Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: 1YGMUAYFQx7Vd3MjIuw6SzFRNPt34KkjofGuQAuDKKM=
Subject key identifier: D1:EF:C1:16:B2:36:0A:2F:B7:F1:25:06:FF:4D:AE:D4:F7:06:99:D0
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019EBF5AE3639F859C7EF43AA9ADE152389D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 05:01:05 +0000
Manifest this update: Sat 13 Jun 2026 05:01:05 +0000
Manifest next update: Sun 14 Jun 2026 05:01:05 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: 2/2gigB77qSyEMsQuzbAisMOyp+8zHhsY+lOl2jyvvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:e3:63:9f:85:9c:7e:f4:3a:a9:ad:e1:52:38:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Jun 13 05:01:05 2026 GMT
Not After : Jun 14 05:01:05 2026 GMT
Subject: CN=d1efc116b2360a2fb7f12506ff4daed4f70699d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:db:0c:58:71:33:9b:5b:01:25:ab:e0:a3:
ed:e0:9a:0e:1b:8a:bb:c9:d6:68:d5:d6:92:df:f7:
c0:ab:2e:bf:3e:d5:ba:a0:eb:e2:1c:62:ae:16:f1:
27:32:83:6e:4d:d8:77:bd:b9:ff:9b:44:22:e7:6b:
0d:40:d0:ca:f5:f1:af:31:8e:ad:85:c7:15:e0:0c:
b1:bb:89:b2:12:6f:ab:b2:b9:8a:cb:2b:84:a4:71:
6c:3b:4d:93:57:1c:82:bd:97:40:13:d1:6a:91:68:
0d:77:0d:4c:87:1e:25:19:49:9f:ab:dd:00:f8:54:
97:8b:e4:41:45:c5:74:20:0d:db:92:ec:dd:e7:e4:
2f:45:a9:47:b5:5f:eb:85:0c:0c:93:da:fd:6c:aa:
6b:41:c7:81:b2:13:82:4b:32:6c:7e:21:ca:d6:21:
ea:7d:61:75:ca:5e:01:c9:50:ac:6b:5b:30:aa:a2:
b4:be:70:a5:14:5a:5b:2f:e2:88:95:63:dc:f1:d8:
e3:d7:22:52:c1:a5:94:cd:8b:d4:1b:dd:84:79:5e:
da:71:d6:95:db:9d:ff:12:dd:ce:4f:88:c7:1f:ea:
05:fc:a7:56:7a:83:01:07:b3:3e:b0:5c:0d:30:0d:
0e:4b:c0:5f:6f:85:8e:02:5b:e2:4d:3e:16:cf:d5:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:C1:16:B2:36:0A:2F:B7:F1:25:06:FF:4D:AE:D4:F7:06:99:D0
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e7:12:97:75:32:79:dd:35:96:c7:94:72:6b:ab:a9:97:1d:
e1:b7:49:1e:01:df:96:da:45:90:db:9e:e7:2f:c9:8c:ab:79:
56:e1:f7:72:ee:62:be:21:e4:f6:87:ae:5c:e6:b0:b1:d0:2e:
6e:1a:ec:65:72:14:82:a0:dc:0e:73:03:ec:2d:b1:2e:fc:68:
8b:ef:35:42:35:28:b8:43:3a:b2:c1:1c:28:3b:a3:ff:4b:16:
37:12:89:78:a9:75:bd:df:16:82:ec:94:29:1e:bf:78:de:fc:
ef:90:ee:63:58:d7:26:b1:f3:db:71:76:0a:55:89:8d:3c:bf:
c0:4e:80:53:75:dd:7e:ae:af:d4:98:d6:08:df:87:5c:ff:54:
ef:fb:ad:c4:77:36:0d:4c:4e:a0:75:54:4b:81:4f:d3:66:09:
95:f6:e4:0b:51:9e:82:55:c7:b9:e1:af:01:69:69:b1:ee:72:
0c:a0:79:e0:0b:2f:ce:96:81:7d:21:46:18:91:ac:7a:9c:19:
3e:30:20:a6:44:79:6e:54:be:de:32:0c:bc:b6:3f:24:0b:c5:
b5:fb:4c:ab:cb:15:d5:37:c8:c6:54:e2:91:2e:28:6b:fe:f9:
86:bb:25:18:14:28:04:b4:75:b1:67:60:80:6e:0d:c6:db:78:
0b:dc:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:59:57 2026 by rpki-client