Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: NEZNBawV45GsOLkTcTet17mw+ARp4H8HZVIsvP0LHQM=
Subject key identifier: BC:C7:F5:FC:AF:8D:D5:10:17:1E:E7:3E:D6:2F:D4:36:57:A7:A5:DE
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 01A0E7E3B45A79D68C6E8BAB875792543F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 12:00:54 +0000
Manifest this update: Mon 28 Sep 2026 12:00:54 +0000
Manifest next update: Tue 29 Sep 2026 12:00:54 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: QPtZHk8MXcDVbaZcZak3chUexpw0H6vT7b3TgmuLH0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:b4:5a:79:d6:8c:6e:8b:ab:87:57:92:54:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Sep 28 12:00:54 2026 GMT
Not After : Sep 29 12:00:54 2026 GMT
Subject: CN=bcc7f5fcaf8dd510171ee73ed62fd43657a7a5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:3f:62:79:b8:4d:46:00:80:09:cf:ad:f7:
72:ec:03:93:93:73:d2:ed:03:6e:7a:63:35:1c:e6:
e0:20:38:04:7c:77:17:cb:82:b3:9d:e0:b7:47:36:
04:6a:4b:ad:b4:41:a6:7d:af:c2:b8:96:41:eb:48:
ad:ef:57:91:32:d1:ee:d6:77:f9:84:1e:2d:26:c0:
09:b2:d9:9b:b7:c4:5a:aa:7e:fc:94:de:8f:fc:42:
59:2c:71:53:3f:96:a0:bf:06:20:9c:aa:a3:a3:18:
1c:09:e6:a6:8c:56:22:55:3f:de:be:a9:ff:ab:7b:
0e:38:ce:4e:b7:f5:7b:2d:cd:5c:8d:76:8a:d0:00:
d8:ee:34:2b:78:5e:e4:9c:94:59:bb:e9:62:75:77:
6b:9d:d1:4e:8d:66:2e:ba:e4:c3:8f:c6:d3:7e:4c:
46:f2:73:3f:fb:b2:19:1a:9c:ff:b5:c3:fa:37:cc:
c5:30:75:81:ef:32:c6:d0:80:9a:aa:a8:ab:d4:44:
cf:23:3e:85:e8:dc:ed:34:d3:4f:0e:bd:f3:f9:bd:
98:0c:9f:85:63:e6:77:c9:0d:f8:44:ea:9c:4d:98:
12:aa:5e:f0:a4:1b:dc:08:c6:2e:c1:a0:a2:d0:28:
d0:d5:7f:32:86:b9:89:cf:ea:a3:3b:fa:40:33:2b:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:F5:FC:AF:8D:D5:10:17:1E:E7:3E:D6:2F:D4:36:57:A7:A5:DE
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:2f:9b:96:94:47:8c:0a:59:a1:a8:52:cc:d7:c9:74:66:
1e:d3:e8:30:b5:86:1e:8f:ba:60:42:54:52:3f:8d:ca:66:95:
c7:09:61:bc:33:08:ef:af:37:22:07:d8:c0:90:d8:97:17:f2:
e9:06:3d:12:60:4c:f5:12:0e:97:b9:02:dc:8e:45:3c:a5:13:
f7:67:39:61:17:f7:0f:f8:67:5e:e8:78:9a:46:34:ce:a1:b2:
2e:bb:29:bf:99:0b:2e:bc:70:3f:32:79:2e:5d:62:2e:45:04:
0d:95:19:7a:b2:14:5b:74:e6:de:2b:cb:bd:d0:38:a2:81:e4:
39:24:11:f4:9e:eb:11:20:04:36:55:22:04:e2:da:79:9d:76:
09:53:11:c7:5b:71:21:c9:ab:ac:3e:77:b5:a0:a8:cb:3b:8f:
08:e1:55:a1:d7:d6:e9:dc:31:ab:00:e0:8a:5a:70:99:8b:6d:
51:9e:e5:25:de:50:e2:da:33:b7:cb:1e:5e:59:12:50:67:ca:
f0:4c:3a:d1:87:ef:97:e1:3f:89:78:8e:f4:82:92:69:ac:c8:
79:3e:6f:78:61:a3:2c:c8:e8:40:c5:f3:2a:db:09:84:5d:fc:
32:66:69:3e:39:4b:ef:c5:26:41:e0:c0:1d:f0:17:6c:58:62:
0c:8e:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:56:11 2026 by rpki-client