Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: im1IIVF03f8RCrZi2Bbe6JqzO3drBD72uTG0RKOIBZA=
Subject key identifier: 8C:58:15:09:A5:5A:57:7E:77:03:AB:6F:76:32:83:B3:C3:8E:B6:1D
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019F122E2351FD4DD88ECA6196E32AC42A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1427
Signing time: Mon 29 Jun 2026 07:00:41 +0000
Manifest this update: Mon 29 Jun 2026 07:00:41 +0000
Manifest next update: Tue 30 Jun 2026 07:00:41 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: 55ZJduI8LS4jFEGnRX3Izs4HmlTu1yTZzvWur6Ss9TI=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:23:51:fd:4d:d8:8e:ca:61:96:e3:2a:c4:2a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jun 29 07:00:41 2026 GMT
Not After : Jun 30 07:00:41 2026 GMT
Subject: CN=8c581509a55a577e7703ab6f763283b3c38eb61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:ac:e8:a7:f9:7f:ca:c0:f7:a1:26:31:73:
cf:2a:32:86:25:84:6e:d4:ad:00:06:a0:48:f2:24:
c7:5e:c7:12:da:b0:48:a4:d1:d7:ce:04:6c:38:4f:
cf:c0:fb:b5:f0:53:e8:f4:02:1a:d9:f5:62:3b:7c:
03:9e:23:9c:f0:82:26:b0:9a:f4:66:1f:cb:d1:4b:
2d:2f:4a:b4:e3:ae:99:da:a1:6e:85:18:f6:69:d1:
94:3f:e8:f9:66:6a:fe:5d:c5:8c:e5:b7:33:e8:51:
36:07:54:f1:84:12:49:a5:fe:1b:4c:24:8c:64:36:
3b:06:db:43:bd:42:59:06:9d:18:df:2b:00:b8:cc:
bf:65:bb:64:0f:6d:cb:5f:49:ef:d6:e2:9d:e4:4b:
cf:e0:93:70:e6:85:33:37:bd:5f:e9:80:bc:e2:63:
b2:e2:f0:04:1f:e4:9d:6d:57:df:b0:8f:b4:40:72:
ff:db:a6:0f:b5:a9:46:53:4c:cf:b8:65:74:35:06:
cf:9b:42:7c:b1:77:df:10:12:ca:92:d8:17:2f:e5:
50:ae:40:2b:95:31:ce:77:ed:79:9f:d4:f2:72:46:
10:4d:f4:67:d9:7c:37:5a:6b:96:df:67:b7:3c:7a:
fc:33:3b:e2:34:98:71:8f:ba:b8:9f:30:a5:14:d3:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:15:09:A5:5A:57:7E:77:03:AB:6F:76:32:83:B3:C3:8E:B6:1D
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:db:a4:e4:bc:ce:b5:e3:ae:b7:ea:65:ee:8c:0a:44:ef:
3e:07:a3:39:0e:72:6c:10:d6:9e:81:bb:a9:89:4f:45:42:42:
30:d8:8b:65:52:bc:b7:81:0a:6c:b4:ea:b5:21:c3:52:fa:48:
c9:e3:75:28:e5:20:6f:e9:cf:88:df:92:53:42:43:57:64:32:
d0:03:aa:e3:08:97:10:fe:33:09:c5:eb:6d:db:ba:a9:bf:e6:
88:67:39:a4:0c:60:7d:1d:a9:d2:13:a4:4f:7d:76:b9:cb:cb:
08:20:ad:4e:2d:6c:e8:f9:d3:c0:a0:b9:35:ea:f7:61:3f:70:
a6:19:f9:d4:1d:12:dd:83:95:ec:74:06:0f:ef:35:01:2b:0e:
73:e4:01:9a:ed:b2:22:ee:19:45:a2:63:4e:53:ba:5d:9c:72:
54:39:73:c9:20:08:24:ae:e5:6f:6c:21:b4:a7:3e:e0:97:e7:
66:ae:f7:67:20:83:7e:43:4c:e4:37:43:24:b6:a8:7c:cb:07:
7d:ed:2d:f0:cc:12:08:7c:11:fe:0a:31:a0:dd:57:9c:e5:5f:
5a:0f:73:e1:2b:2b:c1:3a:09:a4:82:92:0b:03:b4:b3:43:5f:
10:7f:aa:29:6f:64:9a:49:2d:59:67:4c:95:78:87:92:20:b2:
45:74:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:36:31 2026 by rpki-client