Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: ukCxaDxF7hYF/3h40q3saeYuen3TPp7i6lm8N4TA2is=
Subject key identifier: 3E:5D:33:93:23:7A:A9:D1:51:87:36:7F:3E:18:62:B5:ED:34:31:75
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019E20FFC3867F5101EB076543CD75A149CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 11:01:33 +0000
Manifest this update: Wed 13 May 2026 11:01:33 +0000
Manifest next update: Thu 14 May 2026 11:01:33 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: Rga5aetLr7ZIwOhmtDVLmm1zbFgPsezT6WtcblDhjlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:c3:86:7f:51:01:eb:07:65:43:cd:75:a1:49:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: May 13 11:01:33 2026 GMT
Not After : May 14 11:01:33 2026 GMT
Subject: CN=3e5d3393237aa9d15187367f3e1862b5ed343175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:5e:82:4b:1f:50:1b:66:c0:41:53:f9:18:
2a:1d:3d:ac:e0:47:be:1a:59:b1:d0:47:fa:5a:48:
f1:75:25:11:86:93:53:59:20:d8:6a:51:6c:2c:00:
86:d4:65:50:5a:37:54:08:10:00:43:c1:85:49:aa:
be:ce:f7:eb:50:a8:cb:3b:b3:71:fb:57:f5:87:24:
96:ad:9e:df:8a:56:54:57:bb:c3:08:27:d0:db:21:
37:1f:d2:d1:6f:e9:d9:20:92:2a:6f:7f:44:fc:12:
68:ea:8c:c1:fb:05:a0:ab:c7:d4:ac:4d:83:24:5d:
35:24:0c:18:6a:5e:ff:2b:04:0d:cb:fe:6f:8c:b7:
14:a9:4b:df:22:68:51:a8:89:77:36:02:bc:15:53:
df:e0:75:79:96:d1:50:23:85:04:57:a4:a6:47:9b:
c7:7e:ca:41:94:bb:81:bb:e0:48:66:36:55:13:eb:
2e:d2:2f:98:79:2f:22:48:9f:d4:ce:cc:86:d6:86:
88:8a:22:9f:d3:a2:f7:7c:e3:77:35:41:f5:c3:9d:
48:5b:9f:f3:47:d0:61:d7:1f:d3:a7:06:2e:26:9d:
6b:88:3e:75:18:2c:07:94:6b:a0:c1:8c:7b:cf:8c:
a9:3f:ed:26:a6:29:6f:bd:11:aa:0b:55:3f:34:e5:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:33:93:23:7A:A9:D1:51:87:36:7F:3E:18:62:B5:ED:34:31:75
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:12:13:e3:2d:45:3d:8d:6e:57:a8:7f:4b:e0:7a:b7:d2:47:
ab:c5:ed:74:12:5b:16:e7:b0:4c:22:6e:24:34:b5:4c:bf:90:
2a:46:ea:fa:b8:2b:cc:94:b7:5f:d5:38:ea:ce:ad:02:b3:21:
0b:65:d3:88:22:22:bf:fa:26:f9:8e:8f:fc:43:54:04:8b:a6:
67:aa:70:32:86:d8:1d:31:cb:ef:51:9d:c4:06:50:e9:6d:be:
bf:c3:e8:c7:8c:58:90:49:10:9f:06:c9:10:de:7f:a7:2f:96:
1f:0c:46:b9:1f:f6:18:46:a2:3a:28:37:e0:62:ce:18:0a:68:
fd:ce:74:e2:f0:f8:3e:6e:b4:dc:47:18:5c:67:54:1f:39:13:
9b:bd:49:4d:d5:fd:da:27:6c:b1:59:a4:9e:17:00:d0:e2:57:
1b:54:29:95:56:7a:5c:18:da:de:2c:9c:a6:18:39:7e:b5:ea:
31:e5:d3:ff:d1:37:aa:ec:6b:81:a9:fc:8c:ca:99:fa:f6:08:
41:cc:f2:48:c6:80:db:55:85:48:84:2e:28:e5:30:90:b8:9b:
3c:ac:56:38:a3:38:63:89:98:22:0b:b1:a5:fb:bf:a5:a9:5f:
5c:01:ba:00:ac:6d:06:82:f6:e5:1e:70:07:ec:e9:3f:db:30:
68:ad:5a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/8OGf1EB6wdlQ811oUnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmQ5YTk1YmFjZTE5Nzg1YzQwNjQ3NjYzZjMxZDkwNTYy
NjFjMmYwHhcNMjYwNTEzMTEwMTMzWhcNMjYwNTE0MTEwMTMzWjAzMTEwLwYDVQQD
EygzZTVkMzM5MzIzN2FhOWQxNTE4NzM2N2YzZTE4NjJiNWVkMzQzMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOZegksfUBtmwEFT+RgqHT2s4Ee+
Glmx0Ef6WkjxdSURhpNTWSDYalFsLACG1GVQWjdUCBAAQ8GFSaq+zvfrUKjLO7Nx
+1f1hySWrZ7filZUV7vDCCfQ2yE3H9LRb+nZIJIqb39E/BJo6ozB+wWgq8fUrE2D
JF01JAwYal7/KwQNy/5vjLcUqUvfImhRqIl3NgK8FVPf4HV5ltFQI4UEV6SmR5vH
fspBlLuBu+BIZjZVE+su0i+YeS8iSJ/UzsyG1oaIiiKf06L3fON3NUH1w51IW5/z
R9Bh1x/TpwYuJp1riD51GCwHlGugwYx7z4ypP+0mpilvvRGqC1U/NOUNRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5dM5MjeqnRUYc2fz4YYrXtNDF1MB8GA1UdIwQY
MBaAFDVtmpW6zhl4XEBkdmPzHZBWJhwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMt
NGVmZGU2ZWIzMmQ0LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9kZDljOTAtMzFhOS00OTk1LTlkYTMtNGVmZGU2ZWIzMmQ0
LzEvTlcyYWxick9HWGhjUUdSMllfTWRrRlltSEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhIT4y1F
PY1uV6h/S+B6t9JHq8XtdBJbFuewTCJuJDS1TL+QKkbq+rgrzJS3X9U46s6tArMh
C2XTiCIiv/om+Y6P/ENUBIumZ6pwMobYHTHL71GdxAZQ6W2+v8Pox4xYkEkQnwbJ
EN5/py+WHwxGuR/2GEaiOig34GLOGApo/c504vD4Pm603EcYXGdUHzkTm71JTdX9
2idssVmknhcA0OJXG1QplVZ6XBja3iycphg5frXqMeXT/9E3quxrgan8jMqZ+vYI
QczySMaA21WFSIQuKOUwkLibPKxWOKM4Y4mYIguxpfu/palfXAG6AKxtBoL25R5w
B+zpP9swaK1aag==
-----END CERTIFICATE-----
Generated at Wed May 13 19:49:00 2026 by rpki-client