Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: JuJi5o3pRKdGImv5Ffw67ncvyO9r/bmdcGP7MU6gr28=
Subject key identifier: A4:63:B2:8E:3F:4D:96:29:C5:5A:6F:64:DB:7F:8F:0B:C3:F1:0D:1F
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A0D426A10A7CEB89A7C6435CE600678264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1A95
Signing time: Thu 24 Sep 2026 16:01:36 +0000
Manifest this update: Thu 24 Sep 2026 16:01:36 +0000
Manifest next update: Fri 25 Sep 2026 16:01:36 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: fTBmIItJbQITg4Rd1jqxX51D2jAPxzDyQIQuVT9gFMY=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:a1:0a:7c:eb:89:a7:c6:43:5c:e6:00:67:82:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 24 16:01:36 2026 GMT
Not After : Sep 25 16:01:36 2026 GMT
Subject: CN=a463b28e3f4d9629c55a6f64db7f8f0bc3f10d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:26:75:0d:7b:73:90:83:f2:36:1a:ee:4e:
a0:30:d4:bf:fa:06:15:52:4e:28:c4:9d:34:ed:d4:
9e:82:ae:23:98:3d:3d:d6:3f:fa:39:f4:28:4f:c3:
9d:53:7a:a8:32:e6:72:aa:91:43:8c:86:19:19:2d:
6c:5e:f2:d1:4c:31:c5:01:31:4b:dd:7b:7e:58:ab:
fb:71:2c:69:be:7f:2b:52:3c:8d:ed:62:62:6a:e1:
a0:0a:21:36:4e:43:96:01:96:7e:88:05:33:fa:26:
fa:de:09:4d:8a:b4:f3:e7:e2:d2:a4:12:64:6c:13:
f6:4e:93:63:64:ef:2f:dd:a1:5c:b2:b1:5f:b1:ab:
7d:ce:58:1d:aa:6e:b6:45:95:30:9e:26:97:57:5c:
93:b2:18:24:d3:e1:5e:2a:df:f9:af:fd:da:55:38:
0f:f0:83:83:21:83:9f:b6:60:69:6a:12:84:9f:96:
72:d9:2b:4e:fa:9d:c2:cc:f8:89:f0:0e:0d:2c:52:
b2:28:78:da:e0:79:c3:0a:2a:65:ae:a0:c5:8d:2a:
9b:17:35:23:e1:d7:27:7d:ec:5b:cc:9a:c0:42:f8:
cf:5d:11:21:e2:bc:8b:f6:d3:cd:76:34:7d:f2:16:
53:b7:a4:39:7b:60:a3:f0:8c:c2:e6:68:55:79:3c:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:B2:8E:3F:4D:96:29:C5:5A:6F:64:DB:7F:8F:0B:C3:F1:0D:1F
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4f:93:92:8b:57:96:04:6d:c5:02:08:96:9b:c6:5d:49:c2:
2c:f5:56:42:d8:60:9f:5b:69:f5:bb:56:f6:f7:f8:0c:c9:0a:
b3:26:10:43:2a:e8:4e:b3:28:4a:f8:0b:d9:3b:9a:66:b3:17:
a6:e6:d2:ee:9b:db:ff:72:00:a0:8d:0e:5d:29:4d:94:9a:dc:
49:40:cf:cf:0d:dc:d6:fb:83:3e:9a:e7:ad:4e:93:bf:d9:73:
f3:28:30:38:78:46:fc:28:0b:e1:7d:56:d8:39:77:31:7b:a5:
93:2b:ae:9e:02:16:59:0e:94:b8:d3:87:da:3f:99:1b:b8:1b:
23:55:6a:84:1c:86:9e:aa:c9:58:db:8b:98:42:21:34:26:f1:
3e:ee:04:87:21:ea:fb:a1:24:f0:aa:a6:2e:f4:14:ae:37:84:
fc:a6:69:f8:5b:03:ea:ea:71:09:75:a8:0d:6e:a2:ef:39:42:
bb:f3:54:5d:b2:a3:dc:e7:1c:fa:8e:e5:85:d2:7d:73:26:f9:
9e:88:67:9a:29:2f:2d:3c:1b:8c:55:d8:69:d6:02:f0:64:da:
82:c2:ed:87:d7:a6:c7:41:a3:06:df:ff:96:5a:c3:ff:86:dd:
b5:18:b2:45:e6:71:3f:bd:77:6e:00:d9:7a:e2:4b:f6:f8:a0:
57:a9:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:16:23 2026 by rpki-client