Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: HCjFvfNyqIL2Msk3x+Uiht/hM5uMeCg1X49HSJKTzVw=
Subject key identifier: 4D:A4:02:A1:99:28:75:C8:C4:15:BE:C2:ED:90:0B:59:B1:57:F6:84
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019F8E34E691DD6E105AA8776A6B9D77C136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 19EB
Signing time: Thu 23 Jul 2026 09:00:59 +0000
Manifest this update: Thu 23 Jul 2026 09:00:59 +0000
Manifest next update: Fri 24 Jul 2026 09:00:59 +0000
Files and hashes: 1: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
2: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
3: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: cmOAeQ1wPFf46KfAqolhAF8zVlUo+/ewNQ1LPDtvQi8=)
4: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
5: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
6: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
7: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:e6:91:dd:6e:10:5a:a8:77:6a:6b:9d:77:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 23 09:00:59 2026 GMT
Not After : Jul 24 09:00:59 2026 GMT
Subject: CN=4da402a1992875c8c415bec2ed900b59b157f684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:80:db:40:c8:da:20:bb:b1:f6:71:a6:d0:
9b:77:e5:0c:97:1c:45:a6:c5:3e:55:f0:31:21:44:
86:50:9d:7a:c0:36:83:c9:c1:0c:57:6c:61:ea:7c:
da:13:13:fb:f8:17:1f:a6:83:a8:9e:c3:08:1f:a7:
28:a5:13:d4:da:cc:3a:ce:3f:24:23:4d:d9:4c:88:
54:32:f3:45:82:14:6b:c5:c2:44:c1:35:4d:4e:b5:
8b:ff:be:b7:db:5b:f7:e4:fe:33:ff:c9:5f:43:05:
bd:a9:fc:df:33:66:e8:c3:e9:be:38:41:70:20:98:
9b:1f:fa:fa:47:0b:31:23:05:d5:b8:7d:e4:da:33:
4d:5f:1a:e0:29:c0:ca:67:3e:73:69:bd:b9:5d:62:
c5:e3:0a:db:48:de:c7:a7:51:6b:a9:c8:73:1a:41:
21:75:22:4b:25:30:d8:7f:dd:46:1e:6b:6f:e6:cf:
77:a0:13:14:fd:3e:0a:d3:0b:f5:4b:6a:5c:e7:1b:
fe:85:ac:3e:f9:89:93:f9:7b:b2:8a:94:81:d5:bc:
2e:f5:02:f9:84:c4:70:c1:b1:07:fa:d6:b7:b4:f8:
9d:7a:26:5b:c8:04:8a:6f:3e:2c:1a:35:90:b3:ed:
55:83:7a:74:c8:1f:ab:ac:16:be:1a:90:fb:91:20:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:02:A1:99:28:75:C8:C4:15:BE:C2:ED:90:0B:59:B1:57:F6:84
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:69:95:a5:ac:f8:c3:92:a7:5e:6b:f5:a9:b5:88:09:f7:74:
0b:68:a4:de:d2:c1:6c:7f:bd:2f:cc:5d:c0:7c:b0:b4:07:e1:
26:9b:9b:07:94:49:fd:fa:58:e4:5e:ba:2d:18:da:34:dc:27:
ab:a1:a3:80:81:db:2d:fe:48:5e:ec:61:6f:4c:a8:23:3e:b8:
26:1a:4c:4a:7e:98:92:8e:f5:2e:86:b8:f6:d6:ca:13:d8:93:
54:43:83:29:89:97:ab:54:2d:60:8a:3a:bb:81:1a:ab:6c:e8:
30:80:47:4f:2b:4b:cd:b9:6f:aa:cb:10:32:d5:e6:4f:d7:e3:
78:e2:77:d4:ab:96:e8:1d:c9:c3:af:be:41:34:c4:26:49:93:
c4:f2:b1:b5:ef:ef:be:85:76:04:81:68:8d:64:aa:d4:13:01:
20:18:5d:3f:44:f4:6b:ac:9b:45:0b:1a:45:93:e4:24:d7:cd:
ed:d7:48:df:da:c8:03:b6:15:d3:5d:14:b3:39:fe:6d:b8:8f:
6f:14:fb:b5:40:95:d5:3f:22:10:36:ff:bd:f2:29:11:70:87:
23:24:db:02:2b:e6:79:f6:f0:c7:b8:d5:25:ef:c6:23:6e:b8:
ee:c9:02:26:f5:c2:97:2b:77:08:f3:ab:23:6c:e4:c3:5e:4e:
8a:a4:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:12 2026 by rpki-client