Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: MWtDDhKcvVSCV8jD6dDrkKXIcgRTB/gOUtJ4HqoIIuw=
Subject key identifier: C7:09:07:00:36:6E:60:B4:CE:6F:75:8F:35:FB:EB:0E:A5:0E:B0:C2
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019E30A8EE9A0EE38EC6AE7152941B36EDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 12:00:37 +0000
Manifest this update: Sat 16 May 2026 12:00:37 +0000
Manifest next update: Sun 17 May 2026 12:00:37 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: tlHwDFFkGSSX8q8CpqugZqOFjy6es3ycTvhi++QRKgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a8:ee:9a:0e:e3:8e:c6:ae:71:52:94:1b:36:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: May 16 12:00:37 2026 GMT
Not After : May 17 12:00:37 2026 GMT
Subject: CN=c7090700366e60b4ce6f758f35fbeb0ea50eb0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:e4:59:0d:45:dd:2b:5a:98:2c:46:fa:4b:
1c:33:aa:b1:3d:65:7f:cd:5e:e6:d6:e7:75:56:b4:
8b:d1:bf:25:98:b5:e1:e3:93:bb:b9:a6:59:88:61:
40:8f:ce:41:9e:19:52:87:b1:40:d0:e6:40:1f:cc:
77:ec:62:40:2a:57:59:54:58:44:8c:29:01:98:ec:
54:da:3c:04:45:15:3b:0f:31:7a:29:e9:0c:21:e3:
e4:98:a6:eb:29:86:21:e3:d1:02:cc:fa:e8:f6:43:
66:d5:7b:5d:19:94:86:8a:f7:0b:2f:f7:2b:34:40:
45:97:1f:bc:13:c0:92:d1:d7:fb:4a:70:df:4c:56:
8e:83:8a:ae:19:33:60:d2:51:eb:46:be:b1:a4:86:
5e:21:42:f1:55:a3:8d:0e:06:63:39:5e:8a:70:3e:
6e:b7:eb:ae:97:f3:50:1f:75:94:48:6f:13:12:c4:
8d:1e:2f:08:55:1e:ae:6e:6f:d2:ec:6d:ea:05:66:
62:b2:7f:1a:f7:fa:b6:ad:ce:00:f1:b5:bc:f3:64:
10:3a:b8:af:ea:24:a1:e7:77:d2:21:8e:02:b0:a5:
f6:2d:15:c9:9d:db:53:83:e4:75:74:b0:93:20:9d:
ea:f9:bb:d9:2b:b5:8c:2a:25:34:00:e4:c2:9d:3f:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:07:00:36:6E:60:B4:CE:6F:75:8F:35:FB:EB:0E:A5:0E:B0:C2
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:49:60:64:98:21:76:17:a4:94:55:d8:8e:67:ef:d5:93:3f:
dc:21:d6:f2:91:fa:14:c8:db:8e:1b:4d:87:2f:4e:ea:ac:24:
a1:55:45:a0:46:ed:3e:43:d1:0d:c3:69:a3:4a:e4:c8:e8:73:
a6:b4:a1:61:a8:21:19:68:ca:60:cc:90:f5:ed:36:48:a5:52:
22:a0:57:18:c7:e5:49:2d:ae:41:82:8a:03:97:c0:42:02:3a:
39:d7:d2:fd:f1:53:70:cd:2e:91:b1:1e:83:d6:b2:b9:66:e2:
01:ee:2c:07:81:35:c6:3a:0f:e2:1b:42:2d:a9:69:4d:76:4b:
b8:b0:c3:a0:7e:6a:a7:91:11:eb:06:0b:4a:61:4c:34:b9:25:
e3:45:1d:69:19:b9:64:39:10:6a:3b:e5:b0:62:4e:be:4d:1f:
9b:c0:50:3f:d6:8b:82:92:d1:4e:1c:ec:df:ee:17:0a:40:68:
1d:41:48:2e:78:37:a0:d7:40:b6:1f:65:7a:41:66:dc:c4:0c:
88:74:ea:36:30:9f:c8:9f:14:1f:e4:af:92:92:ca:b2:02:29:
98:3c:32:36:ad:b8:5f:23:2a:73:ea:c0:10:67:f4:6b:ec:e2:
fd:38:2c:e3:2a:87:bf:cf:1e:75:c4:0a:35:09:fe:a6:b5:35:
ce:1e:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:27:34 2026 by rpki-client