Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: x2kIBkUFa7SZsSehlmUEyo9Lfbd6g6dkDXLfId9V3V0=
Subject key identifier: 75:8D:E8:F9:C8:BB:5A:B4:97:CA:1D:92:D4:92:5F:55:BB:47:1D:42
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019EF982E25607FC9148F0F0DC3D60B78A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 199D
Signing time: Wed 24 Jun 2026 12:02:44 +0000
Manifest this update: Wed 24 Jun 2026 12:02:44 +0000
Manifest next update: Thu 25 Jun 2026 12:02:44 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: DNk8THbztXYyCZepdKMUqbzZJju6Ca7JjEaCzT9ZruI=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 12:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:82:e2:56:07:fc:91:48:f0:f0:dc:3d:60:b7:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 24 12:02:44 2026 GMT
Not After : Jun 25 12:02:44 2026 GMT
Subject: CN=758de8f9c8bb5ab497ca1d92d4925f55bb471d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:bf:ce:1c:be:9c:f3:56:8c:82:95:6a:ef:
b8:fb:44:6a:53:c8:ee:85:45:2d:4a:66:49:97:3a:
28:2a:bd:96:36:83:d9:be:ca:d5:f4:7b:2a:62:f4:
76:bc:cb:7f:4f:3f:66:7c:ba:20:46:e0:bb:35:34:
94:2a:0c:a5:0e:85:a1:61:c4:bb:f8:28:cc:5a:c4:
e6:f2:6b:35:2e:63:04:37:86:75:0a:06:18:cc:aa:
75:8a:5d:41:a9:73:f5:1c:2d:74:e4:5f:6b:aa:ef:
e6:a8:fb:4e:b4:d5:f6:6e:4e:b4:cb:6a:0a:01:27:
0e:1d:38:6c:a5:45:79:01:ec:7e:90:47:b3:17:75:
50:ca:4e:45:6a:8e:56:93:51:07:fc:c7:27:ce:b7:
e3:e1:41:38:d7:bb:7a:54:bb:53:68:82:65:de:0a:
c5:95:f4:6e:a5:87:0f:2f:a6:0d:17:2f:af:87:40:
57:3c:59:16:a2:e4:dd:64:79:f2:8b:88:42:3a:d0:
19:c3:d1:c5:19:f8:c1:cf:f8:c7:41:75:6d:76:22:
de:cd:2d:5c:4d:6a:bb:89:f9:d2:95:38:ba:bf:ee:
79:66:ca:e2:6b:14:e5:fe:ec:f8:b4:cf:8d:93:87:
a8:69:c9:31:d0:75:e6:76:92:ba:84:c5:48:4f:39:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:E8:F9:C8:BB:5A:B4:97:CA:1D:92:D4:92:5F:55:BB:47:1D:42
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:06:4f:91:8a:11:d7:f9:a9:23:c9:2b:c9:77:14:03:de:
25:0c:33:df:a8:b7:53:c9:20:99:55:57:4c:12:a0:b5:c3:11:
38:5b:c8:b5:2b:19:4c:1e:cb:90:2a:cf:72:9a:f1:76:e7:29:
33:0c:74:75:f4:7a:0c:13:d4:16:c4:6d:40:b9:03:3a:75:d7:
b3:5a:eb:ee:24:aa:0b:c9:72:b2:64:db:8b:66:44:e2:92:89:
d6:56:f6:37:d0:8e:ac:72:68:22:46:ab:d1:42:d9:10:7e:7e:
2d:f1:f0:c5:2e:81:54:96:62:09:d0:cb:b2:c3:57:ea:d3:ca:
c7:75:b9:d6:42:73:61:7d:9d:78:23:89:c9:83:6e:3d:5b:cf:
9a:c7:9b:91:eb:8f:b9:18:39:0c:d2:aa:57:ec:d2:83:ba:ce:
68:87:00:6d:e3:d2:e5:03:4e:d5:80:ff:47:1b:1f:a5:26:26:
8b:da:b8:84:3b:cf:d8:f1:1a:90:12:cc:cd:84:3a:bf:04:ee:
f2:48:6e:08:1e:47:ea:07:27:d9:e3:be:b2:5f:23:90:c7:f8:
cf:f4:98:f3:06:cb:12:e9:ab:62:8d:5f:b9:93:a8:c5:75:ea:
b2:f3:44:3f:ac:4c:22:ba:56:3c:24:86:5a:ce:32:3f:a8:72:
f2:5d:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:23 2026 by rpki-client