Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File: nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier: tBCQLP6eIDfjY5//2i8l0GgcYMlJwi3UA9cnDEqUxgY=
Subject key identifier: 76:30:A9:EF:9F:73:D9:50:1B:15:5F:79:8F:B8:DD:1F:76:0F:AA:E4
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer: /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial: 019D382E464DF6D97C92AF75441F248A6121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number: 0D89
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: R91GiKKyBrwfLColIYR-nu2XUnc.roa (hash: fqxJrQIzt273Im8ggeZoruR/46fuYNCxgpytjXWqJG0=)
2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: zRmf67bF0iKhdaBrCUevGKzepf0KweLrAviJaxICJQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:4d:f6:d9:7c:92:af:75:44:1f:24:8a:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=7630a9ef9f73d9501b155f798fb8dd1f760faae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:6c:26:e0:20:33:82:f2:1b:d4:31:0c:de:
d4:fb:86:40:bc:ff:c1:18:ba:97:f1:24:3c:0b:26:
d9:1e:8d:92:8f:de:f3:eb:fd:c5:c2:03:26:b2:df:
c8:cf:96:bf:4a:08:42:3c:83:73:d4:af:77:d7:02:
d9:53:61:0a:f6:9d:22:d6:da:02:4d:14:fd:55:81:
74:d6:98:4b:40:67:fe:79:14:b8:3d:4f:03:e7:e6:
03:ab:ba:e7:3b:37:6c:a5:1b:34:36:3a:54:87:3a:
a9:ff:c8:82:49:7c:3b:ae:65:43:1b:b0:3c:57:5e:
ea:c0:72:d8:14:19:73:ad:3a:11:53:ed:7c:9c:18:
81:70:59:2f:06:17:25:63:05:55:9f:83:6e:80:14:
73:4f:97:ea:8d:60:08:5f:27:e2:6b:19:84:1f:7d:
6c:1e:b8:cf:1f:a2:b1:a8:65:de:da:49:5f:7c:b1:
51:77:96:f5:1e:96:6b:6c:e0:63:6d:a5:38:07:ad:
16:fa:4f:c5:70:4b:6d:27:8a:f1:b2:5b:bf:ac:a3:
fd:71:43:38:62:43:f0:3a:50:e5:0e:16:f0:75:a7:
dd:fe:7e:50:e8:0b:16:ba:2e:79:29:92:2a:7e:69:
9f:1c:93:c3:4c:62:a1:c6:66:09:7e:b1:be:97:d0:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:A9:EF:9F:73:D9:50:1B:15:5F:79:8F:B8:DD:1F:76:0F:AA:E4
X509v3 Authority Key Identifier:
keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ec:74:ba:19:78:f4:7b:e1:a1:79:c2:90:e9:78:d8:bb:41:
54:48:ed:bd:1a:c2:9d:26:ac:7b:b1:1d:a3:43:be:0a:55:6e:
d7:ef:1c:9d:91:e6:f8:12:27:ec:7b:9c:b5:01:74:9d:f6:5c:
0e:a5:e0:24:26:6e:33:e1:20:18:49:88:cf:75:40:29:e1:6a:
0d:db:08:52:ba:3f:d0:03:34:d7:52:e5:4e:5a:99:26:74:ab:
ce:a1:e7:95:53:7f:0f:2e:c2:0f:13:d2:b1:dc:52:55:ce:22:
7a:59:e4:5e:19:9f:33:a5:7e:f3:94:67:b6:37:54:56:8c:6b:
60:81:03:7e:c3:9b:d4:04:4b:dc:44:77:7d:6c:83:53:b3:de:
33:f8:9f:84:59:bd:5a:21:e1:f6:7d:1d:49:57:7e:0b:e5:42:
73:65:db:8d:2b:2c:c7:a1:67:98:1c:fd:5f:70:f0:aa:36:3b:
df:f9:65:73:87:96:90:7f:5e:5f:37:4d:a1:88:7a:c2:14:f3:
66:01:33:52:37:f2:27:8b:4f:6a:47:56:e6:24:6f:20:06:c6:
d8:3d:78:68:c7:86:94:ab:eb:4d:7e:50:72:a3:db:66:f6:01:
34:80:fe:3c:92:01:0d:df:d0:da:87:ca:19:90:ff:4a:d7:a6:
ab:2f:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:38 2026 by rpki-client