Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: xzwScbNujM9leL+1AygJAhdoW19zFd/vlqApntFZWgc=
Subject key identifier: 09:1B:15:20:6A:AF:46:DB:4C:80:FA:F8:49:11:77:A7:DF:2E:34:6B
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019F92111FE7FBC0A38E0E195C4444780D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 03:00:23 +0000
Manifest this update: Fri 24 Jul 2026 03:00:23 +0000
Manifest next update: Sat 25 Jul 2026 03:00:23 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: xq7qIHQkvyLgohVGwt9eNcBG/NB4pPGTE3Umbp1OFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:1f:e7:fb:c0:a3:8e:0e:19:5c:44:44:78:0d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jul 24 03:00:23 2026 GMT
Not After : Jul 25 03:00:23 2026 GMT
Subject: CN=091b15206aaf46db4c80faf8491177a7df2e346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:f1:56:ef:c5:d6:29:63:96:b8:9b:37:5b:
f3:50:da:5e:2e:07:8b:2b:14:45:23:31:a8:ed:fb:
01:fc:52:1b:48:16:29:43:32:b9:81:4e:d3:70:3a:
85:9f:a4:d6:4d:e8:3b:f3:df:95:32:34:bc:fe:98:
13:5d:12:1e:d3:9f:d2:d0:55:37:08:4a:cf:f5:cf:
c9:b7:4d:37:e9:7b:43:98:85:23:70:9a:bd:c0:e1:
bd:8f:d9:e7:d3:ae:e7:9e:f4:58:87:c2:a4:d2:f3:
35:11:43:d7:14:a4:5c:25:a3:dd:46:2a:50:f4:78:
9f:9c:f1:bd:5c:ed:6f:ad:de:5c:ed:1b:a5:3e:fd:
27:b6:02:67:aa:26:31:62:26:fb:21:6e:87:ee:59:
8e:88:6c:26:d0:0d:d2:49:6b:60:86:25:62:93:67:
91:fb:ad:90:fe:13:d7:b6:c2:01:b0:ba:99:01:35:
db:29:94:26:91:e1:3f:41:ec:bd:52:cf:66:93:03:
39:29:b2:3d:d2:65:e6:07:22:7c:c2:dd:00:f1:7f:
68:c8:27:36:94:61:1a:3f:6a:dd:29:57:8b:7e:a5:
98:61:17:6d:03:ad:90:5f:bd:ce:2b:a9:f6:93:24:
c2:43:7c:53:e7:f1:96:3e:3a:75:25:8e:46:e6:40:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:15:20:6A:AF:46:DB:4C:80:FA:F8:49:11:77:A7:DF:2E:34:6B
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7a:52:04:7d:71:3c:e4:39:2c:4d:bf:ac:b3:79:c5:e7:09:
57:de:41:56:1a:ec:14:35:bb:c6:dc:7e:de:08:a3:39:37:37:
79:21:f9:04:e4:95:e9:7a:b8:0b:4f:db:88:c3:f7:45:f4:25:
6d:c8:eb:95:2c:82:40:f7:d3:93:5c:1e:4f:51:81:fd:62:9f:
c7:8a:e8:78:f9:07:c2:18:7c:e0:b1:4a:3e:b8:51:a6:82:77:
9a:ad:e3:78:3a:d0:88:01:d4:76:0f:ad:20:ae:99:17:85:b1:
d2:34:4d:bc:ea:e3:fe:2f:e1:3d:d7:ae:89:a5:65:87:b2:47:
5a:01:99:77:08:03:b6:be:92:7b:1b:c7:6e:70:9b:e3:65:9f:
86:cb:e2:08:08:be:57:fa:b2:1a:e7:a3:e9:1e:23:41:8c:50:
e7:ab:d7:da:14:3c:1a:2e:03:d6:17:16:a8:d8:97:25:bd:b0:
26:71:9e:ee:c5:fe:65:cb:75:34:b3:b9:96:34:60:b9:fc:52:
da:7c:59:ea:f4:8d:0f:58:88:6e:60:54:8c:2e:7c:2a:9b:2c:
07:86:6f:ca:cd:06:ea:9f:a2:14:57:47:e1:1d:53:0e:02:a5:
7d:a1:87:5f:6a:41:97:ec:cb:cb:e0:40:2f:73:3f:01:ea:f7:
54:9e:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:55 2026 by rpki-client