Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: KnJnaAtgpDThxezyFkUJb3g4w70G/gUcQdM+ux8EnoQ=
Subject key identifier: 98:AD:9A:51:2D:35:21:14:C1:86:9A:70:7C:27:0B:61:AA:95:B2:A8
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019FB0C10AE715973BAB6F0E3808E84E1123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 19D5
Signing time: Thu 30 Jul 2026 02:01:08 +0000
Manifest this update: Thu 30 Jul 2026 02:01:08 +0000
Manifest next update: Fri 31 Jul 2026 02:01:08 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: GV88Sjer+gwURSNAtUfXqONhVwvrSh0VKnW494yHgjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b0:c1:0a:e7:15:97:3b:ab:6f:0e:38:08:e8:4e:11:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Jul 30 02:01:08 2026 GMT
Not After : Jul 31 02:01:08 2026 GMT
Subject: CN=98ad9a512d352114c1869a707c270b61aa95b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:92:9a:38:48:4e:05:11:91:31:8e:77:a3:
90:02:b5:30:4b:d7:dc:22:01:6c:ee:dd:a6:5b:f0:
a7:3b:37:0b:e0:bb:2e:eb:87:cc:e9:ff:0b:a4:90:
16:bd:fe:44:2c:e6:37:dc:1d:ac:93:b9:7f:08:fa:
79:c6:15:43:5b:71:3c:21:a8:10:48:f0:d9:72:76:
8c:8d:f7:cb:e1:8a:82:7e:21:e6:0d:60:6f:18:80:
c2:93:1f:23:a2:eb:b0:8f:a2:b9:54:47:10:24:80:
29:6e:05:c6:e5:30:38:e0:0e:7a:06:15:8f:6f:66:
0a:11:9a:20:16:80:7d:69:82:af:a5:24:0d:f0:e9:
0e:b2:0a:7b:b1:2e:c2:1c:8d:1c:d0:7b:93:31:e8:
05:65:13:75:50:33:74:ec:28:c0:f5:4e:a6:d2:ff:
f0:67:83:0b:92:cd:16:02:4b:30:91:73:03:9f:5b:
17:66:70:3b:d0:ff:4b:7f:6f:14:72:cf:43:54:44:
3b:f6:af:e4:cc:53:50:d2:98:e2:26:6d:48:56:46:
ef:38:a1:c5:10:7e:20:5e:7b:ee:29:90:b1:a6:ca:
eb:cb:33:7a:30:09:fc:d4:28:f6:56:05:23:bb:f6:
b3:69:63:7e:8d:4c:95:3d:e0:af:b7:ea:a7:91:b9:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:9A:51:2D:35:21:14:C1:86:9A:70:7C:27:0B:61:AA:95:B2:A8
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:39:83:0e:2a:9d:8d:88:ed:58:a0:74:b6:f3:55:64:54:
e4:0f:0a:43:30:eb:ac:18:9e:78:1e:16:aa:13:c8:c1:71:a9:
45:55:2c:00:7f:89:1d:76:69:10:de:cf:3f:49:96:25:a3:1b:
88:08:ad:6e:aa:b9:ae:4e:61:07:fc:89:aa:b4:4f:cc:dd:6e:
02:9b:de:8b:27:30:8d:71:d4:5b:62:6c:80:fc:71:e1:2a:a2:
20:d6:57:c5:c0:ad:cd:b4:aa:14:28:8b:e9:07:d9:5a:dc:1e:
93:3c:19:17:be:ab:73:c4:5e:41:a9:1b:d0:00:62:75:70:64:
2e:7a:4c:e8:10:8d:9c:be:c6:c1:ef:f9:67:64:fa:aa:d0:69:
32:77:bf:f6:05:f4:a8:b8:32:2a:64:ce:41:95:f5:9d:a8:e3:
8a:c7:80:da:25:0d:47:78:c0:3a:5d:1e:91:91:86:dc:a5:12:
6a:bc:bb:9a:47:66:69:e6:79:95:ea:86:a1:dd:2c:51:f0:6f:
b4:e0:fe:ed:40:91:87:8f:f6:ef:c2:b0:b4:27:35:51:39:51:
d2:7f:cc:25:65:f7:cb:3c:42:79:7d:f3:d0:ed:23:73:80:3a:
fe:68:46:26:e3:00:c8:f3:c9:ef:7a:b3:3d:c6:b5:c1:fd:ad:
ca:fe:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:51:00 2026 by rpki-client