Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json)
Hash identifier: Rpq5RIB6SzuaV1ZxvmXelpQJRMcSJ9OldmlLftU7HQs=
Subject key identifier: 4C:35:CE:82:AA:E8:B3:CF:DD:3B:9A:B6:22:5A:9E:3C:FB:7A:EA:8E
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 01A13258FACEC76EFB6D7750F288896A17D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
Manifest number: 1AA1
Signing time: Mon 12 Oct 2026 23:00:54 +0000
Manifest this update: Mon 12 Oct 2026 23:00:54 +0000
Manifest next update: Tue 13 Oct 2026 23:00:54 +0000
Files and hashes: 1: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: Lc/xz9YX/JajfIqQ3/kf7LuRUH68/A4D7LDPGR4dJSU=)
2: oQ465u5ABjy_bI2bid_xFwTRdk0.roa (hash: kIHQwUf72AZCR5eKFc8oJX7KFeRJopOB0HQDj68kcTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:58:fa:ce:c7:6e:fb:6d:77:50:f2:88:89:6a:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Oct 12 23:00:54 2026 GMT
Not After : Oct 13 23:00:54 2026 GMT
Subject: CN=4c35ce82aae8b3cfdd3b9ab6225a9e3cfb7aea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:57:47:04:b0:1d:6d:0b:1e:7c:a3:be:4e:
ed:1f:c8:25:2d:64:d7:a7:ae:ef:4a:22:53:50:c7:
ab:e3:a7:4d:a5:f5:77:42:74:9e:8f:9b:c2:49:c6:
cb:d6:fc:c1:9f:07:79:e9:24:2b:5a:b9:c6:6b:04:
50:f7:92:a8:58:c9:8e:db:9c:dd:dc:c4:62:c6:6a:
9b:12:aa:aa:85:5a:e7:e7:94:d2:11:05:d8:94:3f:
90:e0:34:7e:f6:2f:9e:40:66:a8:44:ef:58:65:7f:
f6:86:7d:44:3b:85:2c:5b:44:83:01:b8:d0:6b:64:
67:66:65:91:5f:88:f5:8e:f5:66:e3:63:5f:3f:27:
e2:d1:a8:7a:50:3e:0a:20:57:8a:06:63:73:98:cf:
f3:96:c2:41:98:7d:3c:78:a6:10:73:0b:83:7b:93:
ad:c4:89:1a:29:c2:53:02:8a:c4:d4:c4:4a:79:a1:
66:d2:b2:51:25:70:05:f2:9e:00:11:79:34:57:58:
75:89:76:df:94:74:8f:71:61:ca:73:b9:8b:78:ed:
49:fc:f5:9d:0a:d4:e1:b7:75:9a:7f:4e:49:86:f2:
f9:11:39:16:04:df:1b:de:7f:18:04:59:9f:ae:fb:
eb:da:7b:94:99:a8:9c:c3:eb:9c:59:c2:33:8a:0b:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:CE:82:AA:E8:B3:CF:DD:3B:9A:B6:22:5A:9E:3C:FB:7A:EA:8E
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:64:dd:fe:96:43:e2:ec:b1:26:99:49:13:62:82:e5:ab:
0f:6a:80:d0:be:ab:05:53:02:4f:19:fa:54:c4:16:58:8f:23:
9f:8c:31:70:b9:3d:9d:1f:7e:35:1f:ed:0a:16:67:8f:72:ac:
e0:f2:0c:e5:b9:1f:33:0f:a4:38:6c:cd:c2:11:ce:15:f7:8b:
81:37:3f:59:9a:aa:e8:4c:9e:c8:59:a6:07:48:92:b7:cf:f7:
7e:72:be:be:a9:f7:30:37:c7:34:99:73:2a:cc:8d:94:c0:6b:
b2:e4:16:63:ed:bf:84:d9:6a:39:1e:b4:39:c0:3a:45:33:1d:
e8:0c:0a:3b:49:87:83:11:c6:3d:b4:6b:ba:21:9b:6a:38:f2:
f6:6c:57:09:26:74:7c:71:b8:1f:46:44:31:10:24:39:2f:1d:
4f:f8:82:a7:b4:1b:e9:8a:e4:e2:be:57:c8:17:aa:f1:7b:8f:
3c:a4:91:fb:16:37:31:50:20:90:41:d3:e8:25:08:9a:0c:1b:
6a:b2:c3:1c:16:45:67:a4:8d:09:d3:bb:3c:26:88:29:51:78:
df:1f:1a:ba:f0:e1:7b:16:5a:82:65:37:81:fb:cf:46:ae:74:
6d:fd:47:8a:58:29:de:0b:ee:21:ce:3b:aa:9c:39:ef:25:74:
47:ac:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:20:57 2026 by rpki-client