Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: Oxnx1MeMZ2+uO3wsER4AJqZxsnez9/sO+yPg/sh1tZI=
Subject key identifier: F8:E1:9D:B2:C9:F3:D8:31:A9:CD:59:79:5C:EF:D0:F2:00:69:2C:50
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A0C6A11CA18F691F9EADA1FB39B59CA2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1A8E
Signing time: Tue 22 Sep 2026 01:00:42 +0000
Manifest this update: Tue 22 Sep 2026 01:00:42 +0000
Manifest next update: Wed 23 Sep 2026 01:00:42 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: usLzu41HhokDcHEuiU1tpqt9n8geq3r4mzrlG6PafE0=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:1c:a1:8f:69:1f:9e:ad:a1:fb:39:b5:9c:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 22 01:00:42 2026 GMT
Not After : Sep 23 01:00:42 2026 GMT
Subject: CN=f8e19db2c9f3d831a9cd59795cefd0f200692c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:cd:9a:06:9c:74:81:e4:1d:b2:f6:42:7e:
cd:a3:8f:84:70:41:e3:ad:84:9d:70:54:15:ef:c6:
62:ee:58:73:3f:ac:99:90:08:ba:f4:42:54:fc:e9:
f6:56:fd:18:80:99:7e:5c:3c:98:8a:32:a5:89:b6:
5a:06:9b:73:87:88:e1:db:af:74:28:6c:52:6d:59:
d2:1b:56:bd:fa:81:5e:09:e0:c5:32:b8:ba:6b:98:
30:0b:8e:54:42:c4:f1:9b:7f:17:a3:86:e2:4d:87:
4a:58:56:2b:98:70:ee:d8:ed:d9:18:b1:79:aa:fb:
a2:0d:a2:9f:54:46:b2:1a:d5:b9:fe:0c:02:c9:79:
80:c9:89:e3:76:8a:86:15:7a:7a:20:3e:cf:98:a3:
04:c5:b5:11:22:41:97:c0:33:5b:04:3a:6f:9e:9f:
b2:3c:0b:b7:8b:14:d3:3d:bf:d6:8e:90:65:05:c4:
bc:44:57:be:08:d4:f4:5e:9b:8d:e9:9d:b4:82:8d:
46:47:18:09:f6:b5:cd:50:50:20:7c:5f:91:15:71:
93:cd:2a:02:a5:66:92:5e:8e:9a:d5:46:2c:a4:1d:
62:00:15:11:86:a2:e3:39:ec:6a:4a:fb:40:52:31:
e5:af:2f:5e:f9:3b:2c:7f:96:28:92:bd:95:50:ec:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:9D:B2:C9:F3:D8:31:A9:CD:59:79:5C:EF:D0:F2:00:69:2C:50
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9f:86:0b:82:08:55:1d:a0:ab:1b:d6:e4:92:8b:b0:25:46:
44:bd:39:91:77:56:df:b8:ca:ef:28:1d:06:db:f0:16:f6:b9:
75:73:bc:72:1d:1c:7a:eb:54:40:46:fa:d0:72:7d:fb:45:bf:
e8:00:e6:1d:b6:3a:61:9a:b0:f8:ab:ec:16:dd:f8:a0:31:09:
ac:3a:34:ea:7d:95:c0:e1:93:b2:44:14:0f:c2:8c:68:55:fc:
6c:b4:66:4a:d0:02:33:f4:e8:c0:23:2a:ba:d2:8f:e8:14:1c:
32:41:b2:6a:05:e7:72:7a:10:10:b1:13:27:ba:8e:79:a0:c5:
b3:8d:6e:b9:7a:17:a2:d3:08:ed:74:a4:3c:b9:98:09:26:7c:
cb:0c:ff:44:c8:57:6c:b2:4e:52:5d:13:e4:be:63:34:fe:73:
06:02:a0:ec:fc:e9:42:31:9e:bb:ea:c5:92:af:78:71:3e:46:
6c:0f:18:89:7b:a6:3b:6f:ed:e8:2c:87:c1:1b:a0:c2:2d:81:
3e:b6:ce:69:35:b2:bb:60:d6:ed:f1:2d:2e:13:1d:a6:fd:2a:
84:21:d4:6d:4a:b0:7f:e6:cf:d9:9e:63:60:43:4d:34:06:3f:
32:25:44:79:6e:9d:2f:1c:45:9d:20:74:43:13:6c:45:29:b4:
0a:75:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:16:22 2026 by rpki-client