Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: ZX5XV+O3giw19z5t5i4JRDgeAdjePHzdh/JzPwU4SoY=
Subject key identifier: 95:0B:A7:FC:9A:4F:D0:A2:5F:6F:BA:87:7A:4F:69:86:92:F1:B7:5D
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019DED121328BF594CE166A4BE235E174DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1912
Signing time: Sun 03 May 2026 09:01:17 +0000
Manifest this update: Sun 03 May 2026 09:01:17 +0000
Manifest next update: Mon 04 May 2026 09:01:17 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: g1iOmXIcssXkjlFtZ/QqqCX8PHMHwIsPJUZdpcn+Itc=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:12:13:28:bf:59:4c:e1:66:a4:be:23:5e:17:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: May 3 09:01:17 2026 GMT
Not After : May 4 09:01:17 2026 GMT
Subject: CN=950ba7fc9a4fd0a25f6fba877a4f698692f1b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:c1:3f:73:2d:49:8d:73:fd:9b:ef:cf:c6:
83:a5:cb:52:24:d5:4a:3a:14:d1:e9:30:12:88:c0:
68:e0:96:dd:50:aa:e3:d2:86:00:35:be:84:4d:5e:
d3:9b:dd:24:a5:92:14:25:cd:aa:82:2d:9d:12:6c:
4b:71:58:db:f0:48:cd:e3:5c:e2:c9:b5:a5:9a:16:
c4:e0:f9:e5:24:a1:fb:09:82:01:a2:1b:f7:c7:ee:
fd:50:5c:62:dd:e7:88:e8:2e:df:d6:02:cd:f6:e1:
70:03:13:f5:a9:2a:5e:81:48:3d:c6:01:3d:ea:5e:
f3:ce:6e:67:2b:98:d9:56:82:7f:ad:a5:24:0f:63:
1e:f8:63:2d:f0:5d:5c:03:15:c4:2a:6e:27:96:e3:
cc:85:93:f3:80:aa:43:27:d2:23:fa:93:eb:50:de:
f7:3d:8d:2c:e9:fe:d2:b7:27:fc:cf:fb:b5:12:02:
45:33:7a:6f:22:70:e0:cb:f2:2c:4c:da:de:f8:a1:
ad:1b:f1:43:f3:cc:31:1d:43:5a:be:57:6e:b4:3d:
f4:41:d9:94:06:31:65:33:5e:df:09:e4:51:39:7b:
26:b3:8b:05:75:d2:4d:db:bd:36:b3:ec:b3:b2:e8:
17:73:46:aa:79:29:d8:c7:b0:c1:3a:6f:2f:46:91:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0B:A7:FC:9A:4F:D0:A2:5F:6F:BA:87:7A:4F:69:86:92:F1:B7:5D
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:39:27:1d:f0:69:c4:ec:6b:cc:cf:27:1e:8e:92:8e:e2:
84:e2:bb:10:f8:77:47:35:9c:e9:b6:7c:f7:dd:9b:34:e0:a7:
14:cf:14:f6:b3:15:c4:ef:64:90:2d:19:aa:b2:58:49:3b:1f:
ba:db:19:ac:82:1a:e1:35:e8:02:79:e8:b0:2e:95:dc:be:84:
0c:e3:78:73:5c:96:3c:fb:7d:e8:15:21:7c:ae:b5:93:dd:d3:
29:c1:2a:02:ea:55:05:e9:0d:4e:d2:f0:4f:7c:e6:99:f8:35:
02:46:e1:5c:c9:db:9f:40:7e:ed:e6:3f:50:f3:b8:a7:be:e4:
be:e8:0d:d1:bf:b4:c3:e2:eb:bb:eb:f7:33:ce:a9:e4:e8:fb:
d4:44:05:c6:0b:d2:0c:28:df:de:f1:24:2c:a6:41:78:8c:a8:
f2:51:93:f1:c3:d2:b2:ba:d1:1c:75:ab:59:85:bf:dc:f7:07:
5f:28:91:29:ac:54:78:e3:f0:47:07:f1:02:fa:ae:aa:d8:fa:
02:3b:09:81:bd:ea:94:fa:1e:47:49:41:3d:92:cd:84:d3:5c:
b9:97:73:a8:1e:8a:a4:00:ed:bc:b8:e1:0d:89:3b:7d:93:d1:
60:5f:7b:93:17:6d:ca:b5:d4:e6:57:98:74:f7:65:60:91:18:
5b:c0:95:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:14 2026 by rpki-client