Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: WPzvhy9QfA4oJXtX7pF55NtuKshZcbdGtPXGfOOrbDM=
Subject key identifier: 01:11:37:7A:2D:7F:8C:14:ED:DC:47:D6:8A:9A:97:D3:DE:62:E1:1B
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 019D28843110F7DEF72DB14C0687727F14EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 1186
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (hash: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: mW7CSOCGBZgOqpz/OM7+Ptu1OeYfao/W8NnVvS9O3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:31:10:f7:de:f7:2d:b1:4c:06:87:72:7f:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=0111377a2d7f8c14eddc47d68a9a97d3de62e11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:5f:1a:a9:5f:4f:b7:c2:a5:20:ca:46:fe:
a8:57:33:50:39:2d:2f:eb:a0:ed:a7:8e:67:02:87:
e9:9b:77:fd:f7:46:70:27:9c:02:7a:08:52:37:b1:
ec:5f:52:1e:0c:0a:0d:9e:fe:2c:e5:3b:04:66:f2:
39:10:5d:05:8d:01:32:08:79:05:ba:cc:d9:8a:45:
de:98:54:c0:b7:dc:5d:91:46:b6:19:1a:30:e8:81:
5b:c1:1b:ab:64:06:6e:66:bf:a8:ae:84:f0:19:78:
05:ae:68:e5:0e:b9:6b:f3:bf:93:2e:01:cd:ac:de:
56:57:dd:e7:5a:71:d3:23:e0:77:3f:77:24:d8:54:
bd:cf:17:0b:8d:29:dd:3b:93:34:73:06:c7:ea:43:
ce:a9:e6:02:be:96:09:a6:72:19:70:29:04:8a:1d:
2c:a9:78:32:c7:fc:97:45:c1:ab:04:1f:d9:64:11:
d0:79:7b:05:90:a2:5e:32:a2:73:86:7f:f9:e4:a7:
8e:02:bb:d0:95:b8:b3:71:44:08:fa:b8:d0:ac:78:
c2:24:ad:4c:3a:73:bd:14:56:f4:d3:f9:96:48:23:
06:aa:01:f9:6b:16:3f:ac:a2:0e:e9:54:63:d4:2f:
c6:2f:31:48:59:ed:1d:ee:72:cb:bd:dc:86:bf:5d:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:37:7A:2D:7F:8C:14:ED:DC:47:D6:8A:9A:97:D3:DE:62:E1:1B
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:99:2c:7f:34:4c:47:53:69:04:65:59:8c:a1:b9:d3:e7:9f:
34:c6:20:76:71:95:14:d3:f8:2e:c1:1e:e0:68:41:f0:2f:83:
a8:a7:37:8d:a5:c1:b5:2c:ee:4d:fb:ee:9b:88:b9:8a:7f:4d:
7a:aa:bd:9d:e0:4c:2b:9e:f4:d2:b9:b1:94:15:12:54:4d:66:
3d:4e:33:b3:de:41:46:5a:7c:db:5f:1e:6f:fa:11:f1:e4:f0:
e9:a2:8f:83:49:7e:0b:f5:4b:48:86:6f:72:33:75:13:80:d5:
56:15:dc:5e:f7:95:12:5a:5f:24:63:11:54:44:6e:00:3f:4a:
f1:5e:43:e3:0d:a3:86:4f:41:9d:04:31:ec:44:06:93:84:7a:
c9:9c:99:ec:9e:f0:be:1e:b4:02:9f:d1:c4:e8:d5:ee:88:ab:
fa:74:55:d8:9c:5f:d0:75:df:0e:c0:a7:d7:dd:e3:94:31:07:
68:68:0b:ea:22:ef:8d:89:0a:0c:95:ec:71:14:5c:cf:44:56:
aa:c1:97:e4:19:da:10:24:41:50:a3:40:9f:8a:6b:e5:fa:16:
ed:6d:d3:6e:e8:32:50:eb:2a:6d:a6:9f:8c:20:e9:47:0c:a0:
2c:91:cb:49:fc:ca:89:0e:a0:aa:30:7c:95:46:0e:09:de:cc:
a9:53:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:59 2026 by rpki-client