Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: H0+XLLa3VbXyjRezA7cqr0X7qUI7YpvQgvFz8wyW9Wo=
Subject key identifier: C0:D3:A4:DA:49:D6:FD:BA:7C:9F:70:4E:A1:F4:B8:C1:51:25:F1:D3
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019D25F1EF3436EEEFE63BE1769D5190737D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: fRu7FqlB7QL+Y1o3krFuFSTs2YnESsboJkkXcq262vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ef:34:36:ee:ef:e6:3b:e1:76:9d:51:90:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=c0d3a4da49d6fdba7c9f704ea1f4b8c15125f1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:c1:c8:4a:8e:74:e3:7b:49:62:58:0b:ab:
a7:f4:24:cf:9e:bc:f3:4d:bc:3b:a3:d9:bf:1c:5d:
7f:6e:ad:cd:24:34:87:cb:06:95:14:51:2d:7a:e5:
78:4b:02:3f:95:cf:48:8f:d6:43:af:59:3f:a3:bf:
d7:71:e3:1a:14:4a:65:39:33:f0:8d:c1:16:a1:03:
b6:39:14:ba:9f:21:0e:51:b3:f3:91:00:a1:0b:71:
70:af:58:54:fc:9d:c5:f8:cd:18:c9:33:c8:1d:15:
5a:98:d9:e3:fa:f8:e1:ba:51:83:3a:34:e3:c5:c2:
96:db:1c:53:5c:23:52:e9:b8:ba:48:d8:dd:30:0a:
86:3b:66:58:ad:5e:3d:32:da:51:59:4b:aa:2d:49:
30:d8:2b:94:20:5b:8d:73:61:f1:86:0f:21:8a:d9:
bc:f9:90:f2:92:9f:cc:2e:09:45:e9:55:5e:a5:f3:
86:31:16:6e:dd:76:57:89:fc:fe:b7:4a:42:53:50:
92:4a:e6:dd:cb:50:32:3a:da:81:7f:8f:6d:b8:dc:
a0:c7:9b:6f:45:f5:c2:33:e7:12:80:62:d4:4f:74:
16:93:cc:51:f4:a4:b7:72:f3:c5:01:36:0f:06:1a:
86:9d:55:a5:c3:40:ed:a1:1e:ac:0e:25:bc:c2:5a:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:A4:DA:49:D6:FD:BA:7C:9F:70:4E:A1:F4:B8:C1:51:25:F1:D3
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4f:04:b5:19:ee:e8:85:de:59:4a:77:c1:42:b2:50:07:e6:
43:11:55:6d:8c:78:6f:4d:60:31:ad:81:f6:29:83:83:19:9e:
31:8a:c8:20:57:72:bb:0a:04:4c:60:39:cb:85:8d:60:e2:4a:
79:92:96:16:34:21:7a:0d:c5:f2:f9:e4:8d:03:32:66:35:35:
8b:94:d7:26:11:a2:d9:52:af:f1:8c:5c:71:3f:db:6d:84:b3:
a4:95:c1:16:2f:fd:78:32:28:2d:8f:19:e8:dd:ec:1b:9d:54:
4e:d0:f8:90:fb:0a:02:b7:95:9d:ef:d4:7b:c8:3d:fd:8f:7e:
21:0f:e0:0d:61:fa:b7:99:92:e4:7f:b5:1c:6a:96:d0:f5:c7:
02:75:d1:47:de:4a:99:02:a8:48:48:d4:d7:88:5c:72:7d:41:
73:34:9e:2d:77:d7:28:c8:41:3f:0f:31:66:4a:9e:a8:f4:43:
9a:5c:de:b3:b8:25:8f:8f:27:91:d3:5b:14:33:a4:50:58:eb:
66:ce:93:a7:0f:80:90:09:94:9d:fb:a1:7e:50:89:4e:80:6d:
6c:d3:0f:e3:5c:9e:bc:5a:e5:96:b7:49:79:b4:0a:25:5a:b0:
81:82:7d:56:c8:37:25:91:02:e9:7e:4c:86:08:a0:3a:c6:59:
fd:54:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:31 2026 by rpki-client