Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: K80f6gUtsCQeupGSixiJ2cF9ksqVDDPmBzserPXAOhg=
Subject key identifier: FD:58:AA:F9:DF:DB:76:BA:92:93:61:2E:17:4B:7B:07:2C:78:0E:2F
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019F18676AF5FF652EBEA49D1E5F1E04EA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:00:58 +0000
Manifest this update: Tue 30 Jun 2026 12:00:58 +0000
Manifest next update: Wed 01 Jul 2026 12:00:58 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: fBPqGfmx4aIUg/yqMDijBHafHGDMNEmwxkvI3WllRGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:6a:f5:ff:65:2e:be:a4:9d:1e:5f:1e:04:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jun 30 12:00:58 2026 GMT
Not After : Jul 1 12:00:58 2026 GMT
Subject: CN=fd58aaf9dfdb76ba9293612e174b7b072c780e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:25:c7:c8:f9:a4:99:10:e4:77:91:6c:01:
81:b5:36:a2:5c:65:24:ab:35:3b:ff:6e:45:f2:41:
f9:ed:74:88:3e:a7:0a:82:10:20:ee:0a:37:d9:8c:
c7:68:92:1d:f6:48:97:2b:b6:ee:5c:dc:33:6d:47:
47:d1:c0:a2:00:c3:48:9f:be:92:e4:da:67:9d:91:
e3:20:01:7f:8a:db:17:c2:40:68:fc:a4:b6:04:60:
82:2b:15:ca:2f:90:87:c4:93:48:5f:94:6f:ac:3e:
18:c2:39:c2:fa:ca:c7:d2:04:5d:ef:e9:3f:de:b8:
7a:ee:e4:71:39:db:56:13:a0:aa:66:83:26:b7:ed:
c9:f9:75:19:45:c8:70:66:b0:3b:82:bb:46:57:8c:
ce:6f:14:50:0b:dd:6f:ff:ce:1a:3d:67:71:e0:29:
79:11:70:15:94:75:91:a0:d6:f4:c1:d4:ac:a2:17:
69:d5:19:92:63:c3:b0:00:f1:17:2a:28:b5:b1:c2:
ee:63:97:80:81:e7:f7:5a:f0:bb:31:62:d4:6f:dd:
75:61:d9:97:e0:36:0d:46:a5:02:6e:f3:d0:6c:80:
b4:a9:ec:49:ac:29:79:29:f8:f4:3a:6a:a0:97:9e:
2b:33:3f:37:f7:8b:f6:1a:7e:49:fe:3d:bd:55:b0:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:AA:F9:DF:DB:76:BA:92:93:61:2E:17:4B:7B:07:2C:78:0E:2F
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:d5:3c:1d:f2:f4:3c:6c:79:83:0f:02:8e:07:45:a9:ec:
a7:a6:ea:84:4a:bb:cf:e5:e7:57:b9:92:a5:0c:ab:96:da:1e:
3d:4d:20:ad:61:07:22:a4:3c:4a:d4:9f:bc:ed:a2:05:4b:d5:
78:2a:27:64:b9:ae:3e:78:5c:fd:8b:b1:2c:49:a4:12:6e:7c:
18:7a:28:f0:4c:66:a4:77:4d:b9:ca:a6:ce:84:74:9a:ea:cf:
c5:d5:61:91:5a:c1:d9:a3:08:91:73:05:ef:43:1b:8e:d2:5d:
17:68:bd:39:26:fb:f5:a4:18:6a:ca:d7:eb:7b:ee:17:26:df:
bf:d2:88:47:e8:d9:ca:10:fc:a9:cd:22:5a:0a:1e:f2:7f:b1:
ab:52:24:94:79:0a:69:31:44:55:ee:0f:d3:33:f8:8a:9a:a9:
94:c3:c3:09:da:83:b1:12:a5:26:3b:98:38:7c:a3:70:67:f2:
4c:e6:98:fe:2a:55:58:ef:dd:cb:9c:f8:1f:c4:6b:b9:8a:f1:
53:68:35:e1:8b:50:e6:af:c9:37:c9:4e:74:27:67:b7:15:38:
16:66:a8:51:2f:75:79:84:fe:e3:32:e5:14:a9:fa:67:fc:a0:
f9:b0:8a:fc:46:e2:96:12:3b:b8:55:32:4d:3b:fe:17:51:a7:
5f:12:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:46 2026 by rpki-client