Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: WT5dGZrRlHTXunp3rhyOyaOhWED0KcsqtZioFOPbeWU=
Subject key identifier: F6:AF:E6:4A:C0:7D:1F:D9:A0:1F:AA:A8:71:9D:A7:C4:EE:CC:42:D5
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019EC17F7762DB3A1CDB0701E516B71579D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 15:00:16 +0000
Manifest this update: Sat 13 Jun 2026 15:00:16 +0000
Manifest next update: Sun 14 Jun 2026 15:00:16 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: G7uOUr/Rk8Ry28k2O2WKLHYjctVBUyEuqUQPEeioSmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:77:62:db:3a:1c:db:07:01:e5:16:b7:15:79:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jun 13 15:00:16 2026 GMT
Not After : Jun 14 15:00:16 2026 GMT
Subject: CN=f6afe64ac07d1fd9a01faaa8719da7c4eecc42d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:4f:8d:0e:cc:ec:ab:d6:c2:75:ca:5a:d6:
6f:8d:9c:fc:a5:7d:3b:7c:3c:56:99:23:74:25:c4:
96:b9:6f:6c:84:b7:22:61:e1:a1:c8:be:14:dc:cd:
3a:14:83:05:ae:4a:84:66:d7:5a:34:7a:10:f8:39:
08:e6:60:66:70:22:9d:5b:03:9b:15:e9:71:f1:47:
a8:ac:50:d7:69:99:5f:4b:5e:4c:67:46:f2:ed:87:
01:64:8c:46:4b:83:f2:c5:b3:31:90:5a:27:a4:92:
2c:2b:e4:00:00:a0:85:f1:39:4d:50:70:ad:1b:34:
ce:62:be:88:37:e1:84:7f:73:56:85:00:0d:36:47:
bb:b9:ed:aa:62:8a:5b:1d:90:94:9e:a4:53:ae:4e:
20:bd:b0:87:87:98:37:64:40:59:3e:d5:22:d8:d0:
b4:bc:91:d5:b2:9d:c4:d6:f8:db:03:4d:bc:55:01:
82:04:34:eb:5e:36:b0:1c:90:16:d9:a5:f8:8d:44:
87:f1:aa:8e:d5:2f:34:59:a1:79:7d:e4:76:0e:89:
89:8d:31:c8:5b:46:39:7e:74:8c:69:f2:9f:ec:60:
ac:a4:ea:e7:fc:bc:4f:e3:4f:f4:7f:1a:b1:ee:27:
f8:dd:5d:c0:1c:5a:82:6f:b8:63:56:dc:0e:73:fc:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AF:E6:4A:C0:7D:1F:D9:A0:1F:AA:A8:71:9D:A7:C4:EE:CC:42:D5
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:ea:2c:69:6e:f2:95:b5:2f:91:e8:19:ea:1c:9d:da:11:
ea:30:ae:f1:70:b4:73:5f:7c:20:60:15:ef:2b:cc:37:bd:12:
ce:cb:4c:f9:9e:94:e8:f1:e1:e3:ed:9f:67:a2:2d:0d:ae:88:
d5:26:ac:05:d1:75:06:1a:0d:a7:07:28:5d:4e:63:b6:a2:13:
b0:19:68:f2:e5:d9:48:09:95:75:34:bf:27:8c:f4:0a:ce:82:
9c:5d:79:25:8b:e9:0d:82:44:90:d2:33:68:5b:f2:d3:8f:e8:
6e:e2:40:20:8f:40:2c:5f:37:97:62:71:c9:ed:43:c0:1f:06:
a0:ef:31:31:49:6a:bc:a6:db:13:7d:51:cb:57:ce:48:62:1e:
eb:0e:18:2e:ec:01:f8:74:9d:5f:91:33:fa:14:76:53:77:17:
0f:6c:b9:86:8a:c4:a1:d0:57:f8:d6:8d:96:7f:7c:25:42:79:
b4:f2:c1:f1:69:9f:b2:7e:d5:ec:5c:92:0c:60:2a:5e:c1:d1:
24:99:a2:34:e8:46:0f:e7:98:ca:53:9b:cb:12:ac:68:8a:26:
31:a3:4d:ec:01:b6:ce:7b:d7:c6:b8:7b:91:92:97:1d:7b:5a:
b6:e5:76:fc:3c:b6:d3:81:ed:52:dc:5e:51:61:74:3a:ec:da:
98:96:b9:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf3di2zoc2wcB5Ra3FXnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YWMzMDhjOTRmNTdiMTFjZWUxYmE4NGVmMTI3ODQ0N2M2
Nzg1ZWIwHhcNMjYwNjEzMTUwMDE2WhcNMjYwNjE0MTUwMDE2WjAzMTEwLwYDVQQD
EyhmNmFmZTY0YWMwN2QxZmQ5YTAxZmFhYTg3MTlkYTdjNGVlY2M0MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDpPjQ7M7KvWwnXKWtZvjZz8pX07
fDxWmSN0JcSWuW9shLciYeGhyL4U3M06FIMFrkqEZtdaNHoQ+DkI5mBmcCKdWwOb
Felx8UeorFDXaZlfS15MZ0by7YcBZIxGS4PyxbMxkFonpJIsK+QAAKCF8TlNUHCt
GzTOYr6IN+GEf3NWhQANNke7ue2qYopbHZCUnqRTrk4gvbCHh5g3ZEBZPtUi2NC0
vJHVsp3E1vjbA028VQGCBDTrXjawHJAW2aX4jUSH8aqO1S80WaF5feR2DomJjTHI
W0Y5fnSMafKf7GCspOrn/LxP40/0fxqx7if43V3AHFqCb7hjVtwOc/x07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPav5krAfR/ZoB+qqHGdp8TuzELVMB8GA1UdIwQY
MBaAFDWsMIyU9XsRzuG6hO8SeER8Z4XrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDct
NjBkMzU1NTRjZTY0LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYjMyMTgtNTQyYy00ZDk1LWFjMDctNjBkMzU1NTRjZTY0
LzEvTmF3d2pKVDFleEhPNGJxRTd4SjRSSHhuaGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOvqLGlu
8pW1L5HoGeocndoR6jCu8XC0c198IGAV7yvMN70SzstM+Z6U6PHh4+2fZ6ItDa6I
1SasBdF1BhoNpwcoXU5jtqITsBlo8uXZSAmVdTS/J4z0Cs6CnF15JYvpDYJEkNIz
aFvy04/obuJAII9ALF83l2Jxye1DwB8GoO8xMUlqvKbbE31Ry1fOSGIe6w4YLuwB
+HSdX5Ez+hR2U3cXD2y5horEodBX+NaNln98JUJ5tPLB8Wmfsn7V7FySDGAqXsHR
JJmiNOhGD+eYylObyxKsaIomMaNN7AG2znvXxrh7kZKXHXtatuV2/Dy204HtUtxe
UWF0OuzamJa5+g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:50 2026 by rpki-client