Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: lR/hIXdn4IqOH03129bshQfXWSUHWMbPc4ShHmS+3cg=
Subject key identifier: 55:A9:B8:06:97:53:E0:BB:FB:22:16:1B:F9:66:FD:E9:B4:7D:75:A0
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01A020C30B10982DBC041921F5DC214DD776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1A0F
Signing time: Thu 20 Aug 2026 20:00:48 +0000
Manifest this update: Thu 20 Aug 2026 20:00:48 +0000
Manifest next update: Fri 21 Aug 2026 20:00:48 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: wdTSuTftExf94hbNsDRy7N7nJC7pZ2Jx2qgj7QS/Dig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:0b:10:98:2d:bc:04:19:21:f5:dc:21:4d:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Aug 20 20:00:48 2026 GMT
Not After : Aug 21 20:00:48 2026 GMT
Subject: CN=55a9b8069753e0bbfb22161bf966fde9b47d75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:6e:53:e4:87:ea:fc:4f:03:a0:23:d8:bf:
78:c6:15:73:9f:7e:c8:05:bd:db:70:50:a2:d1:f1:
ba:ad:01:48:a7:cc:ee:38:5d:0d:84:ba:ce:4f:f6:
2b:ac:ef:e8:e0:1d:3a:97:62:06:32:b4:2b:b9:0b:
ff:47:2b:53:c8:31:72:f6:5a:0a:35:53:09:14:44:
22:f7:b1:30:a8:e9:3a:ca:a7:d1:99:bc:9a:02:84:
b1:7c:04:f2:16:59:1a:8d:a4:af:07:48:89:ef:5b:
d1:80:57:de:f9:f0:6f:f8:78:e8:30:8b:b1:4a:a5:
53:22:4b:2b:a5:94:c5:3b:2d:db:57:c1:03:06:a3:
23:d4:c8:05:fa:db:95:51:60:10:b1:33:80:9c:0b:
46:4c:dc:16:43:e9:5f:ff:ed:dd:b0:ca:4a:c2:1e:
82:51:d7:45:12:79:a8:7f:09:43:47:60:3f:53:e6:
14:81:1b:fa:eb:92:75:8c:d3:79:4f:ca:b6:ba:17:
35:b6:6e:e2:63:c7:1c:1f:47:b1:74:33:c6:b0:9a:
94:60:40:69:08:4a:f6:cc:7e:97:74:ee:dc:18:e9:
a7:71:bc:2b:98:bb:08:ea:09:69:5e:c6:2b:ce:82:
e8:af:dd:b2:03:b5:be:c7:78:f8:d5:2a:da:f3:1a:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:B8:06:97:53:E0:BB:FB:22:16:1B:F9:66:FD:E9:B4:7D:75:A0
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:68:d3:e9:c0:cc:76:5e:25:38:7a:8b:ca:d6:24:9e:bb:8a:
03:23:eb:36:0d:0a:92:ac:f8:99:b6:fa:ea:4e:75:50:64:39:
f2:c6:ce:f7:f0:12:95:fe:a2:50:5b:a1:f6:19:76:2e:fc:2f:
76:10:70:74:b3:60:a0:a1:b8:02:74:0c:95:29:2b:75:b7:71:
f9:44:4c:92:54:49:a1:d3:43:19:8d:96:4f:9a:b9:6f:60:66:
40:fc:14:d4:78:0c:1e:90:15:67:26:40:a1:53:0f:24:18:30:
15:f1:4f:9c:b0:4b:78:b0:2a:7f:aa:90:fa:4d:b7:18:ce:2c:
62:a6:8f:1d:67:3f:f5:85:fa:62:79:e3:6a:35:ae:7c:48:11:
a9:31:7c:b4:5d:66:fe:ca:4b:18:3b:da:a3:44:b8:84:0b:b0:
04:7c:d2:b3:f4:26:f6:55:63:ae:b9:ad:1a:e5:a4:2a:e3:9c:
15:8c:d1:f5:8c:ce:0f:c6:73:89:13:96:e6:5c:d8:de:0b:de:
46:c7:47:9d:04:f2:d3:49:b0:26:fb:22:c8:d6:84:d0:81:ed:
5c:2c:9e:d9:64:a3:23:56:a8:a7:1d:a5:5d:c4:40:1f:be:97:
1a:7f:7d:74:ab:36:43:b2:f3:c5:3b:dc:47:c6:a8:81:d3:13:
2c:38:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:12:07 2026 by rpki-client