Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: 100RUfW2bgosPBESQsm+IPPRYN6ZNvtcVQLRExh+m0k=
Subject key identifier: 76:66:68:CF:5A:13:75:B1:46:23:02:CE:90:21:A9:AC:2C:8E:6A:39
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 01A00402070A77A7C04607B167B927B68928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 06:00:36 +0000
Manifest this update: Sat 15 Aug 2026 06:00:36 +0000
Manifest next update: Sun 16 Aug 2026 06:00:36 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: KD2KRX0jDVlLkYMAJLq6aCisZRSlSe9yqREpJCBJHlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:07:0a:77:a7:c0:46:07:b1:67:b9:27:b6:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Aug 15 06:00:36 2026 GMT
Not After : Aug 16 06:00:36 2026 GMT
Subject: CN=766668cf5a1375b1462302ce9021a9ac2c8e6a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:e1:f5:33:2f:c4:9e:f7:b5:a1:7b:b5:f8:
d0:ef:f3:e2:63:02:69:b8:12:0f:d9:90:94:db:43:
50:ba:2f:d4:6e:1f:13:57:bd:b2:c8:0b:dc:d1:43:
07:ea:56:ae:30:88:7e:56:b4:b7:69:19:c0:0a:09:
8c:7c:c3:3a:6f:47:a5:df:b6:c1:d8:03:d2:0b:7f:
b9:f7:d2:d4:fd:bb:17:9f:83:95:ed:68:f7:9e:a4:
14:56:de:a8:7b:1a:c4:40:2e:4f:69:3b:b7:db:7d:
54:64:e2:a5:a4:91:6d:b1:df:8a:87:db:fc:22:e1:
47:3b:12:74:1a:4f:12:25:be:55:84:50:e6:d5:5c:
67:8f:aa:34:95:38:e9:ec:07:fc:ce:4e:6e:17:d2:
8c:c7:8d:a7:74:fa:40:a2:39:96:03:ca:1f:95:24:
2e:1f:64:c7:b2:f5:ba:76:f4:63:2f:70:ee:fe:ec:
eb:72:9c:58:b5:a4:98:61:6a:99:96:6f:f2:7c:05:
e4:3f:32:2d:0f:64:25:2f:a7:6a:d2:d0:7b:13:bf:
24:11:c6:cd:4c:c5:cb:5d:0c:7b:20:0f:83:bd:ab:
16:9c:49:a2:2e:5a:f1:37:31:7a:cd:9c:45:f5:63:
fc:2a:8a:c1:4a:fb:93:3c:ef:1b:33:46:5f:04:03:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:68:CF:5A:13:75:B1:46:23:02:CE:90:21:A9:AC:2C:8E:6A:39
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:77:32:6c:a1:03:ca:a2:7d:71:07:72:da:e8:a4:d8:6a:
db:2f:fe:df:59:2d:3b:f8:ea:eb:ff:50:93:73:7a:30:4d:8f:
7b:63:63:11:62:59:a3:7f:6c:7c:30:1c:a9:75:f0:8b:51:30:
98:f9:20:d0:1a:99:b7:74:91:3a:80:11:40:a5:4a:44:89:57:
fc:f8:13:1c:e9:2a:4f:56:04:2a:d6:52:47:ce:92:3a:d7:c7:
73:9e:4c:31:2a:b7:2b:7f:16:fa:02:e8:15:34:bd:f7:66:e8:
0b:f6:94:08:0f:fd:98:4e:51:a1:4a:1e:bb:6e:0e:a1:da:62:
28:3f:14:be:ea:29:35:37:c5:77:9d:2a:6f:a1:4e:ef:e2:83:
31:89:c5:72:2e:a1:4a:b5:29:6e:40:d3:49:4a:d5:4b:74:93:
65:d0:a6:cb:22:dc:d0:aa:b7:59:8e:ee:30:df:82:f8:05:80:
ed:7c:b6:48:3f:31:19:3d:91:a9:59:de:f3:1e:4a:f1:42:4a:
19:16:3e:72:3f:4b:0b:05:dc:61:cc:7e:1d:36:95:ce:e3:be:
ed:88:24:d4:7f:ba:96:69:e7:7a:e0:98:35:69:95:bf:18:28:
72:41:69:88:c4:96:80:57:4f:63:9b:3d:15:81:3a:e8:20:9e:
3d:b1:74:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEAgcKd6fARgexZ7kntokoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2
Nzg1ZWIwHhcNMjYwODE1MDYwMDM2WhcNMjYwODE2MDYwMDM2WjAzMTEwLwYDVQQD
Eyg3NjY2NjhjZjVhMTM3NWIxNDYyMzAyY2U5MDIxYTlhYzJjOGU2YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo67h9TMvxJ73taF7tfjQ7/PiYwJp
uBIP2ZCU20NQui/Ubh8TV72yyAvc0UMH6lauMIh+VrS3aRnACgmMfMM6b0el37bB
2APSC3+599LU/bsXn4OV7Wj3nqQUVt6oexrEQC5PaTu3231UZOKlpJFtsd+Kh9v8
IuFHOxJ0Gk8SJb5VhFDm1Vxnj6o0lTjp7Af8zk5uF9KMx42ndPpAojmWA8oflSQu
H2THsvW6dvRjL3Du/uzrcpxYtaSYYWqZlm/yfAXkPzItD2QlL6dq0tB7E78kEcbN
TMXLXQx7IA+DvasWnEmiLlrxNzF6zZxF9WP8KorBSvuTPO8bM0ZfBAPzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZmaM9aE3WxRiMCzpAhqawsjmo5MB8GA1UdIwQY
MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct
NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0
LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqB3Mmyh
A8qifXEHctropNhq2y/+31ktO/jq6/9Qk3N6ME2Pe2NjEWJZo39sfDAcqXXwi1Ew
mPkg0BqZt3SROoARQKVKRIlX/PgTHOkqT1YEKtZSR86SOtfHc55MMSq3K38W+gLo
FTS992boC/aUCA/9mE5RoUoeu24OodpiKD8UvuopNTfFd50qb6FO7+KDMYnFci6h
SrUpbkDTSUrVS3STZdCmyyLc0Kq3WY7uMN+C+AWA7Xy2SD8xGT2RqVne8x5K8UJK
GRY+cj9LCwXcYcx+HTaVzuO+7Ygk1H+6lmnneuCYNWmVvxgockFpiMSWgFdPY5s9
FYE66CCePbF0Tw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:19 2026 by rpki-client