Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: j+YjlSOH/oY0FdN4E3EV0bkCLqm8JTJ9jNKTnnjTG0M=
Subject key identifier: BA:64:1E:02:52:CC:FB:11:97:D6:2D:B6:85:18:CC:62:19:0E:18:3B
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019CF986B609E6C03437D77EF89F8B6CD567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 186D
Signing time: Tue 17 Mar 2026 02:01:21 +0000
Manifest this update: Tue 17 Mar 2026 02:01:21 +0000
Manifest next update: Wed 18 Mar 2026 02:01:21 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: 3AEkHYgDGAnbB7pB5EYbDC1gt+YLIPStzbNEjIpcfu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:86:b6:09:e6:c0:34:37:d7:7e:f8:9f:8b:6c:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Mar 17 02:01:21 2026 GMT
Not After : Mar 18 02:01:21 2026 GMT
Subject: CN=ba641e0252ccfb1197d62db68518cc62190e183b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:6e:92:1d:66:dc:7f:1f:71:84:f4:3a:18:
64:6d:c5:09:a7:f5:59:38:53:08:13:9d:f8:01:c2:
17:0f:95:6a:11:8a:8a:14:39:69:2f:d4:49:1b:ae:
56:c9:74:fc:63:9b:47:a0:28:64:c9:ca:a4:2b:8a:
07:69:e9:f6:f2:7c:54:d8:b3:34:36:ba:f3:76:e2:
c7:dc:5c:92:15:52:6a:5f:56:21:03:61:60:f3:3e:
fe:e9:4c:79:93:b7:62:2f:27:74:1f:70:37:0b:4f:
93:a6:b2:53:53:f6:e3:54:a9:b3:b6:b4:ab:73:c2:
37:c0:b5:66:3c:36:d2:49:d9:44:56:25:78:3b:ce:
fd:82:46:03:18:5f:b9:9e:b5:61:32:84:ff:5c:d5:
df:e5:57:b1:eb:89:b7:76:7f:1b:55:71:38:62:54:
93:5e:49:c6:cf:42:77:25:91:93:23:e2:24:60:5a:
e9:6f:eb:f3:00:16:66:08:89:c4:e7:84:1e:ba:79:
80:84:56:73:39:ce:91:5d:25:9a:2e:f1:56:9f:de:
97:df:47:89:9b:40:d0:b6:32:c0:69:96:5e:4f:7a:
cf:f4:bd:f1:24:35:2c:ae:07:53:f7:fe:d8:d0:39:
1a:5f:23:6d:00:f7:8b:f0:25:92:cc:c7:1f:8f:8a:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:1E:02:52:CC:FB:11:97:D6:2D:B6:85:18:CC:62:19:0E:18:3B
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:40:be:05:eb:c5:a5:88:54:5b:55:23:8e:eb:f1:23:6b:8b:
b7:7c:6c:3c:bd:99:d6:d8:65:d9:e0:55:9c:49:27:88:77:1c:
24:0b:e5:f0:99:6e:80:9b:f1:11:8f:5d:bf:3d:75:7d:a4:d4:
cb:13:2a:07:7d:4f:a2:60:af:60:81:08:e1:50:fc:f6:32:30:
28:00:c7:dd:e8:4c:7b:5b:44:ff:b6:f4:db:de:dd:19:9d:b1:
81:3c:b1:97:13:6a:22:92:58:44:90:8b:b2:fa:ff:82:9d:0c:
48:e4:f9:d4:9f:ed:39:0a:94:04:a2:6a:f7:4c:0c:02:0a:87:
45:2b:00:eb:92:a9:43:f4:7a:5d:81:85:4c:fe:c9:74:59:e7:
c8:c4:36:d6:75:57:fd:aa:c3:62:b5:95:10:d9:42:39:01:e9:
c4:15:6b:45:97:22:e5:87:5d:22:89:ce:81:eb:8b:79:3e:1a:
8b:5b:76:a9:2a:ab:e1:25:ac:45:8f:10:fb:b9:da:54:87:d1:
aa:5d:53:56:b4:ac:91:bd:6d:74:d7:be:d1:7b:eb:e0:87:4b:
77:18:94:d0:a6:54:14:d4:d3:9b:b3:78:9b:db:2d:05:7e:e5:
13:ea:67:f5:52:f5:7c:03:9b:24:6a:54:d4:91:a4:89:4b:46:
95:b4:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:49:34 2026 by rpki-client