Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: nPhoytmIH3BkvIDG7f7arsVbQy12NOetlnPSf2dmGXE=
Subject key identifier: C0:04:AF:E1:DE:62:56:4A:0F:BF:63:5D:E4:CD:27:B1:EE:E2:A9:68
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019F95B720CBE57C9824054C995C1473F423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 20:00:34 +0000
Manifest this update: Fri 24 Jul 2026 20:00:34 +0000
Manifest next update: Sat 25 Jul 2026 20:00:34 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: dZ2Ba8dJtZScu+1xo+wdy/gOW5dKeAaWsVdO0JcNZmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:20:cb:e5:7c:98:24:05:4c:99:5c:14:73:f4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Jul 24 20:00:34 2026 GMT
Not After : Jul 25 20:00:34 2026 GMT
Subject: CN=c004afe1de62564a0fbf635de4cd27b1eee2a968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:8d:3d:8b:bd:33:18:39:ea:4a:c2:70:25:
76:35:01:0a:2f:96:4b:09:2f:94:0a:f4:9a:07:24:
76:59:f0:ad:e1:7d:24:b8:a3:a9:79:1d:f8:e9:93:
e3:07:2f:e2:b7:80:95:8d:53:c0:27:69:29:cb:e1:
e7:da:a2:92:73:c6:e1:1a:72:59:f3:63:09:5d:de:
d4:9b:df:3e:0c:88:30:ac:71:c6:d3:d0:34:5c:a1:
7f:bd:bf:76:9b:00:01:88:87:77:fc:33:38:26:7a:
4d:41:45:4e:14:48:9c:af:c9:db:b7:bf:25:1b:55:
53:3e:8e:97:15:b9:02:2b:16:8b:5d:46:10:d8:fc:
7b:c7:db:f8:22:b8:fa:e1:c5:76:04:c8:7b:ea:2a:
69:b9:bb:3b:81:a2:ce:f1:36:96:29:86:24:86:c0:
d0:b0:f5:ef:4a:b4:82:53:72:f0:9b:90:78:e0:34:
de:40:b2:ef:08:8f:41:3b:a2:e4:bf:ee:1b:1d:f6:
45:b8:42:1c:8f:29:46:53:ee:e9:6d:3b:f7:1c:f4:
ce:38:a3:2c:11:88:84:18:5f:c1:9b:55:4a:27:11:
75:54:b7:bd:93:7e:4e:3b:a0:97:5b:39:1d:49:f3:
e2:43:6d:40:a8:62:90:4c:a3:1b:56:2d:f0:ed:e4:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:AF:E1:DE:62:56:4A:0F:BF:63:5D:E4:CD:27:B1:EE:E2:A9:68
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:aa:38:ec:a8:46:9e:c1:fa:a2:35:ee:85:d6:c5:63:78:
42:e7:b5:fa:12:fc:5e:6d:04:ca:1f:b4:8b:e4:9a:c8:0c:33:
cc:fa:47:f2:e9:11:32:1b:99:b9:db:15:6b:1b:cc:4b:07:3d:
f1:e9:28:88:62:1a:83:b1:ca:9d:f1:ac:d5:df:2c:a4:82:4b:
c3:31:9c:f6:04:65:8c:ce:35:4c:44:35:66:73:90:64:4e:22:
e2:00:ff:3f:7b:82:a7:f3:10:24:f9:af:b1:3d:43:77:a2:73:
bd:45:3c:5b:0a:9a:7d:98:ee:96:ef:0e:09:85:c5:31:d5:3a:
44:f9:85:8f:b7:f7:1d:1f:36:04:55:d6:f9:a2:e3:b8:68:27:
0c:2f:90:d4:46:6e:a0:e6:2a:ca:05:49:0e:b5:4e:9d:2d:33:
e4:a2:fd:be:7a:66:e0:9b:9e:83:de:21:4c:1e:18:12:55:59:
43:54:ba:3a:4f:0d:b1:4e:43:91:15:e6:00:57:da:aa:a8:3f:
e4:7d:a0:d4:b9:f9:0d:54:08:96:a9:f4:0a:0e:b6:1a:ec:93:
7c:cf:e9:0a:f4:59:29:47:dd:6e:2f:36:b8:68:a5:16:d6:c8:
bc:dd:2a:0d:99:c5:d6:d1:4e:65:37:0c:37:2c:ce:6f:94:b4:
6d:84:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:40 2026 by rpki-client