Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: f0auUUcnDOSusSS8IkdMtwnK+tWs49VG+8KwUAvf/E0=
Subject key identifier: FA:30:F3:D8:2D:AA:C9:C6:00:7E:5D:D9:11:51:83:7B:D3:4F:0C:56
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019CA8A0DFEB4FE4E140F216D5ED87527E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 186A
Signing time: Sun 01 Mar 2026 09:00:41 +0000
Manifest this update: Sun 01 Mar 2026 09:00:41 +0000
Manifest next update: Mon 02 Mar 2026 09:00:41 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: NPap6QKbVBiDPGmRNBmptwy3KvDeJa3v5pyJ4yVmqvw=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:df:eb:4f:e4:e1:40:f2:16:d5:ed:87:52:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Mar 1 09:00:41 2026 GMT
Not After : Mar 2 09:00:41 2026 GMT
Subject: CN=fa30f3d82daac9c6007e5dd91151837bd34f0c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:01:f1:9f:13:8c:25:3c:d8:ee:b0:90:0a:
a6:7c:ba:f0:9a:f3:6e:ed:be:26:1f:3e:a8:d7:fa:
64:ec:48:5b:6b:ba:df:9b:61:0b:25:a7:49:ef:ec:
15:2f:13:d5:c1:7d:a1:4e:36:c6:dc:20:cc:4b:8a:
b0:97:64:5d:fc:6b:c1:1e:1e:8c:65:4c:2f:0c:c4:
f7:03:f2:88:8f:0f:00:75:2d:68:7e:e5:5d:af:93:
c1:86:b9:ea:ee:fa:73:df:cb:dc:2b:f1:ed:71:c7:
20:ed:03:1d:cd:8b:01:96:cf:3d:30:92:14:38:83:
ba:57:e2:e3:51:fb:23:21:1d:4c:8b:ec:1b:a8:25:
3e:e5:ea:12:2c:16:7f:ff:b7:3d:d2:fe:ba:94:62:
71:34:4b:e8:2c:29:e2:6f:a0:c7:3d:b5:e7:8b:f5:
94:d1:00:53:a7:0c:20:8f:1a:f1:cc:60:a5:18:28:
ff:65:1b:aa:85:66:78:b1:79:d5:31:8b:f9:6d:a3:
54:83:21:4c:60:d7:54:ad:e4:31:19:2f:4c:8a:aa:
30:2f:12:e1:2c:eb:8d:7c:14:ee:fa:23:04:e6:ef:
2b:fc:75:8a:ce:51:12:84:8a:d0:f4:1f:d3:18:59:
88:f6:25:d2:b4:4d:0a:02:45:bf:4c:c3:18:b2:cc:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:F3:D8:2D:AA:C9:C6:00:7E:5D:D9:11:51:83:7B:D3:4F:0C:56
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:91:8d:3f:05:0b:75:df:b6:f1:9d:16:06:64:90:50:8a:
d9:d9:73:34:44:06:18:6c:f7:aa:d6:a0:56:a1:75:ac:1d:21:
0b:9f:56:54:34:6c:78:42:69:e9:06:13:bb:a0:9f:48:43:96:
a6:1c:78:eb:0a:12:15:66:3a:bd:b1:7a:78:25:f4:ef:01:95:
9c:bb:a4:c4:c2:32:16:77:f6:a8:19:23:8e:30:d6:d7:23:c4:
ca:92:eb:57:5d:b9:25:fb:fe:9d:58:2c:82:ec:6e:9b:22:1d:
e2:a0:c2:05:e0:87:b7:8e:07:ef:e4:68:e9:bc:c3:76:86:a5:
66:9c:9e:3b:fd:ee:8b:1c:da:20:a7:f8:22:a5:77:2d:70:86:
30:a1:3a:9c:95:bf:a3:72:4e:34:eb:0e:77:34:22:0b:75:f6:
01:79:9e:13:5f:43:cd:2d:7c:a7:a7:57:45:27:95:f9:75:c7:
f0:a0:ca:5e:5d:18:9c:28:52:1a:40:e0:44:cc:8a:ac:3e:ca:
96:01:cb:2f:1c:23:4c:de:be:37:20:62:fc:58:6f:df:9d:46:
29:b0:75:b0:cf:be:36:49:d2:24:8e:26:93:08:35:ac:40:11:
2c:72:dd:b0:0a:a0:02:4c:32:7c:93:93:67:ed:b2:f9:7b:78:
e7:ed:06:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooN/rT+ThQPIW1e2HUn6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjYwMzAxMDkwMDQxWhcNMjYwMzAyMDkwMDQxWjAzMTEwLwYDVQQD
EyhmYTMwZjNkODJkYWFjOWM2MDA3ZTVkZDkxMTUxODM3YmQzNGYwYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1UB8Z8TjCU82O6wkAqmfLrwmvNu
7b4mHz6o1/pk7Ehba7rfm2ELJadJ7+wVLxPVwX2hTjbG3CDMS4qwl2Rd/GvBHh6M
ZUwvDMT3A/KIjw8AdS1ofuVdr5PBhrnq7vpz38vcK/Htcccg7QMdzYsBls89MJIU
OIO6V+LjUfsjIR1Mi+wbqCU+5eoSLBZ//7c90v66lGJxNEvoLCnib6DHPbXni/WU
0QBTpwwgjxrxzGClGCj/ZRuqhWZ4sXnVMYv5baNUgyFMYNdUreQxGS9MiqowLxLh
LOuNfBTu+iME5u8r/HWKzlEShIrQ9B/TGFmI9iXStE0KAkW/TMMYssxHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPow89gtqsnGAH5d2RFRg3vTTwxWMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzaRjT8F
C3XftvGdFgZkkFCK2dlzNEQGGGz3qtagVqF1rB0hC59WVDRseEJp6QYTu6CfSEOW
phx46woSFWY6vbF6eCX07wGVnLukxMIyFnf2qBkjjjDW1yPEypLrV125Jfv+nVgs
guxumyId4qDCBeCHt44H7+Ro6bzDdoalZpyeO/3uixzaIKf4IqV3LXCGMKE6nJW/
o3JONOsOdzQiC3X2AXmeE19DzS18p6dXRSeV+XXH8KDKXl0YnChSGkDgRMyKrD7K
lgHLLxwjTN6+NyBi/Fhv351GKbB1sM++NknSJI4mkwg1rEARLHLdsAqgAkwyfJOT
Z+2y+Xt45+0GOA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:18 2026 by rpki-client