Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: Mg4y3QeKhY6uG2mjlNOSqsMJbgh3UI+L9iZ7KgbHBrk=
Subject key identifier: 02:49:A3:31:8C:1C:45:6E:C8:CB:08:CA:70:5E:DA:B9:49:BD:EC:D7
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01A1219D09A85AD282A68E67FD884F4C7929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1A94
Signing time: Fri 09 Oct 2026 17:01:42 +0000
Manifest this update: Fri 09 Oct 2026 17:01:42 +0000
Manifest next update: Sat 10 Oct 2026 17:01:42 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: lYWuJ9bfGfJAVARH5fKmatjBzKkSSv7WeTfhszpUXs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:9d:09:a8:5a:d2:82:a6:8e:67:fd:88:4f:4c:79:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Oct 9 17:01:42 2026 GMT
Not After : Oct 10 17:01:42 2026 GMT
Subject: CN=0249a3318c1c456ec8cb08ca705edab949bdecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:b6:8d:e7:c1:d5:a2:5c:0a:dc:5c:9c:bd:
84:6e:ca:10:b1:1a:28:bf:ac:24:2c:fc:c9:ee:5b:
d3:bf:a6:8b:ce:72:b2:87:95:16:f4:73:c6:db:ff:
0e:7b:fb:c9:f2:92:dd:19:3d:1b:9f:50:d2:be:6c:
6b:d7:d7:bf:0d:59:f4:8f:58:85:f4:5d:7b:a7:25:
16:3f:29:ad:20:d0:38:81:2a:94:66:a6:67:11:2b:
97:98:88:07:84:ed:25:24:eb:5d:3d:b3:e6:6e:23:
3a:43:bd:73:3b:4d:42:ac:fa:98:94:ad:ff:90:05:
90:fd:92:ca:4f:76:63:1f:60:eb:6a:66:90:f0:b6:
95:25:29:a1:9b:70:d3:d3:a5:95:5e:ce:d6:b3:d6:
35:85:30:1c:50:6d:85:ec:f8:13:a8:6f:9f:76:78:
97:2c:be:0f:9f:d0:1b:3d:5f:ed:5c:d5:16:bc:fe:
e9:c1:78:c3:27:d6:28:73:b3:c1:94:31:fa:53:63:
11:4a:9c:7f:ae:19:37:37:51:0f:ba:66:cd:5c:eb:
cf:c7:3e:7f:74:eb:6e:af:c5:3a:50:d6:65:d5:02:
13:dc:57:45:ca:1c:54:63:ca:74:26:da:79:98:96:
22:d1:4b:32:ae:44:ad:c6:a2:18:c0:c2:7d:13:de:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:A3:31:8C:1C:45:6E:C8:CB:08:CA:70:5E:DA:B9:49:BD:EC:D7
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:9a:b5:88:86:2f:6b:36:c7:52:48:6c:da:61:d9:5d:48:
b5:b4:29:6c:0d:dd:02:82:85:d1:b9:1a:d2:45:aa:80:65:0b:
b4:99:7b:08:24:45:1c:e5:96:80:bc:86:44:df:69:ff:e0:c4:
7f:e3:ee:37:93:bf:89:97:a1:b2:6b:24:8b:ee:01:3d:a3:97:
0d:2b:9c:28:4f:aa:10:4e:b2:3f:69:63:aa:68:3a:0c:7a:49:
1c:f9:ba:ef:af:2a:1c:4b:6c:a9:05:6d:b9:94:76:07:ba:d2:
cf:92:9c:8f:72:ca:8a:46:04:a6:e5:c7:e5:03:81:bc:a2:51:
4d:13:2c:c3:01:12:64:a2:51:f8:6d:08:3a:4b:d7:28:d3:58:
ca:c3:f3:cb:65:17:aa:2a:6e:bd:a0:81:56:98:f3:3f:a3:b7:
e4:26:b4:9e:b2:51:8e:a5:95:de:e4:71:93:93:0a:bc:af:fc:
95:2c:42:d8:7b:6c:66:06:8c:14:1c:e2:c4:b1:29:9f:6f:4c:
fe:3d:1a:29:a1:4b:aa:9e:f5:f9:7c:b7:03:5e:34:a1:54:22:
b1:70:fe:da:e4:53:7c:64:8a:d7:a2:fa:e2:6d:6e:3f:b7:dc:
72:7f:2e:2f:69:7b:b3:d4:eb:d5:1d:ba:19:dd:a6:5c:f8:ba:
92:93:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:20:13 2026 by rpki-client