54:9a:15:8b:57:93:13:30:b3:2a:4c:81:da:65:63:ad:
2f:55:e0:57:23:c9:1b:f1:84:f4:23:db:a3:86:18:0f:72:14:
1b:d4:bf:2c:8c:44:40:43:48:ea:95:16:82:94:16:2e:57:02:
43:1f:a2:32:8e:19:9d:86:a6:f0:a1:ef:c5:fd:6e:32:9a:d0:
53:e6:c7:4a:09:5d:07:0f:c1:7b:9a:51:64:29:8a:40:e0:93:
9a:ea:a6:8a:37:5d:79:70:a3:aa:87:43:33:cb:df:08:e6:8d:
0a:c6:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:48 2026 by rpki-client