Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: sKDjF+azewCK32a076LgvU9v/DAPEQZKdArNNMyNgEo=
Subject key identifier: BA:37:9F:72:EB:4E:F7:91:EF:C3:31:5D:9C:02:22:1B:ED:49:F4:5D
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 019DC114AF59372E18C11B0510EA03BEC118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 1202
Signing time: Fri 24 Apr 2026 20:00:51 +0000
Manifest this update: Fri 24 Apr 2026 20:00:51 +0000
Manifest next update: Sat 25 Apr 2026 20:00:51 +0000
Files and hashes: 1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: SQfZuuF7Tvl2x3WM/KY0PJtZf+vi/WY6ZcPsR7lUwC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:14:af:59:37:2e:18:c1:1b:05:10:ea:03:be:c1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Apr 24 20:00:51 2026 GMT
Not After : Apr 25 20:00:51 2026 GMT
Subject: CN=ba379f72eb4ef791efc3315d9c02221bed49f45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:b5:9e:b3:ae:d3:85:7f:fe:cd:96:5d:32:
da:3c:4a:1a:4f:f2:58:99:31:4e:3e:48:06:28:2a:
7e:2f:1d:c7:36:9a:12:f6:ff:33:c1:67:46:de:f5:
d9:53:10:4b:c5:f6:e8:b0:e4:91:e8:96:e8:0a:42:
a2:c7:99:e6:72:d5:b6:b5:73:4f:08:57:23:54:79:
8f:89:b6:d6:c2:27:d5:e2:4f:d7:32:68:3a:c1:10:
49:01:03:5e:3b:4a:8e:c0:d4:0e:83:30:1f:64:81:
43:66:bb:2e:20:93:32:21:5e:ac:4b:7b:0f:4d:43:
2c:17:84:31:75:74:09:af:fe:ad:ef:c1:81:99:1a:
bc:fa:0e:9c:06:7f:59:56:5c:39:6c:e9:94:6f:11:
22:ba:f3:42:ec:e1:9e:af:28:41:f5:8c:8b:f2:09:
8a:43:df:07:9c:d3:cd:c2:c7:9e:e9:68:76:86:5a:
88:27:b2:c4:45:29:73:af:fe:f7:ba:29:ed:fb:65:
d6:33:65:06:5d:46:30:38:17:ae:38:4e:4a:f4:38:
85:ab:94:c4:6f:46:70:40:da:dc:af:92:6b:8c:34:
7d:66:07:70:ac:71:f2:28:f6:67:ba:38:fd:56:00:
36:57:5c:bf:44:8c:f5:3d:ab:1b:86:40:cc:42:ca:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:9F:72:EB:4E:F7:91:EF:C3:31:5D:9C:02:22:1B:ED:49:F4:5D
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4c:0b:41:7b:91:25:42:c9:c5:c4:01:5b:7d:d9:b3:29:80:
10:cd:c8:c5:be:eb:2d:ca:0f:50:91:d5:74:c1:f9:44:50:8c:
fd:ab:0a:ca:a4:1d:58:d1:8b:57:f1:1b:27:e8:28:28:ee:c9:
71:5d:7e:74:73:7c:c1:b6:f3:82:ca:94:73:61:21:97:e5:27:
a3:ce:ea:23:38:8a:e9:d2:90:1e:75:0b:44:0c:13:e9:29:02:
bc:e5:ea:13:60:98:27:58:34:34:93:7b:10:d4:ac:d0:88:77:
33:27:7a:0c:ea:4e:82:e8:1b:1d:89:0c:76:6c:11:1a:8e:b6:
72:f9:98:24:56:f9:cf:8a:c7:44:9a:53:65:97:92:00:33:9c:
84:1a:45:c1:88:d0:88:4c:72:11:99:33:5e:38:71:98:dc:b5:
4c:05:fc:ca:54:e8:e4:76:e9:45:44:6d:ff:b2:0c:a1:cf:25:
cd:55:4e:af:0d:d2:1c:19:7d:f9:bd:7d:da:62:4f:0e:e2:28:
ed:7c:26:44:1a:b5:66:ba:1c:bf:d9:c4:d3:d7:9b:e6:76:80:
c3:9a:b4:a4:61:eb:ac:76:96:e6:fa:3e:06:ed:c1:0f:bb:af:
17:e5:d1:39:6e:cd:13:c2:ed:14:70:f6:8b:fb:bc:6f:4e:2f:
e0:83:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:54:25 2026 by rpki-client