Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: kYLCrojzRA5xW6RIfGW04R+R89b514t8CKeI4ligPSY=
Subject key identifier: B0:61:A1:5F:13:EF:91:CD:16:45:F6:01:B5:0B:7E:C9:3E:13:B0:AA
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019EBF9118518573DBDDCAB84D5C37695FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 197F
Signing time: Sat 13 Jun 2026 06:00:17 +0000
Manifest this update: Sat 13 Jun 2026 06:00:17 +0000
Manifest next update: Sun 14 Jun 2026 06:00:17 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: moGV7iBKtMiC6JxPW9jgw8jnUxaunIuKlVXYU9PHiDU=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:18:51:85:73:db:dd:ca:b8:4d:5c:37:69:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jun 13 06:00:17 2026 GMT
Not After : Jun 14 06:00:17 2026 GMT
Subject: CN=b061a15f13ef91cd1645f601b50b7ec93e13b0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:01:f7:ed:cb:50:52:4a:37:d1:0f:db:37:
30:60:52:51:0c:68:8a:32:f6:f4:8d:18:c6:21:d0:
d8:65:4c:c3:20:16:a5:42:82:bd:0b:b2:2c:ab:f4:
96:7e:a1:15:c2:4c:b5:1f:2a:72:2a:7a:c6:c7:1c:
7a:61:6a:1f:84:b2:55:58:29:ca:e6:f0:e8:84:d6:
87:5d:6b:f2:98:8f:57:5d:0f:f0:30:96:c7:0e:a2:
60:5c:e2:33:67:ef:df:cd:53:d1:c9:5b:9f:f2:6f:
10:ef:9b:30:cc:a5:21:7a:4e:16:b1:00:ed:a1:95:
4d:82:38:88:3d:60:90:3b:b1:fa:f9:fe:9e:70:8b:
b3:fc:8c:05:36:90:d7:07:4e:7e:05:80:2f:d6:98:
23:61:f7:df:8c:b8:7b:99:bb:40:dd:48:01:3f:17:
41:4c:f7:fb:6c:3e:b9:93:fa:18:fc:69:bd:5c:4e:
a5:db:68:e2:5c:f9:37:0e:29:d1:46:d0:e2:59:58:
11:5d:83:b6:17:2f:c5:d2:a8:a3:ea:71:83:39:23:
dc:ef:61:2f:c4:89:c5:50:7d:61:12:1e:4e:04:4d:
e5:f4:33:69:91:71:cd:38:10:3c:1e:37:f4:ae:34:
3e:a2:01:8b:fd:75:4e:58:7d:3c:34:07:44:1c:db:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:A1:5F:13:EF:91:CD:16:45:F6:01:B5:0B:7E:C9:3E:13:B0:AA
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:e1:1f:e4:a7:3e:4b:9d:c5:85:ba:62:b5:2c:09:7b:16:
e3:5e:b7:ca:ea:13:69:5f:4e:bb:24:22:46:cc:7b:44:68:89:
22:e2:27:fb:78:70:39:4c:1c:c9:0d:70:3b:51:61:bd:ad:96:
7e:6b:f0:f9:40:3b:e8:9e:4a:9c:44:41:bf:8e:c3:94:be:4f:
14:8b:ad:fe:42:e4:66:67:dc:04:66:46:45:cf:d9:9b:65:9d:
4a:65:c8:c0:4f:6b:14:f8:75:29:23:08:5f:1d:3e:ad:01:85:
36:ce:9d:a2:48:a5:24:a5:1c:6f:0e:b9:28:d4:27:c9:ef:29:
85:a2:0a:9c:d9:cb:67:41:b9:aa:8f:4d:6f:09:35:e2:6a:0b:
c8:24:5f:7a:df:80:22:75:d9:30:d9:4f:c8:31:e6:41:ee:0d:
8c:82:a1:99:3c:32:77:8b:31:9e:97:a9:fb:10:69:b6:af:60:
b5:66:d5:95:9d:2a:fa:a7:8d:a8:b6:d4:bb:14:9b:f4:b1:dd:
57:52:e2:12:04:4a:4e:ad:52:99:7a:18:c6:54:bd:d8:c6:9c:
54:2b:3a:4a:1c:e4:89:cd:55:52:d7:6a:03:4d:78:79:6a:d6:
f1:22:b0:cb:b9:ad:21:15:ba:9e:fa:7f:b9:1b:30:ab:7d:44:
d8:b2:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:01 2026 by rpki-client