Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: N3rTzG5K4gDdsxU3wOGN7r3GBIfYFKc7FN9H/36tyuI=
Subject key identifier: 4C:5E:0B:9D:2C:04:60:D6:8D:4F:B7:D2:7D:A1:78:DD:4C:A4:60:85
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 01A03F72646437949FC64B63A30347D49195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 14C3
Signing time: Wed 26 Aug 2026 19:00:56 +0000
Manifest this update: Wed 26 Aug 2026 19:00:56 +0000
Manifest next update: Thu 27 Aug 2026 19:00:56 +0000
Files and hashes: 1: MI1eAedSp8b3ejhW5Is6MVZnkBU.roa (hash: ffD0wdFOnzca91uqXIMtkqIhdgKPLxX/FYK0ZtNqw10=)
2: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: 67vStYKHariE42+8VaOc/jPhNNysZNaWRcMo7yR8wpI=)
3: soRgBsppmhAjuwcesmTHduOH9zE.roa (hash: FnK+5njb2ep7QTqDrCHoNsGJ6m0P3EF/QDbE4FdNFpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:64:64:37:94:9f:c6:4b:63:a3:03:47:d4:91:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Aug 26 19:00:56 2026 GMT
Not After : Aug 27 19:00:56 2026 GMT
Subject: CN=4c5e0b9d2c0460d68d4fb7d27da178dd4ca46085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:31:2d:a4:d6:15:5f:a6:0f:2e:14:f6:87:
86:29:8f:03:24:02:f7:e6:73:63:ef:42:f1:0d:a7:
55:ab:f4:82:42:83:3a:fd:62:d9:ec:9d:d6:86:58:
91:18:30:98:19:e0:32:bf:7f:fd:1b:ed:cf:e5:2e:
a5:fb:f4:0e:1f:e4:ed:37:bb:76:97:aa:92:56:80:
13:3e:41:a2:5f:d0:96:99:4e:02:81:93:f8:9f:f7:
46:21:b8:c1:ad:cc:35:50:dd:0f:d2:8d:d4:92:59:
0a:3d:aa:58:5a:4a:be:46:66:d8:28:92:be:83:65:
d8:43:bc:21:3b:ac:2c:f3:9d:ff:d9:13:81:c2:fe:
e1:2e:9d:50:9f:7a:76:2e:b9:73:23:1b:93:71:09:
51:79:23:d6:a8:1d:1c:17:a2:58:a0:d7:2d:1e:9d:
f7:b6:ea:39:36:d6:b0:da:da:53:fd:96:42:ac:90:
66:e5:f5:69:dd:87:3d:9d:eb:0f:1a:a8:4e:68:da:
da:5b:e3:d9:5b:9c:80:9e:37:e5:37:05:a7:b6:68:
3e:c8:97:1a:43:e4:2d:e7:17:1b:67:e7:63:96:cb:
f1:09:18:4e:60:52:dc:55:5d:3c:e6:22:ce:23:02:
1d:18:a1:ff:9d:17:be:d9:71:0b:06:b7:9f:f8:bc:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:0B:9D:2C:04:60:D6:8D:4F:B7:D2:7D:A1:78:DD:4C:A4:60:85
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:0c:85:a4:f6:f4:08:1b:a9:6c:7b:e4:b7:de:cd:1e:f4:
95:8f:db:c2:cd:85:62:15:18:48:c5:dd:cd:1d:97:55:29:f3:
10:0b:d9:e5:2c:fc:6a:46:c2:28:f3:3a:56:fe:15:18:db:71:
34:06:72:f6:06:9d:28:e5:dc:cd:f3:a5:f3:f7:e0:91:35:27:
f6:23:97:2f:b8:b9:2e:81:f0:12:29:6c:aa:69:49:b0:9f:8c:
bc:97:ce:5b:a4:4a:d4:19:56:3a:78:2c:e1:39:37:fb:35:79:
8e:b2:59:0d:b5:fd:62:85:d3:36:1c:e1:36:f9:df:61:8b:5d:
40:15:1e:59:a3:ca:57:01:b0:04:3e:1e:bd:cc:4b:40:a7:eb:
99:39:c0:c2:70:cc:0f:e7:7e:69:b5:43:60:79:63:e2:66:39:
c1:42:4f:f6:69:a4:04:72:1e:d1:c6:9a:0e:be:a2:b6:c1:83:
c6:36:fc:77:cb:5e:07:4d:ce:fd:a0:07:0b:05:e1:26:fd:8f:
3f:2c:3e:a1:19:53:1d:e0:7b:b8:68:13:ea:2a:48:ad:8e:f9:
62:93:d3:85:53:e7:9d:ad:66:62:c2:3a:83:61:19:bc:d5:ab:
91:2d:c0:0f:78:a9:56:7a:f9:a3:fe:35:84:ab:f3:cc:1b:a6:
19:1e:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:09:36 2026 by rpki-client