Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: CixsW3aEhs9pus8YmlJQ5MCEdZ+bzdtS+SRdkNCeyjo=
Subject key identifier: F1:FB:51:AC:05:8E:90:52:59:89:AC:0B:58:A1:3F:E0:9E:C7:FB:43
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019D05536A0C98BBB97C00FB730548533162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 189A
Signing time: Thu 19 Mar 2026 09:00:45 +0000
Manifest this update: Thu 19 Mar 2026 09:00:45 +0000
Manifest next update: Fri 20 Mar 2026 09:00:45 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 18MnXRI0GtRhKZJvusLmkv4okDcVECAU/aEsF0wHByM=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:6a:0c:98:bb:b9:7c:00:fb:73:05:48:53:31:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Mar 19 09:00:45 2026 GMT
Not After : Mar 20 09:00:45 2026 GMT
Subject: CN=f1fb51ac058e90525989ac0b58a13fe09ec7fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:be:0e:b8:98:88:a5:15:95:09:f2:13:46:
35:66:6d:2e:b9:55:f0:3e:68:51:e4:e5:39:f0:dc:
6a:67:e9:8c:76:d8:3b:13:90:0a:14:8d:18:79:98:
f9:2e:92:89:c2:3b:ee:97:8f:6c:1b:f8:6e:f1:3b:
53:21:a1:87:fd:7a:4d:41:02:7e:d3:f3:9b:4b:ea:
64:a7:d1:95:8f:56:42:2d:fa:c6:e2:50:0e:2e:d7:
61:bf:86:55:ed:64:c9:e9:44:2d:70:11:2a:e0:3f:
ee:c7:bd:a7:33:25:31:4d:b3:b7:6d:0f:f9:df:2b:
d6:82:84:c4:de:77:6e:a7:eb:04:f0:4d:0f:d9:b1:
b0:57:f3:4c:54:22:24:a9:a1:07:67:b9:83:e6:c7:
9d:cd:6d:13:34:a0:83:cc:76:1f:a6:83:c1:d6:ba:
3a:cf:ce:ec:51:22:7d:d2:26:d0:71:29:d1:4c:c1:
85:a2:f1:01:21:78:18:c1:dd:12:20:f4:17:32:89:
d9:bd:5b:2e:cf:de:66:23:d9:e5:10:92:0e:d4:30:
8f:e6:8f:c0:9d:fe:a5:64:d9:99:ae:ea:dd:ab:b4:
af:7f:0c:51:19:0c:9f:f5:77:5e:07:11:6c:e7:95:
6d:6b:06:4c:a9:9e:c1:52:5b:43:0b:c3:a0:dc:e3:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:51:AC:05:8E:90:52:59:89:AC:0B:58:A1:3F:E0:9E:C7:FB:43
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:e1:89:66:cb:8a:bf:57:98:0a:ab:90:7e:9f:92:7b:1a:
47:b1:42:7b:b7:ae:c7:41:dc:82:d3:6d:a6:83:d1:49:7e:90:
3c:87:f5:99:25:f0:fc:9a:90:bb:89:fa:45:77:42:a3:42:5a:
71:0f:f6:47:a6:d4:95:8d:a3:ed:14:1b:34:d4:e1:67:5d:4e:
62:ac:c8:f0:59:31:79:56:84:58:61:9a:33:08:e4:5a:4a:1d:
b8:90:13:b8:30:b2:f6:a0:ea:5e:fc:f2:31:4c:89:81:ac:3d:
bb:a6:49:80:3d:58:6f:51:e8:29:99:37:20:df:90:59:fc:04:
1d:5b:70:81:48:14:ce:cf:46:d9:5a:a6:17:57:27:e8:aa:19:
a9:45:5e:9f:4e:c1:d7:38:a4:db:b0:49:75:d5:14:2f:b3:b2:
f0:91:9f:06:8d:98:cb:8e:04:9f:b3:7a:f2:37:6f:e8:cd:cf:
71:42:03:fb:41:bf:37:fa:27:b3:40:e5:40:56:53:dc:5b:ed:
d5:44:b4:00:1d:07:05:a3:fe:a7:5e:f6:00:6f:6c:ec:b8:25:
89:76:47:b2:c9:d7:a6:49:6b:00:c0:c3:2c:8f:35:ed:7b:70:
a9:8b:8d:21:40:a4:15:3d:23:e7:97:f9:5c:c3:c2:e6:3d:7c:
58:0d:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:02:21 2026 by rpki-client