Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: zFDZkqRQMSrFigdvTJ7/jUIAeC/aC2ByIcK2FUZqpjs=
Subject key identifier: 7A:74:90:A6:8F:02:91:2F:59:0D:7C:AE:90:16:28:6A:82:DA:93:DD
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01A132FE636349D98B8809900C7129AC075B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1A9D
Signing time: Tue 13 Oct 2026 02:01:34 +0000
Manifest this update: Tue 13 Oct 2026 02:01:34 +0000
Manifest next update: Wed 14 Oct 2026 02:01:34 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: clY8ahd/3F/Gj+xrafFeP5I1TwfGnM70dPq2smebZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:63:63:49:d9:8b:88:09:90:0c:71:29:ac:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Oct 13 02:01:34 2026 GMT
Not After : Oct 14 02:01:34 2026 GMT
Subject: CN=7a7490a68f02912f590d7cae9016286a82da93dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:6a:0e:dd:c5:96:de:97:1c:d0:4e:0c:75:
4b:1d:4b:40:bc:32:b0:e7:1b:13:c8:7c:35:83:66:
2b:19:0c:a7:53:33:a4:82:d2:cc:aa:ac:0b:67:4e:
af:2e:bf:ad:9d:3c:ae:79:cc:b4:61:1f:7b:2c:cf:
cc:44:02:4b:92:a7:79:b0:20:de:80:4c:7f:7b:61:
00:69:44:db:90:db:13:e1:d6:f8:72:07:56:2a:2c:
bf:36:89:e2:5f:e8:6c:13:f7:92:42:cb:91:68:08:
83:61:00:61:c5:c0:91:8a:5e:88:47:06:9d:f8:2b:
eb:d6:a9:c0:a5:c6:80:35:f6:a8:bf:13:da:53:7e:
c2:13:fd:2d:fc:5c:87:12:ac:c5:3b:c6:90:9d:83:
53:c3:82:d3:19:7f:ea:13:23:7c:a3:67:79:e0:8f:
42:51:93:45:a0:60:ba:14:18:76:5d:cc:00:ef:64:
a5:56:3a:c0:2b:41:62:fd:b8:16:87:a6:92:89:ee:
63:8c:02:83:72:cb:17:2b:f6:ca:94:25:71:0c:7a:
f3:bb:df:1f:c9:49:26:2d:1e:39:50:c0:cc:95:3d:
c8:96:04:05:0d:1e:28:4e:1e:8f:95:65:25:cc:a8:
65:45:28:18:e0:eb:0e:43:9c:6f:dd:12:b1:b3:a3:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:90:A6:8F:02:91:2F:59:0D:7C:AE:90:16:28:6A:82:DA:93:DD
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:3d:a7:fd:d4:98:b1:a7:e8:bf:91:7a:7a:af:da:27:56:
81:fc:83:37:3b:24:70:b2:9a:52:07:f0:0c:03:22:79:d4:a0:
a7:fd:ff:1d:70:6c:59:1a:d1:0f:7d:f0:7b:ef:59:79:8c:eb:
41:ac:49:c8:a1:6e:5b:06:93:e9:d8:4b:3d:b2:97:98:51:a2:
96:ca:67:10:d0:db:54:f1:d6:0d:df:5a:8b:09:52:5e:0d:8c:
14:c8:2f:5f:86:cb:bd:5d:c0:ea:52:1f:81:af:95:c4:6e:34:
6a:09:82:db:d5:22:6e:38:89:45:af:f7:bf:20:43:fe:b4:bc:
a6:6b:14:af:ba:af:b3:ff:e2:c6:67:b7:f8:1a:df:2f:c7:b1:
e9:58:ff:7e:d2:0f:5d:42:bc:10:86:6b:a3:94:35:bd:5f:09:
6c:75:3e:cf:1a:91:9f:b0:cc:bd:de:b1:ef:ff:85:16:61:96:
b4:63:ed:bb:45:53:34:f8:73:1d:29:eb:69:15:91:fd:31:02:
f0:cc:3a:cb:ea:6e:eb:4f:bb:20:ed:ef:db:b3:6a:26:be:c4:
4b:33:ac:51:03:41:f9:33:cd:32:69:7a:a7:66:fe:16:08:6f:
5a:fb:75:f8:4f:e4:2c:de:39:08:a3:f7:a2:ba:b9:91:fa:33:
a3:12:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:13:53 2026 by rpki-client