Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: gwo/kWQbrQVMdylAdl4gyCFvZa/eiMpjI1cQTDBoLik=
Subject key identifier: 1A:A6:00:28:42:AD:B6:CA:D5:BE:56:B4:CC:0D:60:66:99:1C:E6:25
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019DA3AED260EC4B5316172EB0C039B1864B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 18EC
Signing time: Sun 19 Apr 2026 03:00:36 +0000
Manifest this update: Sun 19 Apr 2026 03:00:36 +0000
Manifest next update: Mon 20 Apr 2026 03:00:36 +0000
Files and hashes: 1: 59E_pBHuOOWdiE37ftfZgTACrjg.roa (hash: wZxavqeLHdj5qCOpHNZLKUOBtGFYxuAkYSqaSAQ643U=)
2: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: YihLnBbqac6qhHMtNM2ZaaUjIeqw/8GKD22oFlp1Wx8=)
3: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
4: gwfvHd9vGQ-YayDB4JMmJ6Zoy-k.roa (hash: JXFha1HpeDKqZ6dndv5E6MFGVWN5nIxgaGNdqYj6mdM=)
5: jsXELPdejHRc_StksmQBdjGf48w.roa (hash: 0hTs4mivA0cGoX4BspgxAsBIP4dOaRrxUzvBLZAMeTs=)
6: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
7: xgwdWJ3OwBr9zCt1II-HtOKtb_g.roa (hash: LI07T8x4WOMtmCDk/CQyntDelPjiSN5ovqKx6m4pWV0=)
8: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:d2:60:ec:4b:53:16:17:2e:b0:c0:39:b1:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Apr 19 03:00:36 2026 GMT
Not After : Apr 20 03:00:36 2026 GMT
Subject: CN=1aa6002842adb6cad5be56b4cc0d6066991ce625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:7e:54:d4:95:95:72:ed:54:b9:10:b0:85:
16:d8:ef:7f:c3:23:cf:af:88:5d:f0:cb:c4:24:81:
62:a3:84:49:65:a2:69:dd:05:38:5e:2f:79:c2:fd:
34:b9:5b:3c:15:77:b5:46:55:58:9f:49:19:3c:32:
bb:28:91:1b:30:15:d6:30:b1:d2:23:16:d0:78:f3:
f5:a5:43:47:89:29:cc:87:73:a4:0c:a6:33:6f:99:
6a:92:cb:5a:51:8f:27:38:dd:ed:4f:79:89:e4:16:
c1:e2:97:fd:37:fe:0a:ce:05:c7:ec:7e:23:d2:ab:
bc:20:6a:6f:db:be:71:b1:cd:a1:b7:34:9f:15:97:
63:40:9d:2d:e9:8c:d9:56:63:d7:03:e6:9c:d1:e9:
21:3c:ab:61:ac:eb:d6:9b:3f:01:db:de:52:68:24:
32:0d:b6:ad:8c:09:b0:04:8d:53:9d:d0:47:da:ea:
18:cb:3c:18:e0:bf:24:72:b9:c7:20:8c:b6:66:cd:
68:cc:30:82:71:81:8b:2a:4b:d6:f7:ce:8d:4e:4b:
bb:b8:51:7a:e1:74:70:2d:80:2a:0d:dc:f4:99:04:
14:8e:d6:db:16:3c:ef:ab:94:c3:89:ed:ab:93:2a:
85:bd:b2:bb:1b:eb:df:22:01:e2:df:63:81:7b:f6:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:00:28:42:AD:B6:CA:D5:BE:56:B4:CC:0D:60:66:99:1C:E6:25
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:61:e6:8d:a6:03:07:99:bb:20:1a:c7:f7:d5:c0:3c:33:a3:
1b:4d:c6:d7:2a:d0:95:ee:4d:31:32:0d:e4:10:cd:3d:61:c6:
39:b1:03:b1:0e:8d:8a:b4:d2:da:57:56:6a:ae:14:f3:35:b1:
98:15:96:4c:92:1b:59:28:d9:d9:78:ad:84:68:86:da:78:7c:
2b:93:10:2f:77:6f:19:31:27:1e:95:59:7f:e1:4a:d5:0d:fb:
99:a0:0f:c5:f8:12:ae:1a:96:ef:fd:c4:f9:92:d6:48:d9:e1:
e5:8a:79:5e:ad:12:ef:89:1e:d0:f2:8e:6c:ba:3c:39:cb:f7:
ab:13:83:94:51:d5:4c:c0:01:07:d2:64:a6:32:bc:34:e8:7b:
a8:3f:8a:6e:01:4d:02:df:63:7d:2c:75:35:ce:5a:b4:12:d8:
b2:5f:f6:5e:2b:93:a2:88:4c:83:70:db:b3:d9:95:90:93:c9:
f9:0a:b5:38:e6:f0:68:0a:04:2a:d4:7b:6f:96:3b:3e:ab:77:
79:86:d8:70:74:fa:ab:84:da:60:3e:98:6c:ac:bc:1e:55:ab:
5d:20:6b:ad:df:c5:7d:6f:2a:12:6e:cf:ce:d0:74:21:b7:77:
6c:3f:37:3a:72:bd:58:8b:7a:f8:3d:10:d7:33:bf:4a:22:b3:
1f:62:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:55 2026 by rpki-client