Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: NR2T75f+eQ12rH6LAj9PCZik1yJKuiAeOIW+CmCm85A=
Subject key identifier: 3C:B4:D4:D5:BB:E0:8F:CE:1D:D9:C0:3A:2D:13:81:68:00:70:D2:51
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019CAA8F877531D680246DD6FCAB4D279AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 186B
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: h5u3hav+J4Et/Z5dfIV8fGYtvEZoB45IO7MwaFyOIQg=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:87:75:31:d6:80:24:6d:d6:fc:ab:4d:27:9a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=3cb4d4d5bbe08fce1dd9c03a2d1381680070d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:4f:cb:cd:d1:99:bd:38:3f:46:76:b7:3b:
1d:64:88:35:ce:51:6f:16:3d:83:9f:bd:84:38:3e:
29:a5:03:a4:95:7a:e1:9b:6d:b5:a2:73:99:1e:4e:
e0:fb:92:24:fa:12:84:8b:f4:3b:29:c5:e3:e1:17:
91:d5:e2:e3:f5:78:cc:2d:99:ad:ea:cb:64:20:41:
f7:93:50:4e:d0:94:02:64:ba:b2:92:71:e6:37:4c:
aa:f2:ad:21:ee:7d:26:b7:de:61:f0:41:c2:5c:eb:
b1:43:fc:f7:a6:71:68:c8:b1:39:3d:b8:93:f7:77:
0f:30:a6:cb:c3:73:ba:88:f9:9a:c7:c0:f8:c8:47:
a3:2b:3c:00:67:7c:11:b8:36:80:5a:25:cc:7a:09:
ad:e5:15:73:94:5e:f0:04:1a:aa:4b:ac:f6:25:de:
21:75:fc:6f:61:69:e0:2a:19:8a:40:79:1c:81:84:
d0:8e:62:74:f6:75:67:75:a0:42:74:bc:21:77:5a:
3f:e6:9d:c5:32:d8:b3:65:30:29:b7:89:bc:ec:d9:
07:9a:49:6d:ed:4c:dc:dd:e5:ac:8f:a9:63:f4:80:
aa:cb:01:15:4c:ee:2d:71:95:72:0f:ea:73:89:6d:
93:35:df:5a:fe:2f:16:3c:e4:b6:69:f0:b3:0d:62:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:D4:D5:BB:E0:8F:CE:1D:D9:C0:3A:2D:13:81:68:00:70:D2:51
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:db:55:3a:dc:75:ce:f2:70:5a:c2:f0:30:f6:5d:ae:7f:
1e:51:21:c7:03:84:94:99:2e:6d:5a:56:cf:8a:ad:aa:59:fb:
16:ab:6c:1a:c4:78:91:e1:93:40:97:59:c6:d1:ca:4a:3c:d3:
d2:92:bd:be:a5:f7:d6:0d:e0:72:7b:ce:8d:74:0f:ba:3a:22:
25:55:99:41:61:84:3c:2b:6c:14:6b:42:a4:74:9d:d1:a6:68:
f6:3c:a5:4e:60:3d:52:64:2f:3b:c6:a1:e8:ce:fa:1d:26:0a:
99:b7:92:5c:26:38:1e:4d:b3:21:25:a0:5f:80:5c:2e:2e:5f:
e7:18:a8:ac:2d:33:5b:9b:d6:cb:4a:30:ea:88:e8:29:61:dd:
de:94:a2:15:3d:b1:09:e1:11:08:73:84:bc:3e:a8:79:c5:61:
b1:bf:73:1c:89:fe:f7:8a:87:c3:80:1f:74:82:b8:92:08:56:
e3:09:26:8a:a8:19:d5:35:5e:43:b8:f4:6b:6f:ff:2e:f6:64:
4d:38:af:61:f8:d6:a8:6a:d0:1f:5a:9d:01:f0:f0:4b:18:bc:
bb:eb:46:20:19:75:7f:51:75:49:6a:a6:74:46:ff:64:c5:64:
cf:7b:fd:86:32:10:39:03:d4:32:aa:00:0e:12:60:00:24:7b:
9c:7c:be:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4d1MdaAJG3W/KtNJ5q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjYwMzAxMTgwMDU4WhcNMjYwMzAyMTgwMDU4WjAzMTEwLwYDVQQD
EygzY2I0ZDRkNWJiZTA4ZmNlMWRkOWMwM2EyZDEzODE2ODAwNzBkMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWVPy83Rmb04P0Z2tzsdZIg1zlFv
Fj2Dn72EOD4ppQOklXrhm221onOZHk7g+5Ik+hKEi/Q7KcXj4ReR1eLj9XjMLZmt
6stkIEH3k1BO0JQCZLqyknHmN0yq8q0h7n0mt95h8EHCXOuxQ/z3pnFoyLE5PbiT
93cPMKbLw3O6iPmax8D4yEejKzwAZ3wRuDaAWiXMegmt5RVzlF7wBBqqS6z2Jd4h
dfxvYWngKhmKQHkcgYTQjmJ09nVndaBCdLwhd1o/5p3FMtizZTApt4m87NkHmklt
7Uzc3eWsj6lj9ICqywEVTO4tcZVyD+pziW2TNd9a/i8WPOS2afCzDWIcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy01NW74I/OHdnAOi0TgWgAcNJRMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlDbVTrc
dc7ycFrC8DD2Xa5/HlEhxwOElJkubVpWz4qtqln7FqtsGsR4keGTQJdZxtHKSjzT
0pK9vqX31g3gcnvOjXQPujoiJVWZQWGEPCtsFGtCpHSd0aZo9jylTmA9UmQvO8ah
6M76HSYKmbeSXCY4Hk2zISWgX4BcLi5f5xiorC0zW5vWy0ow6ojoKWHd3pSiFT2x
CeERCHOEvD6oecVhsb9zHIn+94qHw4AfdIK4kghW4wkmiqgZ1TVeQ7j0a2//LvZk
TTivYfjWqGrQH1qdAfDwSxi8u+tGIBl1f1F1SWqmdEb/ZMVkz3v9hjIQOQPUMqoA
DhJgACR7nHy+Ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:15 2026 by rpki-client