Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: 4cjHRHaaxJ6WS0mszD8TiXollj4qVYD3MWcf7+PBrHY=
Subject key identifier: 5B:6C:B1:F6:57:FF:9A:86:02:10:94:73:C5:FC:1D:9E:6C:DA:12:49
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 01A1298CEA5BE056AFC125FC98D7DEDCA731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 06:01:03 +0000
Manifest this update: Sun 11 Oct 2026 06:01:03 +0000
Manifest next update: Mon 12 Oct 2026 06:01:03 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: tiPyRV/Pc7EjjEKszsECa3lrbqubQeBz6p/zk10Te2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:ea:5b:e0:56:af:c1:25:fc:98:d7:de:dc:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Oct 11 06:01:03 2026 GMT
Not After : Oct 12 06:01:03 2026 GMT
Subject: CN=5b6cb1f657ff9a8602109473c5fc1d9e6cda1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:30:e6:f6:a2:7a:35:8d:83:3a:ac:b1:15:
0b:a1:28:ab:56:4b:97:8f:d6:de:95:cc:bb:e9:16:
3a:f6:0c:95:db:ba:63:a5:60:3c:f4:36:bd:84:9f:
2a:6b:1d:a7:9b:85:77:fd:df:fb:53:7d:0c:d5:e8:
17:09:e2:40:17:59:50:b0:92:23:85:7e:32:19:18:
8c:74:f8:9d:55:6e:a7:6b:66:81:da:de:05:47:0e:
36:4b:a9:3a:38:4a:75:c6:a4:ff:69:f4:5f:a5:37:
d3:e1:86:09:43:5e:de:1e:d4:08:72:7f:25:76:f3:
b0:45:99:d7:0d:67:b7:7a:18:ba:78:70:fe:96:98:
f6:66:b2:66:70:d6:8b:26:0e:56:f4:d4:d7:13:4a:
0b:d4:6e:37:8e:06:d5:1e:47:8e:56:e7:6a:27:20:
3f:17:aa:78:f3:6f:16:93:74:2b:f2:c6:61:a6:db:
50:22:8e:bb:4e:14:70:d1:59:e8:8e:5c:35:e6:0d:
86:20:31:77:97:a1:ca:76:93:da:47:e4:9e:92:d4:
1b:1d:2f:b3:28:71:25:db:6f:15:7d:f8:45:63:08:
cd:4d:a1:df:0c:af:c2:0c:6a:64:9b:a1:b6:bb:15:
88:f7:46:da:46:15:f2:b8:f5:ab:65:64:23:bc:3c:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:B1:F6:57:FF:9A:86:02:10:94:73:C5:FC:1D:9E:6C:DA:12:49
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:42:e7:3c:66:49:ca:d9:91:c5:fc:e7:fc:ed:48:62:29:cc:
a2:5e:f4:1e:f5:d0:bd:04:55:57:f2:91:c1:93:57:5a:cb:d4:
13:4c:90:e4:23:35:c4:3c:88:17:0e:09:bf:aa:a2:29:ae:32:
ec:cf:00:d5:97:7c:90:e2:2b:e7:45:ca:b6:34:9e:c9:07:5f:
48:cf:6f:a6:9b:19:dc:95:b4:82:e6:e4:ec:1a:d9:4c:87:3c:
89:64:9d:71:9f:7a:8a:4e:0c:30:1f:bf:e8:be:de:be:7d:17:
41:27:55:bb:b5:1d:03:3c:45:81:1c:86:d6:79:d2:6b:1e:a7:
0e:60:8c:46:1d:17:6e:cc:c3:04:ff:ba:b0:d3:4f:23:0b:f2:
ae:cd:7f:21:cf:da:bc:37:5a:c7:aa:39:9a:1e:33:91:2c:a6:
1e:45:3a:75:14:cf:7a:9a:09:b3:3c:3f:4d:75:60:26:04:61:
39:f4:ae:2b:a3:94:a3:51:e9:e6:cb:97:ef:52:1e:a4:b2:38:
f1:73:c1:6c:b9:a9:c4:ca:b6:4a:b9:55:e0:93:31:f0:96:5f:
be:2b:7e:93:30:fb:8e:32:83:9a:14:14:f5:eb:0b:43:47:3a:
31:3c:bc:2b:ea:b2:18:46:80:ee:6e:90:22:22:3e:1c:c3:00:
79:6a:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:57:39 2026 by rpki-client