Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: b0TMqveWplenwxW2z1vL/aBuaHmAXgMeZwG/0i4Qw8Y=
Subject key identifier: 42:8E:21:44:93:62:89:B6:93:1E:0D:4C:37:79:08:16:D5:80:98:69
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01A0C2C45A73831D19020328946558E4CBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1A8C
Signing time: Mon 21 Sep 2026 07:00:43 +0000
Manifest this update: Mon 21 Sep 2026 07:00:43 +0000
Manifest next update: Tue 22 Sep 2026 07:00:43 +0000
Files and hashes: 1: 2NHSSwcRqAg5h1KSDvlHSrP16hI.roa (hash: W0kIRA6Bn/HwnDzsDg7Zh6sAWSTMGLVr3BmkUOcNkHI=)
2: KlPEOGtlB3i05KG_kS3O2_AxuUc.roa (hash: MxRgz1VBuPKPnUX3wXFuY/WvaJ5U9mjoah8+v68ieWM=)
3: Lh4m1yfrhbA9OhKUv9soMR7SdiQ.roa (hash: lTCbF+tPDgNaPIPuxDLbC/MLavArZ9ecyqxSW8cZmUg=)
4: NQ5fx8Vj7zTwgcH3qj0K3MhSX4Q.roa (hash: FLRBjgpOvWclK3o6st9UYrpl6cZ5Vdq8t4ADaZwlYp8=)
5: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: gA0KASOXeHLpWOdDMplQRzzX6zx4YAuMqJVQ/UIe/Kw=)
6: XVIaKNteZSID-e1PzDPbYatUIBw.roa (hash: hjDKHF3OYxsYJS8bfNV4SaO3e4HM/h4k2Yqo6Mi0dlc=)
7: YwZpEciALbahxIf7Aq34l4yS01s.roa (hash: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=)
8: rNl3GrKAiyF2BcSc2_IXnXMZ4nY.asa (hash: Ic4H565CG4bWncpk17hiqnH17aKVOlYYnBTl/o3u9LQ=)
9: z-3zk1_OQa6LocQjIWc_jBiDQPs.roa (hash: +2Sq/Vscqy2g/4y9SzeDVY+m+5S1/3oA5VFQwtD+YiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:5a:73:83:1d:19:02:03:28:94:65:58:e4:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 21 07:00:43 2026 GMT
Not After : Sep 22 07:00:43 2026 GMT
Subject: CN=428e2144936289b6931e0d4c37790816d5809869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c3:28:88:26:7b:1f:66:32:8e:91:a7:b3:
bf:fe:39:a4:ee:af:ea:f3:0b:81:d7:49:1a:f7:2b:
37:2b:0f:fb:af:d5:a5:52:e5:70:59:3d:57:b8:d0:
ae:bb:41:10:8b:19:14:05:6a:3a:0d:6b:d1:9e:95:
3c:06:01:85:3a:51:bf:5f:72:ee:d8:40:69:8c:17:
64:27:40:f3:b1:2c:68:a7:b0:b4:34:d4:81:11:cb:
69:cc:93:b2:39:03:8e:ad:aa:02:ae:56:90:21:43:
fc:8c:2b:73:89:64:b7:55:68:e1:f1:30:97:9a:b6:
32:88:ca:5e:23:11:ea:49:a4:ad:be:ad:44:13:37:
ba:c7:0f:91:f0:ac:2c:00:11:98:ff:84:af:46:4c:
e4:00:9f:78:98:e3:8a:1c:06:cb:e5:c6:db:c8:fb:
b9:d0:95:b3:71:5f:5c:d8:af:3d:d0:f7:e3:b2:64:
0b:db:a1:bd:78:51:ea:f0:4d:fa:92:c1:db:7f:61:
7b:7a:24:06:82:ca:e6:c7:f6:11:cf:e8:6e:3c:8a:
8c:bb:2a:89:37:54:7a:0c:9a:6e:55:48:59:bb:36:
d8:22:39:1f:f0:bd:27:01:2c:ba:9c:39:b2:7a:88:
4a:6a:14:66:6c:b5:59:c9:5c:6f:cc:cd:97:4a:23:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:21:44:93:62:89:B6:93:1E:0D:4C:37:79:08:16:D5:80:98:69
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8d:5e:62:e7:51:3b:90:98:42:3d:55:e2:8c:50:13:9e:64:
39:4a:77:5f:2d:21:99:ed:6a:3b:49:f2:f0:8f:42:b5:4f:c5:
48:e1:d9:82:98:02:af:64:1a:1c:11:6d:79:75:a0:be:1c:48:
9d:7e:6a:be:56:aa:cd:7d:94:56:ad:a1:c1:1a:fb:fc:eb:f0:
c3:6d:f0:e1:0b:ef:4a:f1:00:67:5c:ef:18:0a:90:d4:06:35:
a4:2e:eb:b7:17:e8:0e:e8:19:70:b1:4d:25:06:95:b2:cc:a5:
d8:34:d5:5a:29:84:90:8f:f4:fc:13:e2:20:c1:c3:55:c7:12:
a7:ae:d8:58:47:0d:6d:ac:6e:22:45:a5:03:eb:88:79:52:3e:
46:5a:48:07:66:06:e1:5c:d1:e9:e9:ab:44:13:b4:ab:67:bb:
6a:68:a3:d8:22:04:a8:62:18:f6:13:33:ae:6d:51:43:c0:82:
10:f1:8a:85:35:03:43:0a:a8:82:af:fe:38:ae:05:54:a7:9a:
2f:09:6a:f6:c8:df:cc:ce:79:11:b0:9a:c1:13:1a:e5:4e:d8:
2d:86:f0:53:5f:6c:cf:d7:3e:28:9e:02:af:35:ce:60:e0:79:
62:8c:fe:28:9e:ab:6e:29:12:20:a2:7e:72:7b:5a:9e:35:37:
b0:c5:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:41 2026 by rpki-client