Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: t/HEtfWb0vaY604aQpzuCL/46ZojkudRqWvYmm+3YqA=
Subject key identifier: E6:7A:69:0C:0B:CF:8F:9F:85:2C:2D:6F:8A:CA:10:16:B6:AF:34:6C
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A0ED41D4611DD8173A311C9E8EF2760B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1AA2
Signing time: Tue 29 Sep 2026 13:01:49 +0000
Manifest this update: Tue 29 Sep 2026 13:01:49 +0000
Manifest next update: Wed 30 Sep 2026 13:01:49 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: +aHtg9J77a249p2qCO8l30p+OcmjazlA4+xM86OBH40=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:d4:61:1d:d8:17:3a:31:1c:9e:8e:f2:76:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 29 13:01:49 2026 GMT
Not After : Sep 30 13:01:49 2026 GMT
Subject: CN=e67a690c0bcf8f9f852c2d6f8aca1016b6af346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:7a:cb:50:1b:4a:9b:00:fe:91:27:88:88:
fa:38:ba:f4:95:43:fc:dc:9a:d5:b2:5d:c3:8a:5f:
53:4e:2d:37:eb:95:f4:82:ec:be:b3:99:c2:e0:5a:
5b:f3:cb:7c:29:e9:aa:3f:89:07:2e:21:9f:6e:fe:
72:2f:42:84:ff:c6:c8:c3:a8:10:4a:57:c6:d0:f6:
f3:de:f4:0a:61:ab:56:7d:c1:1f:64:67:cb:1a:5f:
98:be:88:a0:c9:f0:1b:ce:e3:8a:c0:b6:ea:1f:7e:
8c:93:f5:a5:86:5f:35:1f:4f:67:10:1e:6d:aa:7e:
96:8a:2e:0e:fe:46:05:61:77:45:09:72:7b:a3:08:
01:fd:ee:fa:0b:06:f6:d3:43:e3:ba:d6:8f:de:57:
95:95:52:fd:39:e6:f1:62:c5:ae:6a:fa:ed:ff:c9:
2e:07:ea:b3:3a:c1:7a:6c:d6:af:29:af:0a:9b:fb:
8b:c8:ef:09:80:af:a9:9a:bf:44:9d:7c:0d:9f:d5:
b1:9e:4c:d0:c2:5b:e8:78:5f:5b:80:c5:4f:d8:ce:
eb:67:8c:9d:9e:4a:17:9c:77:42:71:48:bf:79:7e:
b9:ed:d4:66:a2:64:53:5e:30:97:75:18:3f:3b:73:
9f:d9:22:89:cc:87:69:2f:61:9a:0e:f8:66:a8:a2:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:69:0C:0B:CF:8F:9F:85:2C:2D:6F:8A:CA:10:16:B6:AF:34:6C
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:db:33:14:4d:e0:cd:f3:d3:fe:c9:16:0d:71:3a:63:59:84:
99:8f:9e:11:88:3d:c0:b2:83:31:64:a6:a4:45:4a:20:80:22:
5f:44:1f:3c:d4:54:b0:5b:43:f2:6d:ab:51:db:6e:ba:ea:0d:
bf:6d:7e:6f:89:a4:2a:db:d2:73:93:08:c3:ad:c7:89:b9:c8:
d8:6f:c9:d0:46:24:b8:0d:8d:f8:cc:52:ad:b9:53:c8:ea:fa:
20:d0:89:3d:2e:5c:71:b1:f5:34:cf:d6:d2:d7:13:68:a1:af:
f7:d2:eb:82:95:7d:6d:df:b1:d5:22:66:3a:33:50:f8:6a:40:
5e:eb:4c:00:a3:0b:99:cb:6c:da:55:6e:42:37:1a:47:39:04:
1c:a3:b4:83:6b:14:8b:dd:94:b1:62:64:d5:eb:83:be:5e:2c:
9e:2d:8d:42:96:cc:dc:96:e7:dd:ad:c8:63:76:91:bc:e0:21:
63:3f:6c:07:d5:2a:cb:03:ab:e2:1d:bd:96:1b:8a:af:6c:37:
26:b8:3d:ab:89:5e:2e:e9:62:a8:ce:b1:fd:10:dd:e9:70:98:
32:62:25:78:62:03:91:23:d4:84:22:22:22:95:bb:82:af:ca:
b5:34:a6:59:c2:a1:4f:36:83:40:38:4c:f1:3f:4a:a8:df:29:
ae:88:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:08:07 2026 by rpki-client