Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: Pt2aDfSRyZTQmMuodLtBkJniFGq9BRYSLl/iYtvFO+o=
Subject key identifier: 5A:6C:F9:68:84:06:75:84:31:D6:C2:19:C8:57:F6:B1:C1:1E:12:94
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019D26283F51F3835B4BDE6C1DFDB6E30309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 18AB
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: +Fjytryh12nxFSc8243CxkGYcVcEZ+CRQudcG7HcVlM=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3f:51:f3:83:5b:4b:de:6c:1d:fd:b6:e3:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=5a6cf9688406758431d6c219c857f6b1c11e1294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:4c:8e:4f:66:6d:51:9e:c4:e2:3c:dd:99:
7a:b1:0f:d2:01:a2:5f:76:00:46:15:2e:81:16:96:
31:d9:ca:48:84:c2:60:b4:dd:80:57:da:3b:8c:49:
b0:5f:65:6c:6c:bf:86:8c:c9:b6:19:5d:1a:e7:ec:
38:b9:29:8a:9b:ac:01:82:92:76:6b:28:01:66:ae:
8b:4b:4d:93:b2:d0:a9:1d:ba:ae:cb:3f:05:7f:9e:
12:53:54:a5:fb:ec:93:1d:87:98:ec:be:61:af:98:
87:ae:f2:99:fc:1b:42:1f:24:c5:91:62:e4:64:a7:
d2:b4:2a:66:35:ae:3d:7e:38:93:db:81:76:a2:f6:
25:99:d6:83:31:b3:fa:14:8d:f9:05:29:b9:d3:b4:
5d:c0:1c:59:19:8f:f7:68:20:91:62:15:6f:91:e0:
9e:6f:c5:3c:81:c4:9b:77:97:5b:da:c0:35:01:4e:
aa:2b:f0:0d:08:03:fc:e3:2f:26:52:45:56:ec:a1:
be:64:58:ef:f1:64:3d:a4:4f:75:3e:23:d4:df:a7:
92:8d:57:04:64:f8:94:ab:36:42:7a:10:2b:a9:1b:
0e:c1:7c:40:d4:91:f2:8f:af:6d:be:ab:85:0f:2e:
17:3b:e9:c9:f0:78:73:ba:63:f5:49:4c:da:af:60:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:F9:68:84:06:75:84:31:D6:C2:19:C8:57:F6:B1:C1:1E:12:94
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:69:24:1c:a2:9a:7e:b7:14:af:e0:13:d1:b4:06:ef:15:
44:33:a5:dc:03:79:db:d8:00:98:5c:78:2f:b9:0c:b3:fe:d8:
81:dc:4a:59:81:f2:f8:14:3d:8e:88:24:65:2c:98:2c:b5:61:
d1:d9:ac:d2:e6:f1:71:03:25:4a:f7:0e:4a:5a:f2:6c:f7:54:
a7:9c:7b:44:28:d4:44:62:9d:93:d7:f3:df:7b:0e:eb:5a:f6:
cf:a7:28:f1:17:28:6f:8d:cd:1a:6f:9b:17:79:14:18:8c:66:
6d:96:2a:19:b4:49:67:65:4e:9e:e1:ff:f4:51:41:8b:32:de:
f3:11:32:3a:50:15:80:77:4c:d7:4a:78:ad:12:92:2d:92:a4:
7e:8a:c9:10:2f:3d:51:6e:f0:17:45:ad:db:b4:42:98:b6:34:
a9:1d:c2:e4:8d:86:d9:4b:e2:7f:bf:e1:86:3b:ea:0d:fc:4f:
de:91:1a:79:d9:17:53:68:0d:ec:4c:4e:49:c9:06:11:df:2b:
fc:b4:af:93:56:6b:0d:92:9a:48:4d:61:22:5a:ff:b2:12:62:
97:86:d1:98:42:23:84:04:bd:49:21:d1:33:6a:5b:fa:cd:41:
b1:4a:c4:db:5b:d0:ca:1f:f5:2a:06:53:ab:f4:db:6c:de:45:
22:4e:bb:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKD9R84NbS95sHf224wMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjYwMzI1MTgwMTA0WhcNMjYwMzI2MTgwMTA0WjAzMTEwLwYDVQQD
Eyg1YTZjZjk2ODg0MDY3NTg0MzFkNmMyMTljODU3ZjZiMWMxMWUxMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0pMjk9mbVGexOI83Zl6sQ/SAaJf
dgBGFS6BFpYx2cpIhMJgtN2AV9o7jEmwX2VsbL+GjMm2GV0a5+w4uSmKm6wBgpJ2
aygBZq6LS02TstCpHbquyz8Ff54SU1Sl++yTHYeY7L5hr5iHrvKZ/BtCHyTFkWLk
ZKfStCpmNa49fjiT24F2ovYlmdaDMbP6FI35BSm507RdwBxZGY/3aCCRYhVvkeCe
b8U8gcSbd5db2sA1AU6qK/ANCAP84y8mUkVW7KG+ZFjv8WQ9pE91PiPU36eSjVcE
ZPiUqzZCehArqRsOwXxA1JHyj69tvquFDy4XO+nJ8HhzumP1SUzar2DCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFps+WiEBnWEMdbCGchX9rHBHhKUMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMElpJByi
mn63FK/gE9G0Bu8VRDOl3AN529gAmFx4L7kMs/7YgdxKWYHy+BQ9jogkZSyYLLVh
0dms0ubxcQMlSvcOSlrybPdUp5x7RCjURGKdk9fz33sO61r2z6co8Rcob43NGm+b
F3kUGIxmbZYqGbRJZ2VOnuH/9FFBizLe8xEyOlAVgHdM10p4rRKSLZKkforJEC89
UW7wF0Wt27RCmLY0qR3C5I2G2Uvif7/hhjvqDfxP3pEaedkXU2gN7ExOSckGEd8r
/LSvk1ZrDZKaSE1hIlr/shJil4bRmEIjhAS9SSHRM2pb+s1BsUrE21vQyh/1KgZT
q/TbbN5FIk67ow==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:03 2026 by rpki-client