Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: 2Mg8Nwn97wsEUKxvVWYvJxrKCZc2lxgPnU/Es2K6AGI=
Subject key identifier: 08:D4:64:CD:69:19:C0:2D:83:24:59:F5:A3:58:0E:5A:52:35:8F:1B
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019E1D59C498C6EEA0107B6C4DE34B51439A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 192B
Signing time: Tue 12 May 2026 18:01:22 +0000
Manifest this update: Tue 12 May 2026 18:01:22 +0000
Manifest next update: Wed 13 May 2026 18:01:22 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: OBqI5qkhLJs9q33LHP1XzAdbS5OhzXFmgqnpvaDe/rA=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c4:98:c6:ee:a0:10:7b:6c:4d:e3:4b:51:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: May 12 18:01:22 2026 GMT
Not After : May 13 18:01:22 2026 GMT
Subject: CN=08d464cd6919c02d832459f5a3580e5a52358f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:1a:31:ac:64:b6:bb:32:5f:c3:8c:a6:04:
e3:d1:81:a3:6c:58:c6:7f:10:b2:29:58:fc:1b:64:
de:a7:b3:e7:9c:ae:20:8d:0a:bc:0f:76:60:e9:bd:
c9:ba:e7:cc:fe:26:cf:69:5f:cc:19:b4:2d:e7:f1:
71:4e:60:f1:11:aa:52:3e:9d:4f:e1:32:c9:19:24:
4c:29:f8:bd:60:e3:1a:57:c4:c6:9d:71:e1:0a:4e:
96:82:f6:e7:78:a9:fd:ce:05:63:fc:85:9d:c7:3e:
cb:ae:68:d3:10:cf:a2:f3:d5:8c:f8:10:6a:89:c8:
28:f0:37:64:c6:b6:4a:ab:93:5b:4a:79:d2:50:af:
c4:a4:63:81:0b:dd:15:9d:7f:06:61:70:ae:b0:33:
e9:8a:6c:83:97:54:d9:15:ea:13:52:01:04:4f:15:
35:ef:28:d3:15:16:f1:35:8c:f7:a2:45:68:7d:a6:
f3:7a:19:f2:1b:d4:6c:03:a9:c1:0e:68:c2:72:cc:
3b:d6:61:03:be:9d:7e:2d:cb:a6:56:af:04:c2:c6:
68:26:05:e0:71:e3:64:cb:83:ee:e5:9f:ce:9f:df:
33:62:9c:0e:93:38:fc:55:e5:fc:f2:ce:2a:0c:d6:
55:42:e4:ab:88:4d:6a:86:11:59:bc:7f:f6:92:42:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:64:CD:69:19:C0:2D:83:24:59:F5:A3:58:0E:5A:52:35:8F:1B
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:08:71:f2:9f:2e:5b:fb:ea:a7:0e:65:40:6f:e5:69:77:
51:56:c9:f6:b4:62:9b:ca:43:f4:dc:45:74:51:00:00:36:ae:
5c:a0:4f:20:9a:5a:5b:3f:fa:ce:01:56:5a:fa:2d:88:48:b3:
eb:a3:39:6c:5a:50:41:e8:12:2d:6d:27:fc:13:a5:dd:6e:d3:
51:2d:46:c6:5d:72:bc:e5:9b:14:fb:57:1d:33:1c:e2:44:e4:
4e:d6:ec:e7:36:b6:d0:08:37:ff:05:39:9c:91:f9:13:ba:5b:
1b:97:40:61:18:f4:c7:d8:1f:22:53:65:d8:47:31:b4:1b:fa:
57:af:77:21:46:f5:6b:a1:ee:c4:bf:2b:9b:f8:82:ee:8a:99:
a6:ee:08:3a:85:be:c6:bf:8b:38:44:94:c0:c5:cb:bd:de:3c:
93:63:a3:d8:c5:87:d4:11:d8:51:3c:2e:f6:f3:48:0d:8f:cd:
4c:fc:62:68:f9:5c:78:83:9e:74:b9:a6:e5:74:49:b0:ed:92:
20:b9:f4:17:f0:fe:9e:4b:da:67:cb:f8:4b:5a:08:8a:ca:bf:
99:2f:e4:7c:a0:52:16:9c:00:4a:95:6a:9b:84:82:1e:d7:43:
94:86:b8:7c:4b:af:d5:41:18:09:b3:b2:82:ac:9d:e7:61:c9:
de:9a:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:35 2026 by rpki-client