Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 05j7MI1ABOjxTkL6EfgYTwLDcdoeShZ7ycnbR5unkrk=
Subject key identifier: B7:1C:11:D0:AC:00:A3:28:6B:34:9C:A0:04:FD:FB:81:B3:AD:3A:F3
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A1DCB908C42FC44BA3631171AEB1DCE433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1B1E
Signing time: Sun 15 Nov 2026 01:01:16 +0000
Manifest this update: Sun 15 Nov 2026 01:01:16 +0000
Manifest next update: Mon 16 Nov 2026 01:01:16 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 1Y7xfXKc8F7ShiaMhyqHifZ4yWAEg0pTuBhD6kb6oYQ=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:08:c4:2f:c4:4b:a3:63:11:71:ae:b1:dc:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Nov 15 01:01:16 2026 GMT
Not After : Nov 16 01:01:16 2026 GMT
Subject: CN=b71c11d0ac00a3286b349ca004fdfb81b3ad3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:06:52:24:4e:7b:e2:bc:8b:70:be:42:ab:
31:cd:cb:df:37:ce:64:aa:02:fa:14:95:8d:80:d4:
31:95:7d:24:87:b9:bf:dc:a0:df:63:f7:f8:06:90:
4e:af:ea:f0:a0:be:c4:50:b0:f6:43:0d:a9:a9:33:
17:05:19:a0:d8:ef:11:32:00:c6:29:84:18:f0:b8:
fa:88:a9:b2:a2:14:bd:fe:0e:c1:00:62:93:2d:66:
21:74:cd:49:88:80:b8:0b:78:7e:1d:a1:af:90:9e:
52:3f:b2:1a:7c:91:88:b7:3b:86:25:7c:03:24:6c:
7a:a6:1a:ce:22:25:db:31:58:7a:fb:5d:57:0a:32:
5b:ce:c6:de:3d:14:13:3c:0d:70:44:26:db:c3:cb:
a1:44:a0:32:90:31:59:ec:e4:d1:e6:8f:5e:0e:21:
48:32:39:53:a5:66:6f:d2:ad:9e:0b:54:26:6b:d6:
16:41:0f:4d:de:af:a3:db:a4:49:98:05:5a:23:49:
c5:8d:85:fb:ec:54:e2:04:a4:6c:9c:ba:0a:e1:b5:
d8:ac:1b:f6:03:0f:1b:5e:ab:03:6f:ab:40:de:a5:
01:62:3f:c4:bb:05:bb:9d:ca:25:c5:3c:29:70:ef:
1c:d1:6e:49:2c:4e:d2:17:3d:e1:b7:f5:18:a3:5a:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:11:D0:AC:00:A3:28:6B:34:9C:A0:04:FD:FB:81:B3:AD:3A:F3
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:98:ef:81:dd:a3:d5:6e:f9:7b:ab:43:4e:e1:53:19:0a:64:
57:7d:6b:ad:c5:9d:13:11:a6:a4:ad:49:6b:2c:f2:80:4e:91:
8c:b5:8c:b5:dc:4a:37:41:fb:45:9f:aa:14:bd:54:1e:7d:b7:
5e:7d:75:37:68:9d:9b:0e:88:41:2c:c1:3b:ad:95:b7:ce:aa:
4d:58:c0:17:6e:bb:5b:af:48:48:7c:d7:80:54:51:28:a8:41:
79:eb:b7:1d:49:75:fb:2f:88:72:11:e8:bd:5d:66:5d:1a:30:
7d:e2:17:19:31:57:5c:a1:cf:8d:b3:9c:c7:0e:4c:a1:78:62:
d7:a6:64:4f:e6:0a:05:84:53:65:0f:eb:c9:b5:06:48:98:8b:
d7:20:ae:2d:7d:d1:a3:7a:ed:6c:43:6e:63:ad:d8:31:86:de:
df:bb:95:c8:8b:6c:68:08:8d:68:08:3c:12:67:82:7f:b9:e1:
d7:0a:ee:bb:c7:e6:d4:f4:84:0a:32:e1:60:b7:ed:e8:db:84:
8f:f3:c1:02:64:9c:7d:5a:3a:de:0a:4d:bb:ac:42:3f:f9:f6:
21:5d:76:7c:a0:c0:8c:6d:be:95:49:08:fe:8d:4e:e5:b1:48:
9f:7c:15:b1:61:80:4e:39:58:7f:e4:88:ae:9e:39:f6:94:78:
fb:e4:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:23 2026 by rpki-client