Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: 5SjKCi0UzFbm9FyJQIZrfJ3Wps9uA8vKXtkbjZEMM3M=
Subject key identifier: F0:8C:A4:C8:6C:0C:EB:0C:D6:E9:62:0D:54:72:A0:52:B9:CE:B2:6B
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019D9BF56F73D92D812FB1D504E8B8733BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:00:46 +0000
Manifest this update: Fri 17 Apr 2026 15:00:46 +0000
Manifest next update: Sat 18 Apr 2026 15:00:46 +0000
Files and hashes: 1: EaZSZwZGmcsZnUkQYcJgmv5A-IQ.roa (hash: +ZyiIncgTcIegMEpnSnkV8RC0hP2tnJjSSGms0iMy6Y=)
2: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: usXmAPevSZ1g8oc0gGRTqf582AzbeK8GPvV1JklX9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:6f:73:d9:2d:81:2f:b1:d5:04:e8:b8:73:3b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Apr 17 15:00:46 2026 GMT
Not After : Apr 18 15:00:46 2026 GMT
Subject: CN=f08ca4c86c0ceb0cd6e9620d5472a052b9ceb26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:27:46:20:5b:13:37:0c:a3:48:9f:5b:59:
fd:31:ce:1a:b1:27:c9:5a:ac:6e:a0:34:33:b0:f8:
c2:25:5c:6e:56:1f:47:2c:58:6c:40:75:fc:13:f0:
ae:f8:8e:54:d6:91:62:f4:54:e8:75:0c:bd:e4:bc:
19:90:44:6f:29:28:a0:e4:10:6c:d2:75:2f:cc:f0:
7f:45:ab:d2:5b:91:70:53:cc:68:40:a4:79:c7:1c:
5f:74:ba:a3:6d:b9:f8:b3:cf:36:0a:28:52:a9:57:
6b:79:1a:4b:1f:46:d6:c5:6a:23:e9:0a:d4:99:ec:
b0:7a:8a:79:47:f6:77:15:fe:cc:f1:e3:83:65:1d:
61:57:dd:be:ad:63:f6:4b:30:55:61:58:8c:3d:16:
c1:da:e2:d2:25:98:93:cb:2b:da:74:22:ef:c0:5b:
77:a7:17:25:98:69:92:61:2f:08:d0:25:24:a9:08:
86:a5:e3:6e:5c:8f:bd:62:b6:34:d6:eb:5d:09:4c:
a3:b3:91:29:e1:4b:6d:d8:ba:3f:7c:9e:66:1f:57:
30:f3:65:ef:bf:06:49:cf:5f:61:55:55:18:f3:68:
1f:cf:91:2d:75:fe:ef:82:00:5a:8a:e4:82:c1:ee:
db:d9:53:1c:a8:83:e6:35:75:7d:06:d9:ce:2e:ee:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:A4:C8:6C:0C:EB:0C:D6:E9:62:0D:54:72:A0:52:B9:CE:B2:6B
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5f:7a:33:ae:db:c1:47:a6:18:9f:dc:c2:d8:88:b4:9d:1e:
bc:d2:f7:27:4b:6c:cb:47:87:71:1b:4a:53:5c:09:7e:96:44:
fc:8d:b5:99:9a:c3:24:87:ca:7e:4f:26:38:db:af:7c:d3:76:
e1:75:5e:22:9a:e7:5c:86:fa:59:db:cb:e9:a0:19:f1:5a:21:
0b:d5:b3:80:cd:2a:b1:72:b3:ac:85:3e:de:03:ea:3e:b6:2e:
d8:d5:25:ec:f7:86:e0:b5:b8:d7:ca:f8:4c:c4:ad:49:b2:ee:
53:28:6d:39:14:c2:60:7d:00:e3:08:fb:58:5f:8f:1f:c9:62:
43:a2:8c:7f:ae:69:62:b5:51:7c:ce:fb:2f:5a:76:f8:b0:23:
a6:0c:89:7b:18:36:53:7d:58:66:17:9f:0a:12:74:d8:e1:86:
f2:a5:4c:62:6c:2b:3a:ca:41:02:64:46:57:4d:1e:e8:fe:92:
5a:4a:f1:b6:94:91:cd:0b:60:32:7a:59:3b:82:9a:2c:de:53:
00:d5:33:0c:28:48:f4:8b:e3:ff:66:49:f0:7f:a7:79:b2:a2:
01:c5:2f:88:40:c4:b0:30:8a:ad:8a:27:ec:51:7b:5c:2c:9c:
8c:72:29:ea:3f:0d:35:5e:7c:30:9a:db:d9:27:bc:70:c3:fa:
15:23:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:59 2026 by rpki-client