Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: M+RgghPsHfN8zmRd4xCJQm/J7EQbA+Lqqt/4xsJADOU=
Subject key identifier: F7:01:EB:19:16:CF:37:B8:4C:DA:16:15:57:EE:5D:01:F9:CC:55:6E
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 01A108B9140E150F143B2830936C4BC564F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 21:01:49 +0000
Manifest this update: Sun 04 Oct 2026 21:01:49 +0000
Manifest next update: Mon 05 Oct 2026 21:01:49 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: 8jS8ii//Si50ourOJHNIfFzs51JVOBd0ygH3i7wjmJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b9:14:0e:15:0f:14:3b:28:30:93:6c:4b:c5:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Oct 4 21:01:49 2026 GMT
Not After : Oct 5 21:01:49 2026 GMT
Subject: CN=f701eb1916cf37b84cda161557ee5d01f9cc556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:35:4a:24:d9:5c:8c:be:85:5c:05:cc:19:
e7:a6:39:89:c0:5a:1b:b3:9a:e7:36:cd:91:98:9e:
f6:00:ed:1b:78:e3:1c:7b:39:17:c5:77:8c:6a:2c:
2a:9c:ee:98:57:8e:0b:da:fc:e6:b0:85:e6:f3:f4:
9e:87:62:e0:13:b6:d1:ba:dc:91:73:8b:2e:47:bc:
31:41:1f:4d:5c:6f:c8:83:90:64:4c:61:4a:89:3a:
f2:b7:35:ce:ae:40:cc:2c:34:5e:09:7f:a9:c1:61:
0f:a4:dd:12:38:78:f8:f5:84:9e:4a:6b:b5:c3:c3:
a6:23:c9:8e:8e:82:36:82:ba:c3:98:f4:62:18:b7:
50:db:ed:16:91:5d:96:1c:c3:30:63:84:79:2b:d2:
f1:e4:32:25:9d:49:ad:90:63:e1:6e:b6:8e:b1:61:
05:eb:85:3e:26:32:cf:11:c2:55:6a:97:91:12:ac:
ff:7f:aa:9d:b8:41:ec:69:e4:fd:eb:b7:75:53:d2:
37:26:a8:71:05:fc:7f:5e:e2:cc:b2:3a:6e:3b:1b:
e6:54:6a:19:85:1e:67:fa:93:33:02:bf:d6:85:6d:
74:4e:9a:6d:e1:d3:02:f7:38:32:99:47:c4:87:5a:
d3:e7:2d:30:75:cb:c2:e6:17:02:ed:e1:7e:7a:1e:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:01:EB:19:16:CF:37:B8:4C:DA:16:15:57:EE:5D:01:F9:CC:55:6E
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fd:22:6a:2a:bd:ee:e2:f0:b8:07:e3:b8:61:3f:f0:e8:3f:
be:1f:64:b9:dc:f7:48:d2:e9:d2:d9:0a:7d:f2:30:99:61:08:
57:32:29:3f:a2:ac:4e:99:09:08:16:40:f2:6c:0d:42:93:c6:
b6:58:ed:94:6e:e1:58:85:e7:d6:a3:c3:5b:5c:90:31:38:a5:
fc:7f:0e:5d:22:5b:e8:5f:d1:ca:41:61:59:30:74:bd:78:85:
6d:59:6c:a6:1d:94:23:4d:f0:b4:bd:ed:3c:5e:10:0e:cb:49:
9f:b1:03:f5:69:1d:4c:b9:ba:d1:c5:9a:d2:6c:6d:58:5b:b7:
db:2f:53:ba:70:7f:65:c9:e3:a8:79:2c:c1:cb:82:16:ce:2e:
c4:e6:41:a5:85:b3:74:c7:55:8f:7f:34:3c:91:3d:d7:a0:ff:
99:6b:96:fc:2b:5f:b0:c1:36:30:b6:d5:be:46:d2:cd:b6:2a:
c5:40:13:a3:da:3a:60:3e:c7:e1:b4:83:a1:83:32:31:76:ff:
37:cf:70:e7:5d:17:05:5f:8b:a5:ad:08:74:22:aa:eb:d5:72:
f6:6c:93:f0:38:2c:db:cf:5f:70:c2:75:ff:f8:20:9d:4e:a4:
0e:f9:bf:bc:60:23:4e:d8:8c:9c:d1:b7:f1:18:12:66:1a:97:
b0:8c:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:33 2026 by rpki-client