Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: Y3KAqr/wbgcakrd/N+OcLI9P5D3DgpYpwNsjPPkMFzU=
Subject key identifier: 01:E0:54:95:BA:F7:D8:D6:D7:14:14:93:5D:2A:F5:69:ED:32:AB:85
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019E2A703EE1935E91E9F7400BC6624D5368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 13AF
Signing time: Fri 15 May 2026 07:00:59 +0000
Manifest this update: Fri 15 May 2026 07:00:59 +0000
Manifest next update: Sat 16 May 2026 07:00:59 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: GWJ2kCfrSDQj5kFtBd5hUZ4TlgaZxJjA3S3bQRKV398=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:3e:e1:93:5e:91:e9:f7:40:0b:c6:62:4d:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: May 15 07:00:59 2026 GMT
Not After : May 16 07:00:59 2026 GMT
Subject: CN=01e05495baf7d8d6d71414935d2af569ed32ab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:53:7d:8a:f4:50:d6:6b:29:e0:a5:38:ee:
ff:6f:22:c1:e7:45:71:34:ee:b4:91:8d:7b:c9:64:
8e:4e:c6:f3:1d:09:34:7f:ae:bf:27:19:b5:8d:19:
89:50:28:bb:7a:d3:a5:0b:08:8f:eb:43:46:0f:dd:
18:e2:ee:1d:d7:4c:71:db:41:29:34:5d:24:88:f6:
a4:e0:ba:58:c6:0d:2e:ab:ff:c6:2d:d5:18:c4:26:
fe:e8:48:e9:2d:6a:83:2f:34:67:f7:e7:ae:6b:f7:
cb:99:5d:4f:fd:eb:68:78:00:67:75:8c:c8:79:cf:
e1:34:50:38:ee:1d:6d:d3:83:ec:c5:a7:88:c3:da:
06:fa:da:f9:06:df:8f:56:1a:2a:f2:40:17:aa:b4:
f2:b1:df:84:96:39:c7:70:ef:65:39:03:7d:b9:65:
42:88:d1:cd:4c:08:3a:8e:32:74:0c:8e:44:d4:a7:
8f:ea:7e:d2:5e:5f:8a:8e:63:74:cf:ac:df:4f:13:
09:1d:fa:e7:b9:ee:61:f3:8b:2c:d9:d9:29:be:f4:
c0:a7:65:01:8a:0a:ce:f7:b2:d3:8c:41:4a:62:75:
46:19:ca:97:61:91:87:41:f0:fb:01:8f:0a:72:94:
95:ce:05:c9:15:7e:0f:01:6f:a7:85:05:50:aa:14:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E0:54:95:BA:F7:D8:D6:D7:14:14:93:5D:2A:F5:69:ED:32:AB:85
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:33:d0:c5:e8:01:1f:42:e9:a0:f2:e0:0c:dd:dd:40:52:
8c:e0:99:3a:f3:f8:7e:31:77:33:2d:2d:95:6f:e5:fd:ca:3d:
23:99:e2:e4:fd:df:f5:41:95:6f:bd:45:16:0f:87:76:c8:2f:
40:47:d4:e5:b1:79:22:6b:c5:54:73:51:c4:b6:3a:9f:f5:ea:
58:c1:ba:e1:3e:12:d4:d8:39:46:99:a6:e2:a7:da:d7:8a:9b:
ff:77:82:29:da:0c:ef:64:3c:43:67:7e:15:80:50:9d:28:74:
a3:03:ff:77:56:8f:f7:2e:c7:a7:94:e4:68:d1:c8:be:9f:9f:
bc:a2:05:cf:ca:51:cc:3f:47:b8:e9:60:fe:01:5b:68:7a:ce:
71:bf:56:15:70:e5:81:97:af:47:3b:05:eb:09:32:e1:3d:30:
75:bb:8e:23:7b:5b:88:a5:90:5e:19:a5:a1:d2:c5:8c:ca:93:
f4:cc:94:96:81:c5:42:bc:1b:65:f0:d2:fa:f9:42:53:32:ab:
21:21:0e:81:35:36:8f:1e:bd:41:0f:b4:a7:2b:d4:25:33:4f:
48:6e:9a:8c:13:ee:27:d9:28:66:41:02:ee:5c:a4:ba:f4:2f:
0d:c8:67:b4:07:76:78:0d:56:b6:03:b1:6e:19:4c:72:72:03:
a0:9c:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:07 2026 by rpki-client