Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: Ea/Xv9OOlvFI7eie8cH0YWkfjGHgaECez7JgmOkI7pA=
Subject key identifier: 52:81:C9:65:5A:A2:D6:64:EF:12:74:65:AE:9C:51:85:6F:8A:05:68
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019F1A55E56F58FD0611B15AFA80648D38A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 21:01:04 +0000
Manifest this update: Tue 30 Jun 2026 21:01:04 +0000
Manifest next update: Wed 01 Jul 2026 21:01:04 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: 05VptlhQ0Kmygy5WarnzIgsupE36vucRJ0gW0n7vgXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:55:e5:6f:58:fd:06:11:b1:5a:fa:80:64:8d:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jun 30 21:01:04 2026 GMT
Not After : Jul 1 21:01:04 2026 GMT
Subject: CN=5281c9655aa2d664ef127465ae9c51856f8a0568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:b4:0d:95:b3:12:57:e1:17:cb:73:b8:f8:
9f:c0:f1:0a:c7:1e:d3:66:9c:2b:f9:a9:29:3f:13:
ad:2a:7b:a7:16:ef:cd:48:6f:86:08:5a:56:6d:a7:
0b:e3:be:01:b1:e4:3b:66:de:2c:f2:89:ce:87:43:
0c:3e:79:4b:65:a5:24:e4:25:30:e9:02:59:3a:00:
13:30:7d:86:87:a6:48:3c:87:ae:2a:cc:6e:a8:81:
a1:c9:37:99:9b:0e:e1:40:fd:60:f6:b5:03:18:5e:
d2:cf:4b:b7:03:07:4e:a1:ef:0e:6b:1c:c6:9a:d6:
d8:a4:88:f9:04:27:11:23:42:0b:d5:39:13:a6:fe:
b7:c2:0f:af:0d:93:c5:67:52:0a:3f:c2:d7:91:48:
b2:cc:42:90:49:ae:ac:02:46:c2:10:79:5b:af:3c:
e7:85:18:ae:27:7c:10:e3:87:23:2e:9d:d4:db:75:
b5:62:b0:90:a0:7b:44:80:ef:e7:c0:1d:e6:12:23:
e9:b1:26:a0:f4:6f:37:6b:0e:ff:60:71:24:ec:c1:
a7:41:d0:d9:9d:13:99:ca:34:43:d8:82:ca:37:36:
7e:1c:95:b1:eb:aa:78:62:1d:d7:d5:fe:1a:c9:26:
69:a0:e0:64:86:bf:04:54:c4:16:ed:62:38:f7:a4:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:C9:65:5A:A2:D6:64:EF:12:74:65:AE:9C:51:85:6F:8A:05:68
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:35:c9:48:0e:a1:a6:bd:d8:bf:d3:59:bd:89:1e:48:6a:
76:2e:0f:ea:83:8a:db:aa:90:c5:2b:25:09:fc:b7:83:00:7b:
d3:2c:26:17:a7:2b:84:df:3e:9e:2e:74:67:2a:de:7e:5a:79:
af:39:63:46:45:c9:ad:c9:ed:e2:f4:dc:69:80:84:5e:14:be:
1a:8b:cf:0d:55:01:55:29:b2:49:49:65:95:92:f8:a4:3f:15:
11:45:59:e5:70:ec:8d:02:ad:3b:3e:af:d6:b4:65:ce:43:7b:
ee:60:49:ee:82:86:2c:c0:08:e7:53:94:31:34:a4:e4:52:ff:
f6:a1:26:bd:3e:6d:13:06:16:ed:8f:3c:94:12:06:39:56:3f:
2b:2f:c0:b7:b9:c5:a2:ef:30:4e:74:a2:0a:90:9d:6e:4c:28:
f3:df:31:98:f6:db:4d:9a:ac:44:c1:bc:35:87:b4:0d:0d:f7:
a3:81:31:33:68:fb:fc:56:ce:11:81:78:b6:b2:bd:ef:35:75:
86:5c:9b:54:e4:74:84:09:4f:62:09:54:a0:fc:8a:52:cf:8b:
82:49:cc:3e:fc:bf:26:be:27:f6:b0:7a:5a:f8:b0:1f:97:fa:
db:48:4b:d5:18:ab:46:41:d1:a9:05:40:00:48:47:6a:45:72:
6c:39:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:59 2026 by rpki-client