Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: RLfTBmo4ad/f47VsflMpc5Jf2dXGIWdSStAB8KJjF04=
Subject key identifier: 05:75:2D:B3:E4:BB:53:66:4D:C4:54:D5:48:36:2C:D3:27:49:6A:03
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 01A1464DE64D2FB433D9DD19098D0DFC2D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 1AA7
Signing time: Fri 16 Oct 2026 20:01:12 +0000
Manifest this update: Fri 16 Oct 2026 20:01:12 +0000
Manifest next update: Sat 17 Oct 2026 20:01:12 +0000
Files and hashes: 1: KJ32RrCVAy4PyqYtI55Q1n1tyzU.roa (hash: LCB31ML0gf7+olaDPAC46q6pMd69LDFTi6lr8UwROW4=)
2: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: 7ryN0L0EUKA+a3kYlwXh+DSTpL2zqgkISVr60dm/0/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:e6:4d:2f:b4:33:d9:dd:19:09:8d:0d:fc:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Oct 16 20:01:12 2026 GMT
Not After : Oct 17 20:01:12 2026 GMT
Subject: CN=05752db3e4bb53664dc454d548362cd327496a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:04:9a:0d:e8:65:5f:fb:72:b4:ef:bf:5f:
9a:f8:4b:cc:ed:88:11:22:8d:c1:bf:e2:96:10:dc:
b3:2a:f3:57:c2:2f:90:cf:ee:85:a2:95:3d:18:35:
3e:02:26:37:b6:99:43:0a:86:27:fd:fb:a7:c8:a4:
08:7b:08:e6:9d:bf:e4:87:9b:5e:fa:c7:dc:5e:f8:
ed:b5:b7:2a:19:dc:4d:0b:33:17:4e:c4:d8:f1:aa:
14:e6:8f:87:d2:c4:e1:f3:c9:d0:26:66:c0:5d:45:
2c:0e:da:cd:d3:4e:cb:4f:da:a9:58:c7:5e:97:a3:
ea:6c:f9:2e:a8:76:c5:a9:ce:a3:1b:c0:12:d5:34:
3b:f9:0f:24:bb:5b:5d:1e:79:ad:c2:87:ab:d2:de:
48:8f:87:6c:8f:6d:ad:73:b6:51:63:59:92:5f:19:
2e:5d:dd:1c:e9:3e:af:5b:e4:9d:b4:d2:f3:49:ed:
7c:fa:b7:6e:47:cf:de:79:47:7b:8e:2d:a9:9b:a8:
1a:db:ff:05:d0:a5:7c:17:42:94:98:c9:e8:d6:3a:
cf:9d:40:59:66:4c:37:62:66:1b:17:9b:4c:5f:b3:
d5:d0:01:3f:10:b8:c4:a4:13:5e:22:ee:f1:f6:e5:
29:4a:95:b5:35:ed:b2:7a:d7:cc:69:19:a3:db:b6:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:2D:B3:E4:BB:53:66:4D:C4:54:D5:48:36:2C:D3:27:49:6A:03
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:74:3f:78:eb:ec:12:f0:bf:43:c7:57:99:de:14:62:b6:ff:
d7:3d:cc:ce:a4:39:b2:af:3b:f3:04:eb:e6:40:33:33:05:77:
6f:a3:d2:fe:08:8e:96:da:9f:c4:a5:ac:82:ce:01:b1:8a:8f:
81:cb:9f:07:66:12:4e:e5:f7:23:49:2e:3e:fc:7a:9a:81:bf:
06:3b:44:e9:45:70:9b:52:46:0a:df:2c:ab:95:72:84:bd:a1:
9f:b4:b9:2b:4a:8b:3d:1c:83:26:f7:f7:95:3b:e8:88:e3:93:
5b:a6:b7:a4:89:16:fe:b6:0e:48:38:89:80:56:33:bd:4a:99:
c2:92:b0:e2:6f:23:61:7e:db:e4:1c:c2:9d:0d:6a:23:47:e8:
b3:e4:ea:6a:ae:0a:3e:e2:17:3b:a5:bd:9f:94:7c:a4:4f:c5:
82:e3:39:25:f9:7a:c8:e8:ef:f5:f2:d2:dc:4e:9c:40:a8:54:
c0:cd:1c:91:72:38:b4:0b:31:ee:9e:f9:f8:c2:26:a6:bb:e8:
7b:a5:5d:bc:41:d0:13:3d:a0:d6:ef:9d:e0:bf:6f:21:bc:8f:
b4:c4:82:86:c3:2b:3f:ba:26:13:42:5f:46:14:40:d8:64:91:
b0:2b:c8:8c:71:89:66:23:25:5b:22:b6:9d:80:41:ff:22:74:
d9:31:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:15 2026 by rpki-client