Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: J4vihcS7L/qGBz5gkYIunfTcW47C7ePfepp3gwFDlm4=
Subject key identifier: 25:E7:EC:2D:CC:90:1B:19:FA:E7:E1:74:5D:19:18:C2:D6:C0:77:EB
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019FA93E5B9249778AA74356FBC48B97437C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 19F9
Signing time: Tue 28 Jul 2026 15:01:03 +0000
Manifest this update: Tue 28 Jul 2026 15:01:03 +0000
Manifest next update: Wed 29 Jul 2026 15:01:03 +0000
Files and hashes: 1: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
2: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
3: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 6rWKCE9mAI/uV+Oic2UzFkePzJ4ppxXugrXuWRgW4fU=)
4: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
5: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
6: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
7: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:5b:92:49:77:8a:a7:43:56:fb:c4:8b:97:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 28 15:01:03 2026 GMT
Not After : Jul 29 15:01:03 2026 GMT
Subject: CN=25e7ec2dcc901b19fae7e1745d1918c2d6c077eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:61:5a:9d:c8:6f:1d:38:98:1d:47:1f:52:
20:ee:fa:b4:77:97:40:07:96:af:fb:8e:8f:c0:f5:
10:5e:cb:81:8e:9a:c2:08:07:cb:a8:3f:16:46:2f:
7c:dc:ae:99:d4:43:5a:3d:d4:15:a3:50:80:bd:16:
30:22:dc:3f:57:fd:ae:13:b4:23:76:29:24:74:17:
90:a1:bb:14:21:8c:64:2d:32:3e:8a:01:76:1f:a1:
f3:4b:48:1f:42:02:d7:03:fc:8b:a9:43:15:58:bb:
fb:03:b6:bc:9d:50:51:6c:1f:75:6c:b1:22:78:af:
fa:83:7a:81:99:81:77:ef:ff:1b:d8:e4:6f:17:05:
51:f2:1c:20:61:bb:b5:6d:5c:1e:d3:87:9a:69:66:
33:0e:5d:8d:00:5e:16:65:fa:cc:6d:67:f8:5a:a6:
66:03:d5:10:75:a5:ce:77:2d:51:9c:80:d8:0c:07:
8d:51:de:78:df:86:ce:93:1d:2c:83:ab:e0:a3:21:
7c:8b:77:32:84:5d:39:e7:59:40:1e:92:e0:64:33:
3b:ee:53:40:91:ad:bd:a6:a1:e7:89:68:6e:31:c8:
60:ad:e5:43:13:4a:ab:be:14:b1:09:f3:50:8b:e1:
d8:93:2d:db:a5:b8:c7:fb:8d:71:1e:e9:bf:1e:76:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:EC:2D:CC:90:1B:19:FA:E7:E1:74:5D:19:18:C2:D6:C0:77:EB
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:d6:f8:46:19:cc:d9:e7:38:45:82:60:52:24:ef:8a:8c:
3f:d8:16:5e:60:c2:2c:3a:a9:ce:ba:64:dc:b5:54:2d:05:15:
1f:8c:d5:29:0c:cf:ba:d8:8b:15:62:be:2a:db:65:32:d3:e7:
78:2e:c3:76:a2:5d:c4:00:72:b8:c7:59:e3:53:b4:3c:15:01:
8e:33:3f:24:81:57:5f:c5:59:03:4c:d6:69:a2:a1:ef:cf:c5:
b4:b4:dd:cb:46:af:ce:bc:5b:b3:aa:61:70:cc:89:84:2b:2f:
aa:e3:16:a3:2f:99:2f:41:2f:8e:fb:52:3a:31:9f:25:1e:1b:
75:f5:54:d2:67:ac:af:e7:a5:d1:39:b8:69:fd:1c:b0:62:90:
a3:4a:d0:06:ef:62:5a:38:d2:c5:ee:35:37:0f:94:81:17:80:
59:c6:a7:81:84:ed:21:29:6c:01:bb:52:48:4f:88:15:85:93:
75:c1:8d:bb:59:bb:2c:e2:80:ff:1b:0a:6f:16:1e:0a:e0:b1:
7d:8b:e2:a9:8d:d3:c1:32:43:ff:54:57:98:77:4d:00:2c:df:
66:a9:28:d6:ed:ea:f9:5b:e0:d2:75:bf:91:a0:a7:a6:1f:e0:
4e:8f:fc:1b:a1:e6:71:da:6f:42:75:57:ac:3c:f1:de:0b:58:
bb:71:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:36 2026 by rpki-client