Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: eK1UnpviADM8q5Nf5BALxvVmE4JIG5u+Ojs0bb64TzE=
Subject key identifier: E4:1C:E0:27:BC:5F:4B:C7:A7:83:95:74:C0:5C:23:8F:B2:42:39:EE
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019D371BBF8C13EC7969371D9F77C8B4A59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1331
Signing time: Sun 29 Mar 2026 01:00:58 +0000
Manifest this update: Sun 29 Mar 2026 01:00:58 +0000
Manifest next update: Mon 30 Mar 2026 01:00:58 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: yxYpYhQEPWgrSltgewWlP0jO/HiRdjbwSCn6BZoZBms=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:bf:8c:13:ec:79:69:37:1d:9f:77:c8:b4:a5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Mar 29 01:00:58 2026 GMT
Not After : Mar 30 01:00:58 2026 GMT
Subject: CN=e41ce027bc5f4bc7a7839574c05c238fb24239ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:81:e4:13:8d:b7:56:9b:05:dc:5a:20:bd:
5b:e1:b1:fa:5c:75:3e:b8:8b:4b:70:94:3d:1f:e3:
0a:6a:8f:54:3a:9d:ab:03:d5:bd:38:46:32:d4:75:
4b:42:c4:5b:f7:77:6e:cb:3f:7b:33:e9:39:4e:b0:
12:0e:23:52:bb:03:e5:17:fc:cc:d3:59:ed:f8:07:
ee:07:d2:25:84:90:fc:a3:72:fe:38:e4:3f:88:b3:
56:76:e1:d8:d7:47:b6:de:ca:cc:63:f7:1e:85:e3:
c0:1d:b0:1d:56:5c:88:8c:92:f6:a1:dd:89:51:0b:
46:b0:3e:4e:6c:31:7f:93:68:fe:11:24:a2:5e:ba:
dd:7e:96:45:da:07:16:60:fb:97:c1:ec:58:84:d9:
ed:c4:da:9a:23:63:c5:d2:89:c0:79:78:8f:f6:e1:
76:bc:af:b9:b4:f0:18:e8:1b:bd:3a:be:9d:d4:ac:
34:6f:e8:d1:ef:74:77:55:24:e3:37:b2:f5:22:c7:
02:ad:ff:9e:01:2a:75:81:8f:87:2f:22:ca:f9:7d:
99:02:9c:32:8b:85:f9:6a:95:7a:c4:a7:20:3f:67:
fa:7f:a7:e8:e3:32:fa:ac:31:8e:bb:9a:70:02:97:
59:8e:94:7b:0a:a4:d8:6b:30:5e:e6:aa:a3:c4:f2:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1C:E0:27:BC:5F:4B:C7:A7:83:95:74:C0:5C:23:8F:B2:42:39:EE
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:1d:4f:cb:c8:f2:ad:30:dc:e4:78:1b:fa:f1:be:2f:81:
f3:ac:67:8c:4c:d6:44:5e:f7:ba:1c:0c:86:44:62:6f:5c:9b:
83:64:c8:40:02:8b:75:e4:26:ab:aa:21:77:15:bd:8e:81:77:
5e:7a:ef:4c:cf:f6:8f:f7:64:e5:66:a2:7c:a5:6a:1f:68:9f:
60:3d:5c:84:53:29:4d:db:86:b1:83:d6:4d:45:7d:e5:f5:e9:
f4:2b:5e:75:85:ef:e5:fe:e3:9f:67:91:92:44:fe:6f:06:c7:
32:6f:5e:74:9c:8b:79:45:a5:31:d4:e1:3d:12:cf:0f:a8:f4:
47:19:4e:35:e4:aa:ca:3a:d7:22:e3:cd:50:d7:e7:6a:7d:7c:
69:a2:68:89:0d:0b:ac:d1:3d:21:93:5b:3d:d4:de:9b:24:6a:
b7:76:90:15:6f:61:0e:41:66:52:5c:d9:38:51:c6:b8:ff:53:
4f:52:8f:3f:40:0e:aa:4d:cc:f3:45:cf:5c:04:5e:2e:b0:e2:
af:1b:62:93:84:c2:95:9a:66:a0:6e:c8:68:aa:4e:62:92:cf:
51:9a:60:86:e4:d5:4a:51:88:f5:61:d1:e5:4f:37:b6:f7:8d:
6b:b6:96:3b:0e:e5:d1:af:71:95:53:13:c2:9b:51:fe:fb:72:
8a:a8:fd:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7+ME+x5aTcdn3fItKWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz
NDg3ODAwHhcNMjYwMzI5MDEwMDU4WhcNMjYwMzMwMDEwMDU4WjAzMTEwLwYDVQQD
EyhlNDFjZTAyN2JjNWY0YmM3YTc4Mzk1NzRjMDVjMjM4ZmIyNDIzOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPCB5BONt1abBdxaIL1b4bH6XHU+
uItLcJQ9H+MKao9UOp2rA9W9OEYy1HVLQsRb93duyz97M+k5TrASDiNSuwPlF/zM
01nt+AfuB9IlhJD8o3L+OOQ/iLNWduHY10e23srMY/cehePAHbAdVlyIjJL2od2J
UQtGsD5ObDF/k2j+ESSiXrrdfpZF2gcWYPuXwexYhNntxNqaI2PF0onAeXiP9uF2
vK+5tPAY6Bu9Or6d1Kw0b+jR73R3VSTjN7L1IscCrf+eASp1gY+HLyLK+X2ZApwy
i4X5apV6xKcgP2f6f6fo4zL6rDGOu5pwApdZjpR7CqTYazBe5qqjxPKO9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQc4Ce8X0vHp4OVdMBcI4+yQjnuMB8GA1UdIwQY
MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt
MmFkOTY4YjM2MmRlLzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl
LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSUdT8vI
8q0w3OR4G/rxvi+B86xnjEzWRF73uhwMhkRib1ybg2TIQAKLdeQmq6ohdxW9joF3
XnrvTM/2j/dk5WaifKVqH2ifYD1chFMpTduGsYPWTUV95fXp9CtedYXv5f7jn2eR
kkT+bwbHMm9edJyLeUWlMdThPRLPD6j0RxlONeSqyjrXIuPNUNfnan18aaJoiQ0L
rNE9IZNbPdTemyRqt3aQFW9hDkFmUlzZOFHGuP9TT1KPP0AOqk3M80XPXAReLrDi
rxtik4TClZpmoG7IaKpOYpLPUZpghuTVSlGI9WHR5U83tveNa7aWOw7l0a9xlVMT
wptR/vtyiqj9Lg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:25 2026 by rpki-client