Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: bX4D8gPFF6f5zDiCZVbcnz503d/W0iYuSxUguYUNy+M=
Subject key identifier: 05:CC:CE:32:97:6C:F8:A2:71:1A:A8:79:51:16:00:BE:88:5C:4A:E1
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019D37891559F0F82909F9D427924276D2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: SE7zvyq7f2smFLwM98pJRclhybQfu9xdLzHKvaQFzUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:15:59:f0:f8:29:09:f9:d4:27:92:42:76:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=05ccce32976cf8a2711aa879511600be885c4ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:17:a7:e1:d8:2d:6c:71:75:9d:2a:27:6c:
c7:7e:cc:ab:0b:af:aa:6c:5c:be:5f:a7:4c:2b:5e:
b7:07:19:ba:fe:bd:2f:11:f4:f3:72:da:0b:48:cd:
74:07:fd:73:d5:ce:40:20:17:83:86:3c:ac:8e:23:
1a:2d:c3:4d:0a:3c:0f:31:86:d8:78:2e:67:6d:a9:
95:f4:d3:92:cd:85:7c:cb:89:a0:58:46:a6:fe:25:
33:a8:62:7e:66:d5:59:ed:1e:db:f6:52:fb:f3:68:
e8:60:e1:d2:bf:63:fc:75:c8:3c:45:90:99:16:03:
e7:70:9a:82:fa:36:51:70:f8:0b:e9:ca:b4:a2:d7:
0a:62:f2:26:d1:86:67:c5:b9:14:51:ce:66:7a:7c:
5f:dd:09:39:af:95:d7:02:47:88:6b:dc:f3:97:d9:
1d:1c:67:39:b4:4d:f7:14:a8:ba:4c:c2:e2:07:76:
98:37:57:30:86:42:50:16:a4:1e:7b:f9:e1:5b:56:
3c:9c:67:77:01:47:c0:52:c6:e9:5a:c0:6a:20:73:
b2:99:e9:78:30:4e:13:5e:58:c6:1c:b2:c7:5f:17:
19:3d:24:93:6d:f4:fb:6c:42:f9:5d:70:0f:69:5b:
f7:bb:52:90:f6:66:59:bb:5f:d4:01:32:2b:76:25:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:CE:32:97:6C:F8:A2:71:1A:A8:79:51:16:00:BE:88:5C:4A:E1
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:bf:69:0c:56:1d:29:71:51:56:27:f4:99:e3:75:08:6d:
03:da:60:e8:3b:30:c2:fa:7b:e9:d1:ce:47:04:0c:27:88:51:
11:4a:0a:76:fc:72:90:7c:9e:8f:4c:69:b4:d5:16:5a:72:bc:
20:dc:34:63:65:c7:42:c5:a8:07:22:25:21:9e:0b:b8:17:c0:
c1:e5:d4:ad:f8:66:5e:7e:1d:92:43:57:c7:c2:21:8e:ad:20:
3a:53:62:1c:73:75:89:32:bc:9f:cf:3e:37:a2:f7:f7:95:1d:
d2:49:f9:1d:6b:d0:69:39:ee:9c:fa:73:ab:fc:b0:90:7e:5e:
47:20:3f:92:c1:18:b1:38:93:ee:0f:05:84:30:ff:be:e6:6e:
2d:d6:c4:90:31:c2:33:03:cb:8e:5c:ad:99:5e:ba:be:e2:bf:
78:9a:90:0a:7c:9c:0b:d2:5e:05:ac:f8:71:9d:09:55:df:e5:
d6:4f:97:28:8d:03:02:8b:fd:e7:0d:42:a2:fa:d9:a7:e4:47:
14:00:03:3d:45:cb:29:dc:48:c8:05:4f:97:80:a6:81:07:cd:
1b:b8:38:32:59:29:18:20:63:79:f5:bf:48:2f:02:07:83:49:
33:9d:9f:83:26:bf:05:2f:70:66:fa:58:93:82:82:bd:f3:88:
24:2d:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:13 2026 by rpki-client