Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: ZUhTVruPQWX2CRwx81a/mxi5+XW7M+PfLtkYoIM+6Hk=
Subject key identifier: AC:7F:8B:C1:70:7D:9D:0A:2A:F3:1E:11:86:33:08:2F:9B:5A:3B:87
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A0DFBCE306AFBE43E47C8549AFC2C4F09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1A9B
Signing time: Sat 26 Sep 2026 22:01:33 +0000
Manifest this update: Sat 26 Sep 2026 22:01:33 +0000
Manifest next update: Sun 27 Sep 2026 22:01:33 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: PINQsYDjYzmGfPMYWWR2q/Kcgq3vJXvE/1ObDDV8LB0=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:e3:06:af:be:43:e4:7c:85:49:af:c2:c4:f0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 26 22:01:33 2026 GMT
Not After : Sep 27 22:01:33 2026 GMT
Subject: CN=ac7f8bc1707d9d0a2af31e118633082f9b5a3b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:e2:f9:77:a8:96:11:46:e8:d5:9e:15:e5:
b1:05:2f:52:b1:63:be:d2:ce:12:30:24:8d:6d:5c:
42:b3:a5:bf:d0:26:5f:d7:f7:45:cb:03:68:c6:9f:
10:1a:59:ec:f9:95:6b:4d:01:1b:61:cd:89:3f:3a:
1d:b1:82:67:66:31:d9:f5:4e:6d:a0:d6:ca:66:aa:
5a:3f:b3:2c:43:54:59:c0:ea:c7:2e:8c:0e:60:a8:
ee:c8:8f:16:59:b5:9d:8f:c9:e9:cf:86:ff:c9:34:
c6:18:3e:48:33:04:f1:ca:99:a4:79:74:48:67:6a:
8d:82:12:c1:bd:fe:72:57:11:0b:53:a3:b5:05:3c:
93:91:99:43:20:f2:3a:14:8b:d4:9d:b3:c4:75:35:
b1:c8:d1:d0:8e:bd:e3:66:a9:cf:12:d9:e6:9b:04:
07:05:89:6f:f8:1e:9b:bb:a4:5c:db:36:3b:81:1f:
6c:ee:00:3c:35:94:19:12:3d:51:28:e4:51:26:bf:
06:6f:8e:79:2b:5a:bd:9f:0c:e0:45:9f:c1:a2:b0:
cb:be:1b:0c:6a:dc:a4:3c:1d:18:58:f7:4a:25:28:
ee:d9:74:bc:58:63:41:a4:53:19:45:c3:ed:25:14:
10:e2:f0:ed:76:4e:e6:cb:1d:e1:e2:65:43:0f:6b:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:8B:C1:70:7D:9D:0A:2A:F3:1E:11:86:33:08:2F:9B:5A:3B:87
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:bf:2b:65:89:79:12:a3:f2:42:da:cd:e7:59:46:5b:aa:
ed:42:fa:94:9b:93:79:88:96:80:93:6d:17:ca:da:85:d7:1c:
bc:c8:63:fe:d2:c4:34:72:a2:d8:cf:59:f7:9c:b7:a3:39:e2:
bc:33:17:19:dc:0f:43:0f:cd:89:56:0f:1a:23:90:f2:97:6b:
74:49:77:78:aa:27:8a:81:11:18:0e:3c:08:76:01:60:7c:1e:
aa:53:c9:be:93:64:8a:43:0e:3d:4c:87:1f:cc:9e:e2:b5:30:
b6:66:16:50:bf:93:9c:f1:4c:83:b9:5a:b1:72:4e:a8:42:eb:
7e:55:63:79:e0:d0:df:b9:cc:fc:1a:dc:a6:57:08:05:a2:1c:
9d:04:85:28:99:be:06:40:7f:97:f4:00:31:cd:c9:09:bb:65:
31:3d:50:08:5c:c9:02:4c:6d:5d:cb:8c:b5:cf:1b:23:e4:cd:
63:cb:3f:19:f5:8e:59:f3:af:6c:b4:93:b6:03:65:0b:a4:3a:
df:7b:ac:0a:21:b6:94:ae:6b:62:d3:3a:12:be:23:83:95:ee:
ed:42:a1:83:32:fc:83:5b:6a:9e:1f:a8:02:25:1c:f8:3e:68:
b6:2a:30:f3:ac:95:3a:2b:59:af:0c:64:4b:e6:d3:8e:36:99:
4b:bd:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:32:20 2026 by rpki-client